assets.teleflora.com

- Teleflora LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:4c:0e:9b:0d:0d:b5:c9:59:45:72:c1:db:08:53:d0 was issued on by DigiCert Inc.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Teleflora LLC

Organization: Teleflora LLC
State / Province: California
Locality: Los Angeles
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:4c:0e:9b:0d:0d:b5:c9:59:45:72:c1:db:08:53:d0
Serial Number (int): 13687190757237326089058758698448999376
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dd:29:c0:b2:c3:31:f8:8a:74:20:0a:d1:c4:cb:45:4b:cf:12:d2:b1
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 57:98:ec:f1:7c:1e:91:4e:5b:96:e8:ca:7a:76:64:53:43:99:48:e0
Fingerprint (sha256): 0c:ac:61:a5:cb:69:7f:64:f7:97:41:5b:b3:91:5f:2d:1b:c0:70:6c:40:74:7a:17:4c:c9:19:94:a0:82:ae:37

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate assets.teleflora.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assets.teleflora.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa15-assets.teleflora.com
assets.eflorist.com
assets.teleflora.com
images.shopflowers.net
integration-assets.teleflora.com
stg-images.shopflowers.net
stg-assets.eflorist.com
stg-assets.teleflora.com
din15-assets.teleflora.com
stg-assets.petals.com.au
assets.stage.eflorist.com
assets.petals.com.au
assets.integration.eflorist.com
assets.qa.teleflora.com
assets.stage.teleflora.com
assets.qa.eflorist.com

Other certificates including the domain name teleflora.com

(limited to 100 certificates)
stg.orderinterface.teleflora.com
san.cloudinary.com
www.teleflora.com
m-dfs.teleflora.com
autodiscover.teleflora.com
san.cloudinary.com
altiris.teleflora.com
s5-san.cloudinary.com
*.teleflora.com
san.cloudinary.com
m-mkconnections.teleflora.com
*.din15.teleflora.com
m-savings.teleflora.com
*.dev.teleflora.com
cloudinary-pin-sni.map.fastly.net
stg.mydoveapp.teleflora.com
m-savings.teleflora.com
m-frontierairlines.teleflora.com
s5-san.cloudinary.com
s1-cloudinary-pin-sni.map.fastly.net
s1-sni.cloudinary.com
s5-san.cloudinary.com
*.teleflora.com
m-employeeorder.teleflora.com
estgweb.teleflora.com
estgweb.teleflora.com
www.teleflora.com
san.cloudinary.com
webmail.teleflora.com
assets.teleflora.com
assets.teleflora.com
s5-san.cloudinary.com
s5-cloudinary-pin.map.fastly.net
cloudinary-pin-sni.map.fastly.net
fr.teleflora.com
s5-san.cloudinary.com
blog.teleflora.com
s5-cloudinary-pin.map.fastly.net
m-amtrak.teleflora.com
cloudinary-pin-sni.map.fastly.net
san.cloudinary.com
www.teleflora.com
s5-cloudinary-pin.map.fastly.net
assets.teleflora.com
homemade.teleflora.com
tws.teleflora.com
e.p.teleflora.com
s5-cloudinary-pin.map.fastly.net
san.cloudinary.com
san.cloudinary.com
m-amtrak.teleflora.com
*.teleflora.com
twsstg.teleflora.com
s5-san.cloudinary.com
posimages.teleflora.com
cloudinary-pin-sni.map.fastly.net
s5-san.cloudinary.com
s5-san.cloudinary.com
assets.teleflora.com
cloudinary-pin-sni.map.fastly.net
posimages.teleflora.com
san.cloudinary.com
s1-cloudinary-pin-sni.map.fastly.net
m-perkopolis.teleflora.com
*.qa.teleflora.com
cloudinary-pin-sni.map.fastly.net
san.cloudinary.com
fr.teleflora.com
s1-cloudinary-pin-sni.map.fastly.net
cloudinary-pin-sni.map.fastly.net
cloudinary-pin-sni.map.fastly.net
s5-san.cloudinary.com
m-unionplus.teleflora.com
m-savings.teleflora.com
www.aafes.teleflora.com
blog.teleflora.com
s5-san.cloudinary.com
san.cloudinary.com
m-gettington.teleflora.com
cloudinary-pin-sni.map.fastly.net
s5-san.cloudinary.com
cloudinary-pin-sni.map.fastly.net
*.teleflora.com
omnistats.teleflora.com
m-jcpenney.teleflora.com
dvm03.dev.teleflora.com
s5-cloudinary-pin.map.fastly.net
san.cloudinary.com
san.cloudinary.com
san.cloudinary.com
estgweb.teleflora.com
san.cloudinary.com
stg.mobilesolutions.teleflora.com
fr.teleflora.com
m-hawaiianmiles.teleflora.com
san.cloudinary.com
m-perks.teleflora.com
www.teleflora.com
assets.teleflora.com
s5-san.cloudinary.com

