preferences.hearstmags.com
- The Hearst Corporation -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 06:c9:5b:d7:3f:c6:67:ea:f8:d9:15:4e:5e:35:0e:dc was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
The Hearst Corporation
Organization:
The Hearst Corporation
Organization unit: The Hearst Corporation
Organization unit: The Hearst Corporation
State / Province:
North Carolina
Locality: Charlotte
Country: US
Locality: Charlotte
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:c9:5b:d7:3f:c6:67:ea:f8:d9:15:4e:5e:35:0e:dcSerial Number (int): 9020882396341282128844305481101283036
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 3c:2c:c7:87:b6:7b:0d:3b:c7:36:2e:5f:94:46:36:b1:47:6e:ac:b9
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 0c:7e:1e:91:80:18:c1:41:67:c7:19:cb:a3:c0:2a:c7:90:c6:7b:0e
Fingerprint (sha256): 0c:0c:3b:af:c5:71:bc:cf:12:4f:b3:f3:12:c3:6c:34:18:96:7d:28:41:00:a2:7f:75:97:24:01:75:e0:14:82
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate preferences.hearstmags.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for preferences.hearstmags.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
preferences.hearstmags.com
Other certificates including the domain name hearstmags.com
(limited to 100 certificates)
wpm.ccmp.eu
*.25ans.jp
subscribe.hearstmags.com
wpm03.eccmp.com
cosmopolitan.com
services.hearstmags.com
preferences.hearstmags.com
wpm.ccmp.eu
preferences.hearstmags.com
cosmopolitan.com
wpm03.eccmp.com
subscribe.hearstmags.com
wpm.ccmp.eu
admin.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
services.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm03.eccmp.com
hearst-hdm.map.fastly.net
wpm.ccmp.eu
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm03.eccmp.com
cosmopolitan.com
subscribe.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
stage.services.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
services.hearstmags.com
wpm03.eccmp.com
stage.services.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
admin.hearstmags.com
subscribe.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
admin.hearstmags.com
wpm03.eccmp.com
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
wpm.ccmp.eu
stage.services.hearstmags.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm.ccmp.eu
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
wpm.ccmp.eu
services.hearstmags.com
subscribe.hearstmags.com
services.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
cosmopolitan.com
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
cosmopolitan.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
subscribe.hearstmags.com
cosmopolitan.com
hearst-hdm.map.fastly.net
cosmopolitan.com
wpm.ccmp.eu
optout.hearstmags.com
cosmopolitan.com
cosmopolitan.com
hearst-hdm.map.fastly.net
preferences.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
admin.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm.ccmp.eu
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
cosmopolitan.com
subscribe.hearstmags.com
*.25ans.jp
subscribe.hearstmags.com
wpm03.eccmp.com
cosmopolitan.com
services.hearstmags.com
preferences.hearstmags.com
wpm.ccmp.eu
preferences.hearstmags.com
cosmopolitan.com
wpm03.eccmp.com
subscribe.hearstmags.com
wpm.ccmp.eu
admin.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
services.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm03.eccmp.com
hearst-hdm.map.fastly.net
wpm.ccmp.eu
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm03.eccmp.com
cosmopolitan.com
subscribe.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
stage.services.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
services.hearstmags.com
wpm03.eccmp.com
stage.services.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
admin.hearstmags.com
subscribe.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
admin.hearstmags.com
wpm03.eccmp.com
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
wpm.ccmp.eu
stage.services.hearstmags.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm.ccmp.eu
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
wpm.ccmp.eu
services.hearstmags.com
subscribe.hearstmags.com
services.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
cosmopolitan.com
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
