api-us-east-1.nd.nudatasecurity.com

- Mastercard Technologies Canada ULC -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 0e:ff:35:03:f5:0e:40:63:63:f2:bd:34:4c:c5:53:68 was issued on by DigiCert Inc.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mastercard Technologies Canada ULC

Company registration number: BC1146475
Organization: Mastercard Technologies Canada ULC
Organization unit: Operations
State / Province: British Columbia
Locality: Vancouver
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:ff:35:03:f5:0e:40:63:63:f2:bd:34:4c:c5:53:68
Serial Number (int): 19934302921149740779842797779825283944
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d5:9b:39:65:09:7e:82:fa:70:f5:b9:63:fb:af:4a:b0:b3:9a:2c:72
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 10:e7:11:ec:90:98:eb:62:6f:75:d0:69:f3:20:59:b8:97:01:48:76
Fingerprint (sha256): 0b:2c:a1:a5:6d:48:51:4b:30:12:d4:67:63:24:be:b0:78:d3:9c:86:aa:ba:13:27:de:7d:61:f2:5e:12:f7:ad

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl

Check the revocation status for certificate api-us-east-1.nd.nudatasecurity.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-us-east-1.nd.nudatasecurity.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-us-east-1.nd.nudatasecurity.com
nd.thinkstockphotos.com
api-us-west-2.nucaptcha.com
sierra.kilo.ckapis.com
nd.wireimage.com
nd.espaws.com
api-wfc.nd.nudatasecurity.com
nd.filmmagic.com
nd.thinkstock.com
nd.gettyimages.com
akapi-us-east-1.ndsopaapl.nudatasecurity.com
api-us-east-1.nucaptcha.com
akapi-us-west-2.ndsopaapl.nudatasecurity.com
nd.istockphoto.com
fc.kohls.com
api-us-west-2.nd.mastercard.com
api-us-east-1.nd.mastercard.com
api-eu-west-1.nd.mastercard.com

