go.pluralsight.com
- Cloudflare, Inc. -
Issued by Cloudflare Inc RSA CA-2
About this certificate
This digital certificate with serial number 04:c9:7b:80:f1:d2:34:31:56:9e:1f:70:f4:21:7c:47 was issued on by Cloudflare, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Cloudflare, Inc.
Organization:
Cloudflare, Inc.
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
Cloudflare, Inc.
Organization:
Cloudflare, Inc.
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:c9:7b:80:f1:d2:34:31:56:9e:1f:70:f4:21:7c:47Serial Number (int): 6363068604131223088499478715082832967
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: f5:9d:a5:8f:07:ab:20:e3:0b:e9:ea:35:b6:1f:52:a1:31:58:36:77
AuthorityKeyId: 18:a9:1a:fc:b2:45:49:c1:6f:30:34:08:2b:d9:87:9c:b0:25:57:7a
Fingerprint (sha1): 23:fa:20:ad:6e:de:98:72:45:35:ff:87:81:cd:7b:0d:8d:f8:2d:5a
Fingerprint (sha256): 0c:a2:9e:ef:87:e9:12:04:2e:be:e8:0c:2a:e2:2c:e3:0a:d7:cb:37:f3:b5:14:26:49:d1:33:a9:59:c2:e9:fd
Issuing Certificate URL: http://cacerts.digicert.com/CloudflareIncRSACA-2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/CloudflareIncRSACA-2.crl
CRL Distribution Point: http://crl4.digicert.com/CloudflareIncRSACA-2.crl
Check the revocation status for certificate go.pluralsight.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for go.pluralsight.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
go.pluralsight.com
Other certificates including the domain name pluralsight.com
(limited to 100 certificates)
pluralsight.com
*.imgix.net
imgix3.map.fastly.net
ipw-dc01.ad.pluralsight.com
design-system.pluralsight.com
imgix3.map.fastly.net
*.pluralsight.com
imgix3.map.fastly.net
*.pluralsight.com
imgix3.map.fastly.net
*.pluralsight.com
dns-vetting1k.map.fastly.net
sni.cloudflaressl.com
ipw-dc01.ad.pluralsight.com
sni.cloudflaressl.com
design.pluralsight.com
*.pluralsight.com
api.workfit.com
sendgrid.trytuesday.com
go.pluralsight.com
imgix3.map.fastly.net
dns-vetting1k.map.fastly.net
imgix3.map.fastly.net
pluralsight.com
imgix3.map.fastly.net
pluralsight.com
legal.pluralsight.com
leapfrog-ssl-6.gcs-web.com
imgix3.map.fastly.net
*.cachefly.net
imgix3.map.fastly.net
dns-vetting1k.map.fastly.net
sni.cloudflaressl.com
www.theclottery.com
contact.pluralsight.com
companystore.pluralsight.com
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
go.pluralsight.com
design.pluralsight.com
www-stage.pluralsight.com
imgix3.map.fastly.net
dns-vetting1k.map.fastly.net
pluralsight.com
sni.cloudflaressl.com
authors.pluralsight.com
ssl438343.cloudflaressl.com
sni.cloudflaressl.com
*.pluralsight.com
referral.pluralsight.com
design-system.pluralsight.com
scimop.pluralsight.com
sni.cloudflaressl.com
design.pluralsight.com
*.cachefly.net
pluralsight.com
design.pluralsight.com
data.pendo-cdn.pluralsight.com
sni.cloudflaressl.com
sales.pluralsight.com
*.imgix.net
go.pluralsight.com
imgix3.map.fastly.net
leapfrog-ssl-6.gcs-web.com
imgix3.map.fastly.net
go.pluralsight.com
design-system.pluralsight.com
images-acceptance.weedmaps.com
pluralsight.com
contact.pluralsight.com
imgix3.map.fastly.net
*.pluralsight.com
*.imgix.net
leapfrog-ssl-6.gcs-web.com
*.pluralsight.com
partners.ruckusdev.ruckuswireless.com
*.cachefly.net
referral.pluralsight.com
imgix3.map.fastly.net