cosmopolitan.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
subscribe.hearstmags.com
cosmopolitan.com
hearst-hdm.map.fastly.net
cosmopolitan.com
wpm.ccmp.eu
optout.hearstmags.com
cosmopolitan.com
cosmopolitan.com
hearst-hdm.map.fastly.net
preferences.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
admin.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm.ccmp.eu
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
cosmopolitan.com
subscribe.hearstmags.com
Certificate
The complete raw certificate details for preferences.hearstmags.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIQBslb1z/GZ+r42RVOXjUO3DANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xODA2MDYwMDAwMDBaFw0yMDA2MTAxMjAwMDBa MIGhMQswCQYDVQQGEwJVUzEXMBUGA1UECBMOTm9ydGggQ2Fyb2xpbmExEjAQBgNV BAcTCUNoYXJsb3R0ZTEfMB0GA1UEChMWVGhlIEhlYXJzdCBDb3Jwb3JhdGlvbjEf MB0GA1UECxMWVGhlIEhlYXJzdCBDb3Jwb3JhdGlvbjEjMCEGA1UEAxMacHJlZmVy ZW5jZXMuaGVhcnN0bWFncy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC6H2QXy8FkOsMd5XvzWCn0NCByzZASVqeswXJXgVnelUZYn1F5qit6PhXa 2SJcztS4JZhqcyEoffBbeEqC3x+kMiAL//RcStUlw4li0UzK+DgrDIf5Oo1ps5ww pBDTRYRYhiJoV0T2nyzKzDDwmdz/Zm2oEX3uwtvUrvddR5xhdMKKT4xg+8uYT8J1 yWEPte2A7XU3jJvAjgBqVfJDQe8vYLoygxgFf5tn23f/hK9lPK1ZA2YFsmjPyWhU V7RKTxqT6kEcvgVrCIRrk4QWlLilHbTUGMFDykQDWz7HNWyTzK5+2KtC1dZR1iFG XEsgCNEutYBM4NvlbfiVNQzAAlX3AgMBAAGjggIIMIICBDAfBgNVHSMEGDAWgBRR aP+QrwIHdTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQUPCzHh7Z7DTvHNi5flEY2sUdu rLkwJQYDVR0RBB4wHIIacHJlZmVyZW5jZXMuaGVhcnN0bWFncy5jb20wDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8E bjBsMDSgMqAwhi5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2 ZXItZzYuY3JsMDSgMqAwhi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1o YS1zZXJ2ZXItZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYB BQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMIGD BggrBgEFBQcBAQR3MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0 LmNvbTBNBggrBgEFBQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0Rp Z2lDZXJ0U0hBMkhpZ2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIw ADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9g/nkyA 71zb9nfNcsya/DCGb+0nz1IntoSsE8O+KwaBKv4sMrqgJpghYQohrwEQffg2PnJ7 6KrcQBDiHPqGh8jxZmjGafA8749RdxaY+6o4RAYBNPMml41kaBnty4kFBT0W1TNm wtZwe8EUpE8JAG6hPijM3AiqIyr7lY2pDsO8trrTobmY9I0pW/zrsiiB0PRI2t0v xAzf6j6SUNlRdugcn4VHMZbH5XoKY4JZS7A/grcJw03L5XcdIs0q25//mImEtL3t W/IoKzWbzmcjTYqFpzAAURMqg3tyuLt6nLKN2An7n+JejopW2vRRhNDQlVJBhBBW ijYYBznpOtn5qg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh9kF8vBZDrDHeV781gp 9DQgcs2QElanrMFyV4FZ3pVGWJ9Reaorej4V2tkiXM7UuCWYanMhKH3wW3hKgt8f pDIgC//0XErVJcOJYtFMyvg4KwyH+TqNabOcMKQQ00WEWIYiaFdE9p8sysww8Jnc /2ZtqBF97sLb1K73XUecYXTCik+MYPvLmE/CdclhD7XtgO11N4ybwI4AalXyQ0Hv L2C6MoMYBX+bZ9t3/4SvZTytWQNmBbJoz8loVFe0Sk8ak+pBHL4FawiEa5OEFpS4 pR201BjBQ8pEA1s+xzVsk8yuftirQtXWUdYhRlxLIAjRLrWATODb5W34lTUMwAJV 9wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9020882396341282128844305481101283036 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-10 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charlotte' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Hearst Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Hearst Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'preferences.hearstmags.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23495804196845359802746313041831713644360538484338473337027084508102844515958003460933623912814046012702272837176420966973156985710262417309019614948422940634031120180187210597925040429385709926915476137698820891879001325926192687559665180348915500551725516696792085771534897666703480963026218609359055656476468120309468098086536328689366290390299145891366020209012862085195911096874590823610390775976351448834475540585946989834456634297971007745247916119336891506276865961777963706539971404254595327308127891467678875467154983781736467563445470715469012676728293820656516946761602951168385506147170449416408346547703 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3c2cc787b67b0d3bc7362e5f944636b1476eacb9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preferences.hearstmags.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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