xowebvpn.xo.com
- Verizon Data Services LLC -
Issued by DigiCert Baltimore CA-2 G2
About this certificate
This digital certificate with serial number 02:a3:b7:89:77:1a:7e:ce:27:31:42:dd:b2:ce:9e:23 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Verizon Data Services LLC
Organization:
Verizon Data Services LLC
Organization unit: ITWebOps
Organization unit: ITWebOps
State / Province:
Florida
Locality: Temple Terrace
Country: US
Locality: Temple Terrace
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:a3:b7:89:77:1a:7e:ce:27:31:42:dd:b2:ce:9e:23Serial Number (int): 3508522951587488420240193942279069219
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: b1:a6:e8:e3:96:77:bf:2b:17:df:35:f0:8a:c4:fb:2b:ba:89:88:2b
AuthorityKeyId: c0:12:b2:28:74:68:46:67:e9:70:25:74:1a:00:45:5b:06:7d:5c:44
Fingerprint (sha1): 2a:35:56:f6:09:e8:45:cd:69:fa:b2:93:a7:3f:e4:c6:ba:ec:f2:f8
Fingerprint (sha256): 0b:bc:73:92:37:b6:2d:56:5b:4b:16:48:7c:c1:31:68:6d:13:da:16:70:34:60:ae:21:ba:7e:e7:3f:db:a0:68
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl
Check the revocation status for certificate xowebvpn.xo.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for xowebvpn.xo.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
xowebvpn.xo.com
Other certificates including the domain name xo.com
(limited to 100 certificates)
webmail.xo.com
portal.xo.com
awtunnel.xo.com
password.xo.com
channelink.xo.com
webmail.xo.com
edgecast-bc.xo.com
xo.com
*.ultradns.com
apps.xo.com
legacy.xo.com
register.xo.com
plaegwdmz01.pla.dc.xo.com
xoradar.xo.com
tools.xo.com
partners.xo.com
xostats.xo.com
xoradar.xo.com
password.xo.com
xowebvpn.xo.com
xo.com
webremedy-fxo.xo.com
xocitrix.xo.com
xowebvpn.xo.com
*.xo.com
txplancoucm11.pla.dc.xo.com
xowebvpn.xo.com
masterstream.xo.com
tools.xo.com
plancactst01.pla.dc.xo.com
xofed.xo.com
partners.xo.com
portal.xo.com
xowebvpn.xo.com
xostats.xo.com
cloud.xo.com
nsamobile.xo.com
*.xo.com
answers.businesscenter.xo.com
bc.xo.com
ofm.xo.com
tools.xo.com
xoprojects.xo.com
testqlsr.dal.dc.xo.com
billing.xo.com
xowebvpn.xo.com
xo.com
portal.xo.com
testxoprojects.dal.dc.xo.com
testnapt.xo.com
apps.xo.com
xoradar.xo.com
masterstream.xo.com
xoprojects.xo.com
dns.xo.com
xoprojects.xo.com
xoprojects.xo.com
TESTQLSR.DAL.DC.XO.COM
pwreset.xo.com
xoradar.xo.com
portal.xo.com
xoprojects.xo.com
citrix.xo.com
xoradar.xo.com
webmail.xo.com
dns.xo.com
billing.xo.com
*.xo.com
plagtrprd02.pla.dc.xo.com
xowebvpn.xo.com
napt.xo.com
napt.xo.com
secure.xo.com
portaldev.xo.com
xowebvpn.xo.com
txplan01-vs01.pla.dc.xo.com
tools.xo.com
usps.xo.com
lyncae.xo.com
portal.xo.com
cloud.xo.com
vahern01-vs01.her.dc.xo.com
xoradar.xo.com
nsamobile.xo.com
portal.xo.com
xostats.xo.com
apps.xo.com
portal.xo.com
partners.xo.com
*.cloud.xo.com
cloud.xo.com
xomobile.xo.com
billing.xo.com
channelink.xo.com
backupcc.xo.com
password.xo.com
plancacprd01.pla.dc.xo.com
xoprojects.xo.com
tools.xo.com
billing.xo.com
portal.xo.com
awtunnel.xo.com
password.xo.com
channelink.xo.com
webmail.xo.com
edgecast-bc.xo.com
xo.com
*.ultradns.com
apps.xo.com
legacy.xo.com
register.xo.com
plaegwdmz01.pla.dc.xo.com
xoradar.xo.com
tools.xo.com
partners.xo.com
xostats.xo.com
xoradar.xo.com
password.xo.com
xowebvpn.xo.com
xo.com
webremedy-fxo.xo.com
xocitrix.xo.com
xowebvpn.xo.com
*.xo.com
txplancoucm11.pla.dc.xo.com
xowebvpn.xo.com
masterstream.xo.com
tools.xo.com