Other certificates including the domain name nudatasecurity.com

(limited to 100 certificates)
service-ice.idcx-qa-aion.nudatasecurity.com
api-us-east-1.nd.nudatasecurity.com
ndcdms-penetration-us-east-1.ndsdev.nudatasecurity.com
ndcdms-mtf-us-east-1.lpstg.nudatasecurity.com
ndelms-us-west-2.ndsuat.nudatasecurity.com
api-us-east-1.nd-mtf.nudatasecurity.com
sip.ca1.hostedlync.com
ssl003.insnw.net
sip.ca1.hostedlync.com
service-ops-us-east-1.aion-dev.nudatasecurity.com
beapi-eu-west-1.ndsopob.nudatasecurity.com
api.aion-dev.nudatasecurity.com
service-config-dev-us-east-1.p2.lpstg.nudatasecurity.com
ndsoa-us-east-1.ndsopew.nudatasecurity.com
jenkins-us-east-1.nucaptcha.nudatasecurity.com
dashboard-us-east-1.ndsopew.nudatasecurity.com
ssl003.insnw.net
api.td-dev-aion.nudatasecurity.com
api-wfc-stg-ga.nd.nudatasecurity.com
jenkins-us-west-2.ndsopck.nudatasecurity.com
beapi.us-east-1.ndsuat.nudatasecurity.com
service-demo-aion-yt.aion-dev.nudatasecurity.com
beapi-us-west-2.ndsopck.nudatasecurity.com
dashboard.us-east-2.ndcc123.ndsonica.nudatasecurity.com
ndapi-us-east-1.ndsprod.nudatasecurity.com
sip.ca1.hostedlync.com
ndsoa-us-east-1.ndsqa.nudatasecurity.com
*.nd.nudatasecurity.com
ndcounterms-us-west-2.ndsopck.nudatasecurity.com
ndsoa-us-east-1.ndsprod.nudatasecurity.com
ssl003.insnw.net
nduseragentms-us-east-1.ndsdev.nudatasecurity.com
api-eu-west-1.ato-dev-aion.nudatasecurity.com
saad3.us-east-2.ndcc123.ndsonica.nudatasecurity.com
mitsuo-iam-us-east-1.p2.lpstg.nudatasecurity.com
ndudidms-us-east-1.lpstg.nudatasecurity.com
bogdan-tst-service-demo.p2.lpstg.nudatasecurity.com
key1-us-east-1.ndcc123.ndsonica.nudatasecurity.com
api-ap-southeast-1.automation-dev-aion.nudatasecurity.com
service-ops.aion-dev.nudatasecurity.com
mitsuo-iam.p2.lpstg.nudatasecurity.com
nudevice-us-east-1.p2.lpstg.nudatasecurity.com
*.ndsopck.nudatasecurity.com
api-us-west-2.nd-mtf.lpstg.nudatasecurity.com
service-config-dev-test.p2.lpstg.nudatasecurity.com
nudevice-test.p2.lpstg.nudatasecurity.com
ssl003.insnw.net
sip.ca1.hostedlync.com
ndsessionms-us-east-1.ndsqa.nudatasecurity.com
dashboard-us-east-1.ndsopew.nudatasecurity.com
ssl003.insnw.net
*.nudatasecurity.com
key-internal-us-west-2.ndsprod.nudatasecurity.com
nduseragentms-eu-west-1.ndsopob.nudatasecurity.com
beapi-eu-west-1.nucaptcha.nudatasecurity.com
api.automation-dev-aion.nudatasecurity.com
console.aion.nudatasecurity.com
ssl003.insnw.net
ndcounterms-us-east-1.ndcc123.ndsonica.nudatasecurity.com
ndqa-us-east-1.ndsopew.nudatasecurity.com
beapi-ap-southeast-2.ndsprod.nudatasecurity.com
saad5.us-east-2.ndcc123.ndsonica.nudatasecurity.com
sun-serv-iam.p2.lpstg.nudatasecurity.com
nudevice.p2.lpstg.nudatasecurity.com
ndcdms-dev-us-east-1.lpstg.nudatasecurity.com
service-ice.idcx-qa-aion.nudatasecurity.com
*.nd.nudatasecurity.com
ndpe-01.nd.nudatasecurity.com
sip.ca1.hostedlync.com
api-us-east-1-us-east-1.aion-qa.nudatasecurity.com
ndsoa-us-east-1.lpstg.nudatasecurity.com
key-internal-us-east-1.lpstg.nudatasecurity.com
ndcaptchams-us-west-2.ndsuat.nudatasecurity.com
api.ato-dev-aion.nudatasecurity.com
ndqa-us-east-1.ndsuat.nudatasecurity.com
beapi-us-east-1.ndsopma.nudatasecurity.com
api-eu-west-1.td-dev-aion.nudatasecurity.com
jenkins.intra.nudatasecurity.com
ndcdms-dev-us-east-1.ndsqa.nudatasecurity.com
nnl-admin-us-east-1.fido-dev.nudatasecurity.com
ndpe-01.nd.nudatasecurity.com
api-us-east-1.nd.nudatasecurity.com
service-iam.p2.lpstg.nudatasecurity.com
duo.intra.nudatasecurity.com
ssl003.insnw.net
key1-us-west-2.ndcc123.ndsonica.nudatasecurity.com
service-config-dev-test.p2.lpstg.nudatasecurity.com
asgard.ndsopck.nudatasecurity.com
*.nd.nudatasecurity.com
jenkins-us-west-2.ndsopck.nudatasecurity.com
ssl003.insnw.net
saad800.us-east-2.ndcc123.ndsonica.nudatasecurity.com
ssl003.insnw.net
api-wfc.nd.nudatasecurity.com
ndapi-us-west-2.ndsprod.nudatasecurity.com
service-config-dev-test-us-east-1.p2.lpstg.nudatasecurity.com
console-demo-assets.aion-dev.nudatasecurity.com
api-us-east-1-us-east-1.aion-dev.nudatasecurity.com
nduseragentms-us-east-1.ndsopew.nudatasecurity.com
api-us-east-1.nd.nudatasecurity.com