imgix3.map.fastly.net
sni.cloudflaressl.com
sni.cloudflaressl.com
*.imgix.net
*.cachefly.net
*.cdn.royalcanin-weshare-online.io
contact.pluralsight.com
dps-stage.pluralsight.com
contact.pluralsight.com
contact.pluralsight.com
dns-vetting1k.map.fastly.net
imgix3.map.fastly.net
pando.pluralsight.com
pluralsight.com
www.brandstorm.loreal.com
leapfrog-ssl-6.gcs-web.com
imgix3.map.fastly.net
imgix3.map.fastly.net
sales.pluralsight.com
companystore.pluralsight.com
*.imgix.net
imgix3.map.fastly.net
ipw-dc01.ad.pluralsight.com
design-system.pluralsight.com
imgix3.map.fastly.net
*.pluralsight.com
imgix3.map.fastly.net
*.pluralsight.com
imgix3.map.fastly.net
*.pluralsight.com
dns-vetting1k.map.fastly.net
sni.cloudflaressl.com
ipw-dc01.ad.pluralsight.com
sni.cloudflaressl.com
design.pluralsight.com
*.pluralsight.com
api.workfit.com
sendgrid.trytuesday.com
go.pluralsight.com
imgix3.map.fastly.net
dns-vetting1k.map.fastly.net
imgix3.map.fastly.net
pluralsight.com
imgix3.map.fastly.net
pluralsight.com
legal.pluralsight.com
leapfrog-ssl-6.gcs-web.com
imgix3.map.fastly.net
*.cachefly.net
imgix3.map.fastly.net
dns-vetting1k.map.fastly.net
sni.cloudflaressl.com
www.theclottery.com
contact.pluralsight.com
companystore.pluralsight.com
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
go.pluralsight.com
design.pluralsight.com
www-stage.pluralsight.com
imgix3.map.fastly.net
dns-vetting1k.map.fastly.net
pluralsight.com
sni.cloudflaressl.com
authors.pluralsight.com
ssl438343.cloudflaressl.com
sni.cloudflaressl.com
*.pluralsight.com
referral.pluralsight.com
design-system.pluralsight.com
scimop.pluralsight.com
sni.cloudflaressl.com
design.pluralsight.com
*.cachefly.net
pluralsight.com
design.pluralsight.com
data.pendo-cdn.pluralsight.com
sni.cloudflaressl.com
sales.pluralsight.com
*.imgix.net
go.pluralsight.com
imgix3.map.fastly.net
leapfrog-ssl-6.gcs-web.com
imgix3.map.fastly.net
go.pluralsight.com
design-system.pluralsight.com
images-acceptance.weedmaps.com
pluralsight.com
contact.pluralsight.com
imgix3.map.fastly.net
*.pluralsight.com
*.imgix.net
leapfrog-ssl-6.gcs-web.com
*.pluralsight.com
partners.ruckusdev.ruckuswireless.com
*.cachefly.net
referral.pluralsight.com
imgix3.map.fastly.net
imgix3.map.fastly.net
sni.cloudflaressl.com
sni.cloudflaressl.com
*.imgix.net
*.cachefly.net
*.cdn.royalcanin-weshare-online.io
contact.pluralsight.com
dps-stage.pluralsight.com
contact.pluralsight.com
contact.pluralsight.com
dns-vetting1k.map.fastly.net
imgix3.map.fastly.net
pando.pluralsight.com
pluralsight.com
www.brandstorm.loreal.com
leapfrog-ssl-6.gcs-web.com
imgix3.map.fastly.net
imgix3.map.fastly.net
sales.pluralsight.com
companystore.pluralsight.com
Certificate
The complete raw certificate details for go.pluralsight.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIQBMl7gPHSNDFWnh9w9CF8RzANBgkqhkiG9w0BAQsFADBK MQswCQYDVQQGEwJVUzEZMBcGA1UEChMQQ2xvdWRmbGFyZSwgSW5jLjEgMB4GA1UE AxMXQ2xvdWRmbGFyZSBJbmMgUlNBIENBLTIwHhcNMjQwMTA2MDAwMDAwWhcNMjQx MjMxMjM1OTU5WjByMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEW MBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEZMBcGA1UEChMQQ2xvdWRmbGFyZSwgSW5j LjEbMBkGA1UEAxMSZ28ucGx1cmFsc2lnaHQuY29tMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAzz4jjjD1uZ9oT3bqweWF6r7Zgm4wurLNd6P5EwKYakw6 