netsdigi-service.nets.eu
- Nets A/S -
Issued by DigiCert SHA2 Extended Validation Server CA
About this certificate
This digital certificate with serial number 03:be:ca:e1:38:e5:a9:06:66:21:b4:c0:0d:d8:91:ab was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Nets A/S
Company registration number:
1018467735
Organization: Nets A/S
Organization unit: Database and Middleware
Organization: Nets A/S
Organization unit: Database and Middleware
Locality:
Ballerup
Country: DK
Country: DK
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:be:ca:e1:38:e5:a9:06:66:21:b4:c0:0d:d8:91:abSerial Number (int): 4978335281161670975696316720494449067
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: af:96:44:4a:5d:07:a9:0f:33:6c:94:8c:14:f9:b0:5b:dc:91:e4:f3
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f
Fingerprint (sha1): 7d:3b:ae:a3:44:4b:8d:68:d1:c3:61:35:b0:0f:d5:41:ca:48:67:f2
Fingerprint (sha256): 0b:4e:82:61:05:f4:d6:4b:d3:a2:0c:96:b9:86:2d:16:58:7d:b5:71:8e:d5:8f:32:11:ad:65:5c:43:d2:0b:f8
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl
Check the revocation status for certificate netsdigi-service.nets.eu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for netsdigi-service.nets.eu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
netsdigi-service.nets.eu
Other certificates including the domain name nets.eu
(limited to 100 certificates)
easy-status.developers.nets.eu
chipcard.ft.test.nets.eu
clearing-test.nets.eu
jamf.nets.eu
merchantapp.stacker-pp.nets.eu
incapsula.com
incapsula.com
incapsula.com
merchantapp.stacker-pp.nets.eu
*.mitid.nets.eu
easy-status.developers.nets.eu
netsmeeting.nets.eu
api-gateway-pp.nets.eu
CardholderMQ.nets.eu
www.ident-preprod1.nets.eu
easy-status.developers.nets.eu
easy-status.developers.nets.eu
wstest.payment.nets.eu
incapsula.com
ps.nets.eu
drift.bnaa.dk
incapsula.com
clara2.nets.eu
easy-status.developers.nets.eu
easy-status.developers.nets.eu
*.sap.nets.eu
easy-status.developers.nets.eu
dev.netaxept.nets.eu
lcmapi.nets.eu
incapsula.com
easy-status.developers.nets.eu
test2.merchantportal.nets.eu
easy-status.developers.nets.eu
api-identity-pp.nets.eu
pp-easyshop.nets.eu
acs.nets.eu
incapsula.com
incapsula.com
sandbox.naas-test1.nets.eu
ft.nets.eu
incapsula.com
incapsula.com
incapsula.com
easy-status.developers.nets.eu
auth.naas-test1.nets.eu
drift.bnaa.dk
easy-status.developers.nets.eu
easy-status.developers.nets.eu
test2online.nets.eu
test2online.nets.eu
acs.nets.eu
unifiedapi.nets.eu
netsdigi-service.nets.eu
dist.nets.eu
*.realtime247.nets.eu
incapsula.com
easyshop.nets.eu
office.nets.eu
easy-status.developers.nets.eu
ws.cards.nets.eu
grafana.naa.nets.eu
mpa-service-test.nets.eu
easy-status.developers.nets.eu
api-identity2.nets.eu
www.nets.eu
merchantportaldemo-preprod.nets.eu
sandbox.ps.nets.eu
easy-status.developers.nets.eu
incapsula.com
merchantreporting.nets.eu
investor.nets.eu
sts.id-test.nets.eu
incapsula.com
no1-bankart-online.realtime247-test.nets.eu
my-pp.nets.eu
incapsula.com
incapsula.com
beta.my.nets.eu
dist.nets.eu
incapsula.com
lcmapi-test.nets.eu
www.nets.eu
incapsula.com
wsgwtest.nets.eu
miscweb.nets.eu
www.nets.eu
easy-status.developers.nets.eu