Certificate

The complete raw certificate details for api-us-east-1.nd.nudatasecurity.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJZDCCCEygAwIBAgIQDv81A/UOQGNj8r00TMVTaDANBgkqhkiG9w0BAQsFADB1
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk
IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTE4MDUwOTAwMDAwMFoXDTIwMDMxODEy
MDAwMFowggEXMR0wGwYDVQQPDBRQcml2YXRlIE9yZ2FuaXphdGlvbjETMBEGCysG
AQQBgjc8AgEDEwJDQTEhMB8GCysGAQQBgjc8AgECExBCcml0aXNoIENvbHVtYmlh
MRIwEAYDVQQFEwlCQzExNDY0NzUxCzAJBgNVBAYTAkNBMRkwFwYDVQQIExBCcml0
aXNoIENvbHVtYmlhMRIwEAYDVQQHEwlWYW5jb3V2ZXIxKzApBgNVBAoTIk1hc3Rl
cmNhcmQgVGVjaG5vbG9naWVzIENhbmFkYSBVTEMxEzARBgNVBAsTCk9wZXJhdGlv
bnMxLDAqBgNVBAMTI2FwaS11cy1lYXN0LTEubmQubnVkYXRhc2VjdXJpdHkuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gKrMmt0CCVnfP7SZJ1+
Pl69LURvtKMARHNlaX8N7LLKnnB3/ZpoBEv+pCReMaAq1rIIp/qcGwOTYxb28CnX
dvIzWL1Rrxr4JMqPEtiqR0qXTmiU0JvXpD6NJYM2wH9k5rW2fyKP0hk+OBzGY6pU
WFcdxQsAJC1TGLr+g51QPZ+c7Ey/KKxfZDU1Tcn9YKX+/T5D8gP9eJsLMUXEasXM
dB4bggD8UaY6ziYh4y2bQsLorqJ/QzX8K5bY7T0LCkqjGwG3YNucn47P9DfnTxcm
VDrfuM3S6dR4LoUEvC2j3hJoDjST6EldlMV7DdA0TShAIhQE3bQUbRbgHleduJOM
2QIDAQABo4IFSjCCBUYwHwYDVR0jBBgwFoAUPdNQpdagre7zSmAKZdMh1Pj41g8w
HQYDVR0OBBYEFNWbOWUJfoL6cPW5Y/uvSrCzmixyMIIB9wYDVR0RBIIB7jCCAeqC
I2FwaS11cy1lYXN0LTEubmQubnVkYXRhc2VjdXJpdHkuY29tghduZC50aGlua3N0
b2NrcGhvdG9zLmNvbYIbYXBpLXVzLXdlc3QtMi5udWNhcHRjaGEuY29tghZzaWVy
cmEua2lsby5ja2FwaXMuY29tghBuZC53aXJlaW1hZ2UuY29tgg1uZC5lc3Bhd3Mu
Y29tgh1hcGktd2ZjLm5kLm51ZGF0YXNlY3VyaXR5LmNvbYIQbmQuZmlsbW1hZ2lj
LmNvbYIRbmQudGhpbmtzdG9jay5jb22CEm5kLmdldHR5aW1hZ2VzLmNvbYIsYWth
cGktdXMtZWFzdC0xLm5kc29wYWFwbC5udWRhdGFzZWN1cml0eS5jb22CG2FwaS11
cy1lYXN0LTEubnVjYXB0Y2hhLmNvbYIsYWthcGktdXMtd2VzdC0yLm5kc29wYWFw
bC5udWRhdGFzZWN1cml0eS5jb22CEm5kLmlzdG9ja3Bob3RvLmNvbYIMZmMua29o
bHMuY29tgh9hcGktdXMtd2VzdC0yLm5kLm1hc3RlcmNhcmQuY29tgh9hcGktdXMt
ZWFzdC0xLm5kLm1hc3RlcmNhcmQuY29tgh9hcGktZXUtd2VzdC0xLm5kLm1hc3Rl
cmNhcmQuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNlcnQu
Y29tL3NoYTItZXYtc2VydmVyLWcyLmNybDA0oDKgMIYuaHR0cDovL2NybDQuZGln
aWNlcnQuY29tL3NoYTItZXYtc2VydmVyLWcyLmNybDBLBgNVHSAERDBCMDcGCWCG
SAGG/WwCATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20v
Q1BTMAcGBWeBDAEBMIGIBggrBgEFBQcBAQR8MHowJAYIKwYBBQUHMAGGGGh0dHA6
Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBSBggrBgEFBQcwAoZGaHR0cDovL2NhY2VydHMu
ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkV4dGVuZGVkVmFsaWRhdGlvblNlcnZl
ckNBLmNydDAJBgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdwCk
uQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWNGWXpgAAAEAwBIMEYC
IQCA7X/Q29U/V+gxr3thofxas8AtaKUlbMC20uwamXmyeQIhAKkOJTYqnvCoSOwY
W0qT9K8odGPNidOToMF56vJRXNLqAHYAVhQGmi/XwuzT9eG9RLI+x0Z2ubyZEVzA
75SYVdaJ0N0AAAFjRll61AAABAMARzBFAiBbAaZdb5isCA3eCKHYFFXXc/HiIzxE
dfvcHx3jsHXuigIhAIIABhkaJjsRwNsePUgnmgpt4dfU1OKgoEOLboH7QIfzAHUA
u9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFjRll7TQAABAMARjBE
AiAY7lYCilNAyKQY+NzraA8gM7zswpdCLhsDmJAo9E0f3QIgU0NUN7PrgM6cGz8y
cXb9rkn+2UYqBCC6A+VehBU5GJ4wDQYJKoZIhvcNAQELBQADggEBAKPsM+C94ZU6
kXR+Ve1wv7rX7qiBpwNZ9fL75jg3uIb9AadfmvjBVo2bZAVPg2cBsMJVdWPYg/CN
D/s2+RPDOvhKqQ2o/nBYO7jJNJvHSZsRKemIWQ3D+ZZHywDdsY6RSRw4hhhdJf4F
