*.merkleinc.com
Issued by RapidSSL TLS RSA CA G1
About this certificate
This digital certificate with serial number 01:0c:52:23:49:81:d5:2a:f7:72:88:35:7c:f5:c0:81 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.merkleinc.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 01:0c:52:23:49:81:d5:2a:f7:72:88:35:7c:f5:c0:81Serial Number (int): 1393201511409885045015795613576839297
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 51:bb:14:68:6f:b3:be:d9:da:3a:ba:9e:45:9d:6e:f4:55:cf:8b:57
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38
Fingerprint (sha1): e4:ba:93:91:6e:cb:4a:58:b0:21:a5:ae:f9:89:1a:76:e5:47:fb:8e
Fingerprint (sha256): 0d:d4:7e:03:db:91:9e:ff:0e:34:b6:20:72:ac:2e:3d:0a:10:7f:31:67:0f:d5:ec:37:be:33:b2:56:f1:e7:d2
Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.rapidssl.comCRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl
Check the revocation status for certificate *.merkleinc.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.merkleinc.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.merkleinc.com
merkleinc.com
merkleinc.com
Other certificates including the domain name merkleinc.com
(limited to 100 certificates)
dx.merkleinc.com
le1.pls.merkleinc.com
lyncae.merkleinc.com
emea.secureshare.merkleinc.com
signon.merkleinc.com
lyncae.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
*.lner.merkleinc.com
promo.merkleinc.com
*.lookalike.m1.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www2.merkleinc.com
pipes.merkleinc.com
*.lookalike.m1.merkleinc.com
le2.pls.merkleinc.com
denvpn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
rmg-vpn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
vpn.merkleinc.com
www.apricot.merkleinc.com
allyreporting.merkleinc.com
le2.pls.merkleinc.com
*.merkleinc.com
*.jpostma-discovery.aws-sandbox.analytics-emea.merkleinc.com
merkury.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www.mission45.be
le1.pls.merkleinc.com
rmg-vpnbackup.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
code.test.pls.merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
merkleinc.com
le1.pls.merkleinc.com
next-ci.aws-aquila.analytics-emea.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
sonar.merkleinc.com
le2.pls.merkleinc.com
dx.merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
webmail.merkleinc.com
*.lookalike.m1.merkleinc.com
officewebapps.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
pegademo.merkleinc.com
merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
le1.pls.merkleinc.com
ci.jpostma-discovery.aws-sandbox.analytics-emea.merkleinc.com
pegademo.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
dx.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
lsweb2013-cn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
admin.buytime.network
sfbusae.merkleinc.com
lyncae-cn.merkleinc.com
le2.pls.merkleinc.com
pipeline.8bitpictures.com
lsweb2013-eu.merkleinc.com
le1.pls.merkleinc.com
le1.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www2.merkleinc.com
le1.pls.merkleinc.com
vdidev.merkleinc.com
officewebapps.merkleinc.com
*.lner.merkleinc.com
aue1.xfer.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
lsweb2013-cn.merkleinc.com
maytecedillo.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
le1.pls.merkleinc.com
lyncae.merkleinc.com
emea.secureshare.merkleinc.com
signon.merkleinc.com
lyncae.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
*.lner.merkleinc.com
promo.merkleinc.com
*.lookalike.m1.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www2.merkleinc.com
pipes.merkleinc.com
*.lookalike.m1.merkleinc.com
le2.pls.merkleinc.com
denvpn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
rmg-vpn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
vpn.merkleinc.com
www.apricot.merkleinc.com
allyreporting.merkleinc.com
le2.pls.merkleinc.com
*.merkleinc.com
*.jpostma-discovery.aws-sandbox.analytics-emea.merkleinc.com
merkury.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www.mission45.be
le1.pls.merkleinc.com
rmg-vpnbackup.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
code.test.pls.merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
merkleinc.com
le1.pls.merkleinc.com
next-ci.aws-aquila.analytics-emea.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
sonar.merkleinc.com
le2.pls.merkleinc.com
dx.merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
webmail.merkleinc.com
*.lookalike.m1.merkleinc.com
officewebapps.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
pegademo.merkleinc.com
merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
le1.pls.merkleinc.com
ci.jpostma-discovery.aws-sandbox.analytics-emea.merkleinc.com
pegademo.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
dx.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