easy-status.developers.nets.eu
no2-bankart-online.realtime247-test2.nets.eu
www.sign-preprod1.nets.eu
drift.bnaa.dk
easy-status.developers.nets.eu
nets-l2-ra.nets.eu
easy-status.developers.nets.eu
incapsula.com
vm-pwsmtp-1.nets.eu
clara2test.nets.eu
auth.naas-test1.nets.eu
incapsula.com
easy-status.developers.nets.eu
chipcard.ft.test.nets.eu
clearing-test.nets.eu
jamf.nets.eu
merchantapp.stacker-pp.nets.eu
incapsula.com
incapsula.com
incapsula.com
merchantapp.stacker-pp.nets.eu
*.mitid.nets.eu
easy-status.developers.nets.eu
netsmeeting.nets.eu
api-gateway-pp.nets.eu
CardholderMQ.nets.eu
www.ident-preprod1.nets.eu
easy-status.developers.nets.eu
easy-status.developers.nets.eu
wstest.payment.nets.eu
incapsula.com
ps.nets.eu
drift.bnaa.dk
incapsula.com
clara2.nets.eu
easy-status.developers.nets.eu
easy-status.developers.nets.eu
*.sap.nets.eu
easy-status.developers.nets.eu
dev.netaxept.nets.eu
lcmapi.nets.eu
incapsula.com
easy-status.developers.nets.eu
test2.merchantportal.nets.eu
easy-status.developers.nets.eu
api-identity-pp.nets.eu
pp-easyshop.nets.eu
acs.nets.eu
incapsula.com
incapsula.com
sandbox.naas-test1.nets.eu
ft.nets.eu
incapsula.com
incapsula.com
incapsula.com
easy-status.developers.nets.eu
auth.naas-test1.nets.eu
drift.bnaa.dk
easy-status.developers.nets.eu
easy-status.developers.nets.eu
test2online.nets.eu
test2online.nets.eu
acs.nets.eu
unifiedapi.nets.eu
netsdigi-service.nets.eu
dist.nets.eu
*.realtime247.nets.eu
incapsula.com
easyshop.nets.eu
office.nets.eu
easy-status.developers.nets.eu
ws.cards.nets.eu
grafana.naa.nets.eu
mpa-service-test.nets.eu
easy-status.developers.nets.eu
api-identity2.nets.eu
www.nets.eu
merchantportaldemo-preprod.nets.eu
sandbox.ps.nets.eu
easy-status.developers.nets.eu
incapsula.com
merchantreporting.nets.eu
investor.nets.eu
sts.id-test.nets.eu
incapsula.com
no1-bankart-online.realtime247-test.nets.eu
my-pp.nets.eu
incapsula.com
incapsula.com
beta.my.nets.eu
dist.nets.eu
incapsula.com
lcmapi-test.nets.eu
www.nets.eu
incapsula.com
wsgwtest.nets.eu
miscweb.nets.eu
www.nets.eu
easy-status.developers.nets.eu
easy-status.developers.nets.eu
no2-bankart-online.realtime247-test2.nets.eu
www.sign-preprod1.nets.eu
drift.bnaa.dk
easy-status.developers.nets.eu
nets-l2-ra.nets.eu
easy-status.developers.nets.eu
incapsula.com
vm-pwsmtp-1.nets.eu
clara2test.nets.eu
auth.naas-test1.nets.eu
incapsula.com
easy-status.developers.nets.eu
Certificate
The complete raw certificate details for netsdigi-service.nets.eu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIQA77K4TjlqQZmIbTADdiRqzANBgkqhkiG9w0BAQsFADB1 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTE4MDMxNjAwMDAwMFoXDTE5MDMyMTEy MDAwMFowgcExHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYB BAGCNzwCAQMTAkRLMRMwEQYDVQQFEwoxMDE4NDY3NzM1MQswCQYDVQQGEwJESzER MA8GA1UEBxMIQmFsbGVydXAxETAPBgNVBAoTCE5ldHMgQS9TMSAwHgYDVQQLExdE YXRhYmFzZSBhbmQgTWlkZGxld2FyZTEhMB8GA1UEAxMYbmV0c2RpZ2ktc2Vydmlj ZS5uZXRzLmV1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMbA8nZF U4sUP1M9UPGThubvTM+8DKG6Ft2lZ6UfgMiQoYX2Wa6EngRs8zwmu5LkL7EBkdpK FME1tA55ZAKcKrZfSL7IwtB9yAaGj75afXqNyh5DdRWiBtTDdjM3UXIg+ev6neGA