3.janrainsso.com
- JanRain, Inc. -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 0b:8e:4c:34:2e:72:be:3e:7b:2d:04:04:7a:ea:b2:89 was issued on by DigiCert Inc.
With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
JanRain, Inc.
Organization:
JanRain, Inc.
Organization unit: Operations
Organization unit: Operations
State / Province:
Oregon
Locality: Portland
Country: US
Locality: Portland
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:8e:4c:34:2e:72:be:3e:7b:2d:04:04:7a:ea:b2:89Serial Number (int): 15360359704915374791314556544961131145
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 70:63:c4:3d:ca:c1:48:9d:0d:cc:05:a4:b3:e3:00:7d:ed:fe:aa:80
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 32:7f:5a:20:4c:bc:16:0a:4d:5f:41:dd:7a:0a:2c:b4:b0:5d:b8:1f
Fingerprint (sha256): 0d:ba:db:3d:90:55:49:a3:3b:4f:99:e9:ac:e1:64:9d:14:f5:49:df:19:42:b5:99:2f:1e:1b:52:33:e0:da:78
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate 3.janrainsso.com
16
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 3.janrainsso.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
3.janrainsso.com
sso.canada.com
sso.wholefoodsmarket.com
sso-us.samsungusa.com
sso.api.stjude.org
sso.francetv.fr
loginsso.atmel.com
sso.fox.com
sso.foxsports.com
sso.foxnews.com
sso.sourceinterlinkdigital.com
dm-federate.pfizer.com
sso.cmgdigital.com
sso.champix.co.uk
sso-dev.champix.co.uk
esso.gianteagle.com
sso.canada.com
sso.wholefoodsmarket.com
sso-us.samsungusa.com
sso.api.stjude.org
sso.francetv.fr
loginsso.atmel.com
sso.fox.com
sso.foxsports.com
sso.foxnews.com
sso.sourceinterlinkdigital.com
dm-federate.pfizer.com
sso.cmgdigital.com
sso.champix.co.uk
sso-dev.champix.co.uk
esso.gianteagle.com
Other certificates including the domain name janrainsso.com
(limited to 100 certificates)
*.janrain.com
3.janrainsso.com
*.janrainsso.com
*.multi.dev.or.janrainsso.com
*.janrainsso.com
*.prod.janrainsso.com
*.janrain.com
*.irsteam.dev.or.janrainsso.com
*.janrain.com
*.janrainsso.com
*.janrain.com
*.eval.janraincapture.com
*.prod.janrainsso.com
*.multi.dev.or.janrainsso.com
*.janrain.com
*.janrainsso.com
*.janrainsso.com
*.janrain.com
*.janrainsso.com
*.janrain.com
*.janrain.com
*.au.janrainsso.com
*.irsteam.dev.or.janrainsso.com
*.janrain.com
*.janrain.com
*.janrain.com
*.janrainsso.com
*.us.janrainsso.com
*.irsteam.dev.or.janrainsso.com
*.janrain.com
*.janrainsso.com
*.prod.janrainsso.com
*.multi.dev.or.janrainsso.com
*.janrainsso.com
*.janrainsso.com
*.janrainsso.com
*.janrain.com
*.janrainsso.com
*.janrain.com
*.janrainsso.com
*.janrain.com
*.janrain.com
*.eu.janrainsso.com
*.janrainsso.com
*.janrainsso.com
*.janrain.com
*.janrainsso.com
*.prod.janrainsso.com
*.janrainsso.com
*.multi.dev.or.janrainsso.com
*.prod.janrainsso.com
*.janrainsso.com
*.janrainsso.com
3.janrainsso.com
*.prod.janrainsso.com
*.janrainsso.com
*.janrainsso.com
*.janrainsso.com
*.janrain.com
*.au.janrainsso.com
*.janrainsso.com
*.janrainsso.com
*.janrainsso.com
3.janrainsso.com
*.janrainsso.com
*.multi.dev.or.janrainsso.com
*.janrainsso.com
*.prod.janrainsso.com
*.janrain.com
*.irsteam.dev.or.janrainsso.com
*.janrain.com
*.janrainsso.com
*.janrain.com
*.eval.janraincapture.com
*.prod.janrainsso.com
*.multi.dev.or.janrainsso.com
*.janrain.com
*.janrainsso.com
*.janrainsso.com
*.janrain.com
*.janrainsso.com
*.janrain.com
*.janrain.com
*.au.janrainsso.com
*.irsteam.dev.or.janrainsso.com
*.janrain.com
*.janrain.com
*.janrain.com
*.janrainsso.com
*.us.janrainsso.com
*.irsteam.dev.or.janrainsso.com
*.janrain.com
*.janrainsso.com
*.prod.janrainsso.com
*.multi.dev.or.janrainsso.com
*.janrainsso.com
*.janrainsso.com
*.janrainsso.com
*.janrain.com
*.janrainsso.com
*.janrain.com
*.janrainsso.com
*.janrain.com
*.janrain.com
*.eu.janrainsso.com
*.janrainsso.com
*.janrainsso.com
*.janrain.com
*.janrainsso.com
*.prod.janrainsso.com
*.janrainsso.com
*.multi.dev.or.janrainsso.com
*.prod.janrainsso.com
*.janrainsso.com
*.janrainsso.com
3.janrainsso.com
*.prod.janrainsso.com
*.janrainsso.com
*.janrainsso.com
*.janrainsso.com
*.janrain.com
*.au.janrainsso.com
*.janrainsso.com
*.janrainsso.com
*.janrainsso.com
Certificate