aT0ymGc39Up5klGSF6ajYys0IMp/3p8jEVNXGSv4K9yuKBLq4EPtUAL1QNlR3zF/ zEAqLqmPrkSaAOK5q6as2ik2M5OmL5Z2XPsLmWRmZbUyGq1IVajped2jjS1R6j8d OTHZwk4f21qZd/MjhFLbvSLF7wgTgza5nkEmPzlpAxnHGyMCGnqN5i0xZV2gpUhK XwMZZH9+604gRAe9rYa9rGIYbv54SZCm7H+f6N5H6JHFivCOLVXfsjvU/Te4QNpP AwtLJcmwkZGTaFzIwJzAaUeICT912AZXwUrNlshRIQIDAQABo4IB6jCCAeYwHwYD VR0jBBgwFoAUGKka/LJFScFvMDQIK9mHnLAlV3owHQYDVR0OBBYEFPWdpY8HqyDj C+nqNbYfUqExWDZ3MB0GA1UdEQQWMBSCEmdvLnBsdXJhbHNpZ2h0LmNvbTA+BgNV HSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2lj ZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjB7BgNVHR8EdDByMDegNaAzhjFodHRwOi8vY3JsMy5kaWdpY2Vy dC5jb20vQ2xvdWRmbGFyZUluY1JTQUNBLTIuY3JsMDegNaAzhjFodHRwOi8vY3Js NC5kaWdpY2VydC5jb20vQ2xvdWRmbGFyZUluY1JTQUNBLTIuY3JsMHYGCCsGAQUF BwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEAG CCsGAQUFBzAChjRodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vQ2xvdWRmbGFy ZUluY1JTQUNBLTIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQELBQADggEBAApmfcMJV+Okop9yxanmhnD3IbwI8jWNQeVq 93Y0Ozp1d75BaQwJIsewjnyhkC27MMEsFip4z8chpkGnBaJmQ/sL+nztodpgop+H 3LX4fJ2oAvSpiYIl08/ff9QeSbiQCbBBN51L4ic7gDnIGVahODvpNe8o87UaP/DA wW23001I2MQxvdxakrsvOHQi0efHF2rqkV1cHGfveG5pCVgCrv1KJhr9R/X6s8Ex zUQbgz9gU6cbja50hTnPkTOeX+qsQpNIPB+qy8dzKNAX+VfQYklZtJByqbYEDHZw R1fwG746H+OuYJp/xpHj3eEbgt12NLRxfzA1RBNPfpFXUGrbHww= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz4jjjD1uZ9oT3bqweWF 6r7Zgm4wurLNd6P5EwKYakw6aT0ymGc39Up5klGSF6ajYys0IMp/3p8jEVNXGSv4 K9yuKBLq4EPtUAL1QNlR3zF/zEAqLqmPrkSaAOK5q6as2ik2M5OmL5Z2XPsLmWRm ZbUyGq1IVajped2jjS1R6j8dOTHZwk4f21qZd/MjhFLbvSLF7wgTgza5nkEmPzlp AxnHGyMCGnqN5i0xZV2gpUhKXwMZZH9+604gRAe9rYa9rGIYbv54SZCm7H+f6N5H 6JHFivCOLVXfsjvU/Te4QNpPAwtLJcmwkZGTaFzIwJzAaUeICT912AZXwUrNlshR IQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6363068604131223088499478715082832967 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare Inc RSA CA-2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-31 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go.pluralsight.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26161970955888769630404029221700033033458697439772091915708905092080941299767097543498035571413001340967374253033165680284838132250008630718090545577191938358499165630932681105839901344192802143225481822344897215258864262559700198559555262874017423252827909898059741470004432456963057717913482275690073819934186356939540655498097143948734345418302632327860774750924903468376287824945008459180821111853251250569429383143686373122312828113319583198033490394824777423117797634372790869105678127329568157306450259131293948048706535363245560790962524092835936389379941499581348122415007536498331873636103860823345703964961 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 18a91afcb24549c16f3034082bd9879cb025577a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f59da58f07ab20e30be9ea35b61f52a131583677 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.pluralsight.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudflareIncRSACA-2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudflareIncRSACA-2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudflareIncRSACA-2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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