Certificate

The complete raw certificate details for assets.teleflora.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGzDCCBbSgAwIBAgIQCkwOmw0NtclZRXLB2whT0DANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjAwMzE5MDAwMDAwWhcN
MjEwMzI0MTIwMDAwWjBvMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p
YTEUMBIGA1UEBxMLTG9zIEFuZ2VsZXMxFjAUBgNVBAoTDVRlbGVmbG9yYSBMTEMx
HTAbBgNVBAMTFGFzc2V0cy50ZWxlZmxvcmEuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA0lf62jS+YHY1MCbjXh5AZ3D504Hvvw3YHTrVxNHMaKo/
f49zvvv8xBp/30li1OfABRI8ccP27LoVa3IykLI98VswhLaa/vCR4tJc/abFvAOq
z4hbk6oi9Qzk6MdyuPR1pvOEbZoqibsLrmZXjVAN0ZhZAtHidzZWLkNTfjE1DeOl
fLOZh33kQrKRsp2IcFsusuPh7CSAzRE0J7w50B15sMZ4lBXPujq55Jed/LLfPwYx
SGhTxOBfNyYIk7AEnAwrczRYZ+cFvkIWXuryS6T2lBv5YOuXm9juPjGSYsETLVpC
qww8lmYgjAt3s0Kk3jSIy7tgWP4CK68sDkjP3EFKRQIDAQABo4IDhDCCA4AwHwYD
VR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFN0pwLLDMfiK
dCAK0cTLRUvPEtKxMIIBsQYDVR0RBIIBqDCCAaSCGXFhMTUtYXNzZXRzLnRlbGVm
bG9yYS5jb22CE2Fzc2V0cy5lZmxvcmlzdC5jb22CFGFzc2V0cy50ZWxlZmxvcmEu
Y29tghZpbWFnZXMuc2hvcGZsb3dlcnMubmV0giBpbnRlZ3JhdGlvbi1hc3NldHMu
dGVsZWZsb3JhLmNvbYIac3RnLWltYWdlcy5zaG9wZmxvd2Vycy5uZXSCF3N0Zy1h
c3NldHMuZWZsb3Jpc3QuY29tghhzdGctYXNzZXRzLnRlbGVmbG9yYS5jb22CGmRp
bjE1LWFzc2V0cy50ZWxlZmxvcmEuY29tghhzdGctYXNzZXRzLnBldGFscy5jb20u
YXWCGWFzc2V0cy5zdGFnZS5lZmxvcmlzdC5jb22CFGFzc2V0cy5wZXRhbHMuY29t
LmF1gh9hc3NldHMuaW50ZWdyYXRpb24uZWZsb3Jpc3QuY29tghdhc3NldHMucWEu
dGVsZWZsb3JhLmNvbYIaYXNzZXRzLnN0YWdlLnRlbGVmbG9yYS5jb22CFmFzc2V0
cy5xYS5lZmxvcmlzdC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5k
aWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0cDovL2NybDQu
ZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgB
hv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ
UzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8v
b2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRp
Z2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwDAYDVR0T
AQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
2LH2/NZI5cmKxnIiceFUYTO1ar5989miSc8+qzx983Yhxmxt615yOv53F8vtcRFk
dU5HHFQK536ya1D39YEhKmPAqmoXfaD8fp+3wrJp9MK7K7fHmZJD51j6IVSzs/3l
G4jjIFiuv2hvO+33f081NUQZUS0icaiuqgdMRYFBhs3Lr0WH+4Q390DYuiskNOXz
I5nQZV3QAt3tILQCjpa/ySNcRzemcI7UFtDB+CTJdbZMBZmXugwepxVluxRcSfzN
cjz/yAK2uwNGIqVHgwNtDIL/gKS1VFC8KjqyAf/PW62m+mIaT1peBRWxE+g4Awge
iyn/7irqLG0D7LBCLHEMPw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lf62jS+YHY1MCbjXh5A
Z3D504Hvvw3YHTrVxNHMaKo/f49zvvv8xBp/30li1OfABRI8ccP27LoVa3IykLI9
8VswhLaa/vCR4tJc/abFvAOqz4hbk6oi9Qzk6MdyuPR1pvOEbZoqibsLrmZXjVAN
0ZhZAtHidzZWLkNTfjE1DeOlfLOZh33kQrKRsp2IcFsusuPh7CSAzRE0J7w50B15
sMZ4lBXPujq55Jed/LLfPwYxSGhTxOBfNyYIk7AEnAwrczRYZ+cFvkIWXuryS6T2
lBv5YOuXm9juPjGSYsETLVpCqww8lmYgjAt3s0Kk3jSIy7tgWP4CK68sDkjP3EFK
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13687190757237326089058758698448999376
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Los Angeles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Teleflora LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assets.teleflora.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26553428544609512898472826231921172899052776955225628691764154319154997220901135894214466683699114162121636703636894193194441813001685174736295021848117264826930537700069572911619644088830334715515786852702682514669248216103679334273123587859786071622684687976068872811953673958916165074145058635397597819189406061777905335955843244531565301960097690792078121898962214931512362657925271278680663172413977802133159826838257801903478887162164273593055889777751570203940929467572022910403089302182446713080333847496193766007673447996191479749211191658977855842593268990904674009378120637515322256541018650286537385790021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd29c0b2c331f88a74200ad1c4cb454bcf12d2b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (424 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa15-assets.teleflora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.eflorist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.teleflora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.shopflowers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration-assets.teleflora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-images.shopflowers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-assets.eflorist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-assets.teleflora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'din15-assets.teleflora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-assets.petals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.stage.eflorist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.petals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.integration.eflorist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.qa.teleflora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.stage.teleflora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.qa.eflorist.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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