The complete raw certificate details for 3.janrainsso.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGrzCCBZegAwIBAgIQC45MNC5yvj57LQQEeuqyiTANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xODA3MjAwMDAwMDBaFw0xOTExMTQxMjAwMDBa MHkxCzAJBgNVBAYTAlVTMQ8wDQYDVQQIEwZPcmVnb24xETAPBgNVBAcTCFBvcnRs YW5kMRYwFAYDVQQKEw1KYW5SYWluLCBJbmMuMRMwEQYDVQQLEwpPcGVyYXRpb25z MRkwFwYDVQQDExAzLmphbnJhaW5zc28uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA2kf3Qm4hHZpzaTttzoWIdsj77prTzBt1PPJa0Y1EgWKjSijr ag7XNeqVCVC2CSCxzmf8bKpSQm52Cq7BIGyxdnw4EjTzThNnvi1Rf2j8RC2ue8m+ 6XdzK7s/fyTlYac9HZZMmPCOOlgn78NfCLuh5Yy+0VbCPh0mCkqOXFzhSdlywXU8 6kKEzGR8mwrX+50up6y4GEMn1L79EBEPxW/gwP6nltAQ3IXDQ9h/9g+bx4BSapdL 67ADwBCTWhzYvnwyfYamUdnTdGEanJHo0fyu1nwv1wzwsT5cmlOPc+mkpCmAJT1F EHYaTgh4OZKLDDQaKmcgbeA8FMyB71jubMF2gQIDAQABo4IDOjCCAzYwHwYDVR0j BBgwFoAUUWj/kK8CB3U8zNllZGKiErhZcjswHQYDVR0OBBYEFHBjxD3KwUidDcwF pLPjAH3t/qqAMIIBVQYDVR0RBIIBTDCCAUiCEDMuamFucmFpbnNzby5jb22CDnNz by5jYW5hZGEuY29tghhzc28ud2hvbGVmb29kc21hcmtldC5jb22CFXNzby11cy5z YW1zdW5ndXNhLmNvbYISc3NvLmFwaS5zdGp1ZGUub3Jngg9zc28uZnJhbmNldHYu ZnKCEmxvZ2luc3NvLmF0bWVsLmNvbYILc3NvLmZveC5jb22CEXNzby5mb3hzcG9y dHMuY29tgg9zc28uZm94bmV3cy5jb22CHnNzby5zb3VyY2VpbnRlcmxpbmtkaWdp dGFsLmNvbYIWZG0tZmVkZXJhdGUucGZpemVyLmNvbYISc3NvLmNtZ2RpZ2l0YWwu Y29tghFzc28uY2hhbXBpeC5jby51a4IVc3NvLWRldi5jaGFtcGl4LmNvLnVrghNl c3NvLmdpYW50ZWFnbGUuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMu ZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDA0oDKgMIYuaHR0cDov L2NybDQuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDBMBgNVHSAE RTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdp Y2VydC5jb20vQ1BTMAgGBmeBDAECAjCBgwYIKwYBBQUHAQEEdzB1MCQGCCsGAQUF BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTQYIKwYBBQUHMAKGQWh0dHA6 Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJhbmNl U2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAw DQYJKoZIhvcNAQELBQADggEBABd2GIwvaSDD8cvBIGBpkL4CLcJ2l5EwkKPavI5Z d8RxmFo8qeUzJCxH2r2idldqkTAcpK+9A4/rmY3SA4L/kg9CyWgPz/6ZZ3rb7Gav A2eRx5KVVfBo9xTxaRUe2qV1NxucXJ4k7usu5HYGBR105FljOHnQe4Xp4x8AWm46 4UD3x99Zllhd4gRWKnAJS9BJmdWbFbb/omVWAe0ZfyKkkpgjd+4qg/fA2xIPiZCr cTU6pxJftYxCE/uSnYsEzlowaVYQhizENT0ztNy24niFditv6Kg2uPRf9MzD0Jes hlM2GdK56vMy4hdLVVp/6ZupvtEa+1armjAjHxhf6wfJ1uI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kf3Qm4hHZpzaTttzoWI dsj77prTzBt1PPJa0Y1EgWKjSijrag7XNeqVCVC2CSCxzmf8bKpSQm52Cq7BIGyx dnw4EjTzThNnvi1Rf2j8RC2ue8m+6XdzK7s/fyTlYac9HZZMmPCOOlgn78NfCLuh 5Yy+0VbCPh0mCkqOXFzhSdlywXU86kKEzGR8mwrX+50up6y4GEMn1L79EBEPxW/g wP6nltAQ3IXDQ9h/9g+bx4BSapdL67ADwBCTWhzYvnwyfYamUdnTdGEanJHo0fyu 1nwv1wzwsT5cmlOPc+mkpCmAJT1FEHYaTgh4OZKLDDQaKmcgbeA8FMyB71jubMF2 gQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15360359704915374791314556544961131145 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-14 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JanRain, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Operations' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3.janrainsso.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27555438169526113446511181895086992052525846272724668143992768219248130795640151615608722741192412596222880819336644478107253963221134878077582662195729105413721391504856871122976291554170559188223805891440988897288194233342820029081131574412172357577954690027408606255405788476250908078897302770758426960949869777143202483939744406257291148675251254562599781777012135031816328714597569562142231060709935950657931326216041116965828191504404814007901262807410956252017512868831985505000228877512140026333329532052792441020084723746133948428023111261600334217036466263912592610840117212172208512818104416518058121721473 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7063c43dcac1489d0dcc05a4b3e3007dedfeaa80 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (332 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3.janrainsso.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.canada.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.wholefoodsmarket.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso-us.samsungusa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.api.stjude.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.francetv.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loginsso.atmel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.fox.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.foxsports.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.foxnews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.sourceinterlinkdigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dm-federate.pfizer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.cmgdigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.champix.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso-dev.champix.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esso.gianteagle.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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