a8tkkL83xJoAUvsaf8SoLlAatOiqMee1cQ4A8JvshkfMqAf09ZbfsszumzTZwwRK
h0ATE0UQCDHvy1N22RzNZoCN0KM1/B/08FEUZpxE2vY0cufk0e/QdiO9KCSvuytt
CdJ9yULJeaQV8kC1us+e276yj1kCbnKSpiOrq/iGQTVNispkMZ9PZfJmUzRx1J3B
R2VVgXcr9y8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gKrMmt0CCVnfP7SZJ1+
Pl69LURvtKMARHNlaX8N7LLKnnB3/ZpoBEv+pCReMaAq1rIIp/qcGwOTYxb28CnX
dvIzWL1Rrxr4JMqPEtiqR0qXTmiU0JvXpD6NJYM2wH9k5rW2fyKP0hk+OBzGY6pU
WFcdxQsAJC1TGLr+g51QPZ+c7Ey/KKxfZDU1Tcn9YKX+/T5D8gP9eJsLMUXEasXM
dB4bggD8UaY6ziYh4y2bQsLorqJ/QzX8K5bY7T0LCkqjGwG3YNucn47P9DfnTxcm
VDrfuM3S6dR4LoUEvC2j3hJoDjST6EldlMV7DdA0TShAIhQE3bQUbRbgHleduJOM
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19934302921149740779842797779825283944
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BC1146475'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vancouver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mastercard Technologies Canada ULC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-us-east-1.nd.nudatasecurity.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28026219706267380746580944385357094551723906239944072482381104201965688625145400958730874557164403785792391802114293504225377644550502013616480536178020360409126375312397104381843377136118806187442638557000307757916689897524303268076515022370803186256460166701272084775829717291157446747081306342072534940087682231405837043189069769029522637533995181354503967270165502677760810694706653038707397391879499027303838568523848589132738352016442894225338781282806195740741056970098987237577320856696625434718038788816686581591097858327457361175909208126949921227088819526443033858009653324069487183936165510280624198618329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d59b3965097e82fa70f5b963fbaf4ab0b39a2c72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (494 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-us-east-1.nd.nudatasecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nd.thinkstockphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-us-west-2.nucaptcha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierra.kilo.ckapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nd.wireimage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nd.espaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-wfc.nd.nudatasecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nd.filmmagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nd.thinkstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nd.gettyimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akapi-us-east-1.ndsopaapl.nudatasecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-us-east-1.nucaptcha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akapi-us-west-2.ndsopaapl.nudatasecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nd.istockphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fc.kohls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-us-west-2.nd.mastercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-us-east-1.nd.mastercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-eu-west-1.nd.mastercard.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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