lsweb2013-cn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
admin.buytime.network
sfbusae.merkleinc.com
lyncae-cn.merkleinc.com
le2.pls.merkleinc.com
pipeline.8bitpictures.com
lsweb2013-eu.merkleinc.com
le1.pls.merkleinc.com
le1.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www2.merkleinc.com
le1.pls.merkleinc.com
vdidev.merkleinc.com
officewebapps.merkleinc.com
*.lner.merkleinc.com
aue1.xfer.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
lsweb2013-cn.merkleinc.com
maytecedillo.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
Certificate
The complete raw certificate details for *.merkleinc.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLTCCBRWgAwIBAgIQAQxSI0mB1Sr3cog1fPXAgTANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZSYXBpZFNTTCBUTFMgUlNBIENBIEcx MB4XDTIzMTExNzAwMDAwMFoXDTI0MTExNjIzNTk1OVowGjEYMBYGA1UEAwwPKi5t ZXJrbGVpbmMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbMG llbFFDf3Vv8kMRT/kL76gpdJOE3PvzluF3wjnDrjYK+uYW7S8wRGYM1vyL6zQA6w zjUZM0nOmzBVYOOxkQhnVEudciaoxkiiqMxIV+OpngJdfw/W6DnsRGd5vqLN2zxR LNLI63u6dFIkRUPfKCR/M06C1BTJKuxXY2bi2qm4ucd87DiIOihszxm1Jr/VqENC NCJsvdNBstGJVTi/xl8lMNtP2U2eQ39ibzQQSSJvtg3MusVtnrJnQAwRFlpX5EQD wAnEFXJmJDTIX70WlWrJrz4OPhjGH6BUkinHiDYclEvwe7PbRu+VWASnXtHEZx7b auQ0b3TQA1ua1IiDbwIDAQABo4IDJzCCAyMwHwYDVR0jBBgwFoAUDNtsgkkPSmcK uBTuesRIUojrVjgwHQYDVR0OBBYEFFG7FGhvs77Z2jq6nkWdbvRVz4tXMCkGA1Ud EQQiMCCCDyoubWVya2xlaW5jLmNvbYINbWVya2xlaW5jLmNvbTA+BgNVHSAENzA1 MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNv bS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY2RwLnJhcGlkc3NsLmNvbS9S YXBpZFNTTFRMU1JTQUNBRzEuY3JsMHYGCCsGAQUFBwEBBGowaDAmBggrBgEFBQcw AYYaaHR0cDovL3N0YXR1cy5yYXBpZHNzbC5jb20wPgYIKwYBBQUHMAKGMmh0dHA6 Ly9jYWNlcnRzLnJhcGlkc3NsLmNvbS9SYXBpZFNTTFRMU1JTQUNBRzEuY3J0MAwG A1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB3AO7N0GTV2xrO xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABi9yOTYoAAAQDAEgwRgIhAMKeaZ2A Z/GqnBkZYNwzYrPK7+V/IzD2D/ApuI65NzPJAiEAl0H9q8n7imTaY24x06WEsLkj c/z8anXlNevUJLFVS/0AdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiE cwAAAYvcjk1eAAAEAwBGMEQCIByoE3NVcv0a1xVbmKyofrCZ/hEXv3jfY2eUw1AB mL1EAiAHCK13mFsSv2MB69Q9IdJHeG7qw8awz88AZVuAq5F8PgB2ANq2v2s/tbYi n5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABi9yOTUAAAAQDAEcwRQIhAJ4PZnYc hHCQfwefe8DfBZWc3w9d2NDKyAclkpsGlTZFAiBfCCIHLx4e6MtL8yXYTVuv5Qjo hZM1f16BpaNOekQA4zANBgkqhkiG9w0BAQsFAAOCAQEAItn8xWy7lyLtWcw+e7xt zNZhhypJ37po7cGlTIQggBLosGPXMz+vGo6xcihc7wYbGEa1/SqnTrIO74AlijkM lshMYwKnAzH7xLioItJdYlcxyxBnbncWQSGZYp8BoLsaD/qPmrwdxTKxV8zCkyt/ fFe4tyZFgf7KiYFjJMZjc7k1RWKyMiKZMhUpycrLXvvSEO6ume7242tViNZJ1d4Q +RTvup/1vEsWHnzQgiqXfQzBxeg5nv1Qav4ETRp+ZHO1zZllxkqXwzToKPSMu+/n kmwxlpy2t6eYOi8cjhZo6862Hv7O2R9B1kWtEkGrgfSFCaxqWiwQbXShZVXdnXbh iw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbMGllbFFDf3Vv8kMRT/ kL76gpdJOE3PvzluF3wjnDrjYK+uYW7S8wRGYM1vyL6zQA6wzjUZM0nOmzBVYOOx kQhnVEudciaoxkiiqMxIV+OpngJdfw/W6DnsRGd5vqLN2zxRLNLI63u6dFIkRUPf KCR/M06C1BTJKuxXY2bi2qm4ucd87DiIOihszxm1Jr/VqENCNCJsvdNBstGJVTi/ xl8lMNtP2U2eQ39ibzQQSSJvtg3MusVtnrJnQAwRFlpX5EQDwAnEFXJmJDTIX70W lWrJrz4OPhjGH6BUkinHiDYclEvwe7PbRu+VWASnXtHEZx7bauQ0b3TQA1ua1IiD bwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1393201511409885045015795613576839297 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.merkleinc.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24957226956784787860610457115607829995747609134302880573032319002199860426126559115986488793136664514474255178876421589293622855158378044836442124041009421034503194428774140528922307752953307288202098766775326472478420198376217057632103694148755224602232698440115983696710191509886914930799051920260253355010938710367947155518113111632799011532041490380151443898462930910472189706755674961156904861490285813852813531495854749572491391026759279695834853925850022905907283859851497864058303371974322132796486706081946437526293200262197741090928582338163591553946168955496154985723308832095988059459452628451846349423471 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 51bb14686fb3bed9da3aba9e459d6ef455cf8b57 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merkleinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merkleinc.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0022d9fcc56cbb9722ed59cc3e7bbc6dccd661872a49dfba68edc1a54c84208012e8b063d7333faf1a8eb172285cef061b1846b5fd2aa74eb20eef80258a390c96c84c6302a70331fbc4b8a822d25d625731cb10676e7716412199629f01a0bb1a0ffa8f9abc1dc532b157ccc2932b7f7c57b8b7264581feca89816324c66373b9354562b2322299321529c9cacb5efbd210eeae99eef6e36b5588d649d5de10f914efba9ff5bc4b161e7cd0822a977d0cc1c5e8399efd506afe044d1a7e6473b5cd9965c64a97c334e828f48cbbefe7926c31969cb6b7a7983a2f1c8e1668ebceb61efeced91f41d645ad1241ab81f48509ac6a5a2c106d74a16555dd9d76e18b