plancactst01.pla.dc.xo.com
xofed.xo.com
partners.xo.com
portal.xo.com
xowebvpn.xo.com
xostats.xo.com
cloud.xo.com
nsamobile.xo.com
*.xo.com
answers.businesscenter.xo.com
bc.xo.com
ofm.xo.com
tools.xo.com
xoprojects.xo.com
testqlsr.dal.dc.xo.com
billing.xo.com
xowebvpn.xo.com
xo.com
portal.xo.com
testxoprojects.dal.dc.xo.com
testnapt.xo.com
apps.xo.com
xoradar.xo.com
masterstream.xo.com
xoprojects.xo.com
dns.xo.com
xoprojects.xo.com
xoprojects.xo.com
TESTQLSR.DAL.DC.XO.COM
pwreset.xo.com
xoradar.xo.com
portal.xo.com
xoprojects.xo.com
citrix.xo.com
xoradar.xo.com
webmail.xo.com
dns.xo.com
billing.xo.com
*.xo.com
plagtrprd02.pla.dc.xo.com
xowebvpn.xo.com
napt.xo.com
napt.xo.com
secure.xo.com
portaldev.xo.com
xowebvpn.xo.com
txplan01-vs01.pla.dc.xo.com
tools.xo.com
usps.xo.com
lyncae.xo.com
portal.xo.com
cloud.xo.com
vahern01-vs01.her.dc.xo.com
xoradar.xo.com
nsamobile.xo.com
portal.xo.com
xostats.xo.com
apps.xo.com
portal.xo.com
partners.xo.com
*.cloud.xo.com
cloud.xo.com
xomobile.xo.com
billing.xo.com
channelink.xo.com
backupcc.xo.com
password.xo.com
plancacprd01.pla.dc.xo.com
xoprojects.xo.com
tools.xo.com
billing.xo.com
Certificate
The complete raw certificate details for xowebvpn.xo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG5jCCBc6gAwIBAgIQAqO3iXcafs4nMULdss6eIzANBgkqhkiG9w0BAQsFADBk MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSMwIQYDVQQDExpEaWdpQ2VydCBCYWx0aW1vcmUgQ0Et MiBHMjAeFw0xOTAzMjAwMDAwMDBaFw0yMTAzMjQxMjAwMDBaMIGJMQswCQYDVQQG EwJVUzEQMA4GA1UECBMHRmxvcmlkYTEXMBUGA1UEBxMOVGVtcGxlIFRlcnJhY2Ux IjAgBgNVBAoTGVZlcml6b24gRGF0YSBTZXJ2aWNlcyBMTEMxETAPBgNVBAsTCElU V2ViT3BzMRgwFgYDVQQDEw94b3dlYnZwbi54by5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQC+zSZOaiXZf+COSRgme73ixJZ5BETUTkKqQjpb3YjQ Q0tMhl1c6pHLQqphjH1UWcYeXD6sVLOhZE31xpwqaG5O4DvXNyG+ev8qLuoYsTC2 /KB98KMYZNJp/b8hazUWJFucvYp91ZU1dQX4cnkkQPfxtocd90nG/gi6zqh311Ol Rvl3FCVfFuJKOwI1hzTcZ9yq1uekKqFlS5ZmIiFrUEXuarVZYUgi+rokdNjJuROu 2eoG3FEefJ2q2DZiGn4RfqQUeRYfrvyHhCG60Sxf3KBLndCs2P5kP7yAc5Qw4mQV YKaXzmZjcCBtdWbTl8xoUHKd5O8C82Uhg8x0pfP7+DIrAgMBAAGjggNsMIIDaDAf BgNVHSMEGDAWgBTAErIodGhGZ+lwJXQaAEVbBn1cRDAdBgNVHQ4EFgQUsabo45Z3 vysX3zXwisT7K7qJiCswGgYDVR0RBBMwEYIPeG93ZWJ2cG4ueG8uY29tMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgYEGA1Ud HwR6MHgwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEJh bHRpbW9yZUNBLTJHMi5jcmwwOqA4oDaGNGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNv bS9EaWdpQ2VydEJhbHRpbW9yZUNBLTJHMi5jcmwwTAYDVR0gBEUwQzA3BglghkgB hv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ UzAIBgZngQwBAgIweQYIKwYBBQUHAQEEbTBrMCQGCCsGAQUFBzABhhhodHRwOi8v b2NzcC5kaWdpY2VydC5jb20wQwYIKwYBBQUHMAKGN2h0dHA6Ly9jYWNlcnRzLmRp Z2ljZXJ0LmNvbS9EaWdpQ2VydEJhbHRpbW9yZUNBLTJHMi5jcnQwDAYDVR0TAQH/ BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYAu9nfvB+KcbWTlCOXqpJ7 RzhXlQqrUugakJZkNo4e0YUAAAFpm/s5OgAABAMARzBFAiEA1Dr631NVaAl1QPik jfZwNhMaIYvS2tYj7tWo+AgVUCUCIBp4Rwh0bEKIk7Vy5FFtncXIFqGbm38+pCO0 +h2AaXtqAHcAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFpm/s6 dgAABAMASDBGAiEAu38YnHnwVB7uRd6J1jPEcFmHJRDG5WDWpVNc8SsbASECIQCe ubG8Ssqzn9neyvO+nv2I/cGbVCVZu04bKeZoag/lNwB1AESUZS6w7s6vxEAH2Kj+ KMDa5oK+2MsxtT/TM5a1toGoAAABaZv7OPEAAAQDAEYwRAIgehh+KZmnRkN8R8a7 6ll2rkYZhV5cMq0dhgEGUqxx5uMCIBzgQOX2ZX/sKqB+CtPc7bgYowyct0WIK0m3 AnvfvYSnMA0GCSqGSIb3DQEBCwUAA4IBAQCMhZz9i9mnvrjJoaJwcxIx/yjhAvty IxwH+uVQyJ49zRKzDzWTxLpuN5gZfd/etahxIW0nB9fXjqvPRN74VA9VQCpTIN8j 