k8ieQeVO43WllLIMofq9HXva3GvhRCrVxzLGc8/MpB3AcMiZQcoMnRJBJ/q4tBGG Cqi0ZWRaYB3MWObSZ4TImeWcI32o00TFd3OFqmpVS0nDASzsa+38MBqGvtXOl6cX cJxl7gqLB3Q2HWpXUFm4UiHnAWQLtQLm34L4wM9GPk9b9S0oNWfR6gFmHh0L3ORv GHhPQfXLX/odVwIDAQABo4ICCjCCAgYwHwYDVR0jBBgwFoAUPdNQpdagre7zSmAK ZdMh1Pj41g8wHQYDVR0OBBYEFK+WREpdB6kPM2yUjBT5sFvckeTzMCMGA1UdEQQc MBqCGG5ldHNkaWdpLXNlcnZpY2UubmV0cy5ldTAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0 dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWV2LXNlcnZlci1nMi5jcmwwNKAy oDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWV2LXNlcnZlci1nMi5j cmwwSwYDVR0gBEQwQjA3BglghkgBhv1sAgEwKjAoBggrBgEFBQcCARYcaHR0cHM6 Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAHBgVngQwBATCBiAYIKwYBBQUHAQEEfDB6 MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wUgYIKwYBBQUH MAKGRmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJFeHRl bmRlZFZhbGlkYXRpb25TZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEE AdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvi/46ZcKXDKT96Q0p/Fa B+MB7nOm3TpqKBasoamu4JsRMnfeoFexhIS3JkO4SgnWnKwEZFctOcOtBvjTlBcg 5/qVbescm/LMO2Xj/4ZljBV9ue5YEPX2qOh6Avj0/xyPGDa4kC8snTIo7SBQsBCg oT974rmxS2U0fROkCfCQkJTeTYXVF6YxHx1qGMEI5E8X0RwFvWZxgMObSpqahV3Y DCQdJ8+/38YHvynMlm6M0Uv4QJkFFBfRsvrsYUcGFu1LFZbztQxFZ7wSVWpccC2z hbgXxKT1MtHEczXwhOlpbwPwRdv/Fmu6P44V87yL/X0zKDgnHG+piUo/qSUZpmPL gQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMbA8nZFU4sUP1M9UPGT hubvTM+8DKG6Ft2lZ6UfgMiQoYX2Wa6EngRs8zwmu5LkL7EBkdpKFME1tA55ZAKc KrZfSL7IwtB9yAaGj75afXqNyh5DdRWiBtTDdjM3UXIg+ev6neGAk8ieQeVO43Wl lLIMofq9HXva3GvhRCrVxzLGc8/MpB3AcMiZQcoMnRJBJ/q4tBGGCqi0ZWRaYB3M WObSZ4TImeWcI32o00TFd3OFqmpVS0nDASzsa+38MBqGvtXOl6cXcJxl7gqLB3Q2 HWpXUFm4UiHnAWQLtQLm34L4wM9GPk9b9S0oNWfR6gFmHh0L3ORvGHhPQfXLX/od VwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4978335281161670975696316720494449067 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-21 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1018467735' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ballerup' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nets A/S' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Database and Middleware' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'netsdigi-service.nets.eu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22315950776186033050001486627173697694051219466642658488821691534581730161318999857998828252476959860582213209779037562348320275030007469564428120988955870992813522083429034546396004750562619146268921682647094217482543043932455752135792578985860718012457031579949312665181606060690661225289489306946541339484733844640438635662142406359450577464953681797201514019147104590896937407610669730948861303572088181767877935953947936804896289750037247267645270799009812480182861925988225417935767700615733841835639689123647573188524984242324608631613038223475815126919384580131253708642980899875138959223795118216722918284631 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) af96444a5d07a90f336c948c14f9b05bdc91e4f3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netsdigi-service.nets.eu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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