8W1tQ+0RZLE0Xa7Q0ABcilM33czypRZLraeqPYpNGqlMwkb1sM3eO/DTzquNUPuj y8gkeq6r7NcvTX2k4HOdcwJZ3Ogo7cYG2+ea0P9FSl7ftXUPme5AOJ5iNQ/nYoRT SLDK+VM5caXZJ0DiBlEZ8vTtCQTDOe8mt1w5u2gmMrykmhNgG3NhnfyUkSwIlMuf 9zXHulbK5OnPPaDDndDQ3i7hKzjfWSpXHf058rsCouw43rf1jvYQA15r -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs0mTmol2X/gjkkYJnu9 4sSWeQRE1E5CqkI6W92I0ENLTIZdXOqRy0KqYYx9VFnGHlw+rFSzoWRN9cacKmhu TuA71zchvnr/Ki7qGLEwtvygffCjGGTSaf2/IWs1FiRbnL2KfdWVNXUF+HJ5JED3 8baHHfdJxv4Ius6od9dTpUb5dxQlXxbiSjsCNYc03GfcqtbnpCqhZUuWZiIha1BF 7mq1WWFIIvq6JHTYybkTrtnqBtxRHnydqtg2Yhp+EX6kFHkWH678h4QhutEsX9yg S53QrNj+ZD+8gHOUMOJkFWCml85mY3AgbXVm05fMaFByneTvAvNlIYPMdKXz+/gy KwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3508522951587488420240193942279069219 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Baltimore CA-2 G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-24 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Temple Terrace' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Data Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ITWebOps' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xowebvpn.xo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24086440998481369477396230425519797231157875228216850858873482021036332500552702538506215587283076760692490771982009426099049620260344134053608417413266973065975817138389803032961248266081929056379079119529912918494216084739244806009757073897118934374835645740298972957646990574799297517734125052428814219860492950420962930157874468284967709064027591771216086149157057733644210232114277947934483070679525617911458464860483678971328127791055520860758910666478082416144766665464240695518700063238490895574885140664188690751219218367056741039440754177519598851826640710149773233419931997370893481051556239184692025766443 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c012b22874684667e97025741a00455b067d5c44 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b1a6e8e39677bf2b17df35f08ac4fb2bba89882b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xowebvpn.xo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 0168007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001699bfb393a0000040300473045022100d43afadf535568097540f8a48df67036131a218bd2dad623eed5a8f80815502502201a784708746c428893b572e4516d9dc5c816a19b9b7f3ea423b4fa1d80697b6a0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001699bfb3a760000040300483046022100bb7f189c79f0541eee45de89d633c47059872510c6e560d6a5535cf12b1b01210221009eb9b1bc4acab39fd9decaf3be9efd88fdc19b542559bb4e1b29e6686a0fe5370075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001699bfb38f1000004030046304402207a187e2999a746437c47c6bbea5976ae4619855e5c32ad1d86010652ac71e6e302201ce040e5f6657fec2aa07e0ad3dcedb818a30c9cb745882b49b7027bdfbd84a7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008c859cfd8bd9a7beb8c9a1a270731231ff28e102fb72231c07fae550c89e3dcd12b30f3593c4ba6e3798197ddfdeb5a871216d2707d7d78eabcf44def8540f55402a5320df23f16d6d43ed1164b1345daed0d0005c8a5337ddccf2a5164bada7aa3d8a4d1aa94cc246f5b0cdde3bf0d3ceab8d50fba3cbc8247aaeabecd72f4d7da4e0739d730259dce828edc606dbe79ad0ff454a5edfb5750f99ee40389e62350fe762845348b0caf9533971a5d92740e2065119f2f4ed0904c339ef26b75c39bb682632bca49a13601b73619dfc94912c0894cb9ff735c7ba56cae4e9cf3da0c39dd0d0de2ee12b38df592a571dfd39f2bb02a2ec38deb7f58ef610035e6b