www.portal.novartis.com
- Novartis Pharma AG -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0c:3a:dd:ed:6f:39:b1:9a:3d:47:1e:26:2f:96:10:a7 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Novartis Pharma AG
Organization:
Novartis Pharma AG
Organization unit: E-business and E-infrastructure
Organization unit: E-business and E-infrastructure
State / Province:
Basel-Stadt
Locality: Basel
Country: CH
Locality: Basel
Country: CH
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:3a:dd:ed:6f:39:b1:9a:3d:47:1e:26:2f:96:10:a7Serial Number (int): 16256390391233516943081078401808076967
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: ea:7e:76:fc:aa:d2:73:fe:dc:9f:f8:ac:73:72:07:53:9d:5c:35:0f
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 02:9a:d3:0f:1f:2c:11:09:0c:73:e6:4f:cf:05:34:9e:db:dc:b4:6b
Fingerprint (sha256): 0f:3a:03:d8:f3:da:18:94:52:c5:6b:12:4c:67:b8:70:36:a0:80:ff:e6:31:4b:f6:52:c2:b6:1a:13:90:14:84
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate www.portal.novartis.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.portal.novartis.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.portal.novartis.com
portal.novartis.com
portal.novartis.com
Other certificates including the domain name novartis.com
(limited to 100 certificates)
www.ngcs.novartis.com
www.genoptix.com
dailiestotal1.dailies.com
sni.cloudflaressl.com
api-repassist-qa.novartis.com
incapsula.com
sni.cloudflaressl.com
api-repassist-qa.novartis.com
sni.cloudflaressl.com
novartis.com
gwhost2.novartis.com
www.ngcs.novartis.com
sni.cloudflaressl.com
sni.cloudflaressl.com
xolair.co.uk
sni.cloudflaressl.com
novartis.com
ocb.novartis.com
live.novartis.com
vanity6.jiveon.com
xolair.co.uk
ssl384476.cloudflaressl.com
ussv.cvpn.novartis.com
novartis.com
collab-edge.cdn.securityforward.net
san-5-s7.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.genoptix.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
vanity6.jiveon.com
sni.cloudflaressl.com
san-14-s50.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
medhub.com.au
image.e.atmosphere.tv
image.email.novartis.es
prod.oncologypipeline.novartis.com
join.novartis.com
novartis.com
hcp.novartis.com
sni.cloudflaressl.com
san-1-s7.tlsprovisioning.exacttarget.com
incapsula.com
sni.cloudflaressl.com
image.20210419.200456.s7.et.yellsatcloud.com
incapsula.com
sni.cloudflaressl.com
speakeralliance2.novartis.com
external-trd-tst.novartis.com
novartis.com
retired.novartis.com
sni.cloudflaressl.com
ssl384476.cloudflaressl.com
ssl384477.cloudflaressl.com
incapsula.com
sni.cloudflaressl.com
incapsula.com
search.novartis.com
vanity6.jiveon.com
sni.cloudflaressl.com
vanity6.jiveon.com
san-5-s7.tlsprovisioning.exacttarget.com
ssl384478.cloudflaressl.com
sni.cloudflaressl.com
www.pharma.us.novartis.com
novartiscorp.novartis.com
id.novartis.com
incapsula.com
www.iportal-qa.novartis.com
www.genoptix.com
sni.cloudflaressl.com
medhub.com.au
www.genoptix.com
prod.novartis.com
xolair.co.uk
sni.cloudflaressl.com
www.us.state.lookup.novartis.com
www.portal.novartis.com
www.my.novartis.com
www.pki.novartis.com
www.genoptix.com
sni.cloudflaressl.com
san-5-s7.tlsprovisioning.exacttarget.com
yammerstream.novartis.com
am1023dl50pl1.023d.dedicated.lync.com
san-5-s7.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
www.ngcs.novartis.com
sni.cloudflaressl.com
xolair.co.uk
image.email.novartis.es
svisitor.pharma.us.novartis.com
view.engage-us.novartis.com
usbrc.novartis.com
oak.novartis.com
www.us.state.lookup.novartis.com
www.ophthalmic.novartis.com
www.genoptix.com
dailiestotal1.dailies.com
sni.cloudflaressl.com
api-repassist-qa.novartis.com
incapsula.com
sni.cloudflaressl.com
api-repassist-qa.novartis.com
sni.cloudflaressl.com
novartis.com
gwhost2.novartis.com
www.ngcs.novartis.com
sni.cloudflaressl.com
sni.cloudflaressl.com
xolair.co.uk
sni.cloudflaressl.com
novartis.com
ocb.novartis.com
live.novartis.com
vanity6.jiveon.com
xolair.co.uk
ssl384476.cloudflaressl.com
ussv.cvpn.novartis.com
novartis.com
collab-edge.cdn.securityforward.net
san-5-s7.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.genoptix.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
vanity6.jiveon.com
sni.cloudflaressl.com
san-14-s50.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
medhub.com.au
image.e.atmosphere.tv
image.email.novartis.es
prod.oncologypipeline.novartis.com
join.novartis.com
novartis.com
hcp.novartis.com
sni.cloudflaressl.com
san-1-s7.tlsprovisioning.exacttarget.com
incapsula.com
sni.cloudflaressl.com
image.20210419.200456.s7.et.yellsatcloud.com
incapsula.com
sni.cloudflaressl.com
speakeralliance2.novartis.com
external-trd-tst.novartis.com
novartis.com
retired.novartis.com
sni.cloudflaressl.com
ssl384476.cloudflaressl.com
ssl384477.cloudflaressl.com
incapsula.com
sni.cloudflaressl.com
incapsula.com
search.novartis.com
vanity6.jiveon.com
sni.cloudflaressl.com
vanity6.jiveon.com
san-5-s7.tlsprovisioning.exacttarget.com
ssl384478.cloudflaressl.com
sni.cloudflaressl.com
www.pharma.us.novartis.com
novartiscorp.novartis.com
id.novartis.com
incapsula.com
www.iportal-qa.novartis.com
www.genoptix.com
sni.cloudflaressl.com
medhub.com.au
www.genoptix.com
prod.novartis.com
xolair.co.uk
sni.cloudflaressl.com
www.us.state.lookup.novartis.com
www.portal.novartis.com
www.my.novartis.com
www.pki.novartis.com
www.genoptix.com
sni.cloudflaressl.com
san-5-s7.tlsprovisioning.exacttarget.com
yammerstream.novartis.com
am1023dl50pl1.023d.dedicated.lync.com
san-5-s7.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
www.ngcs.novartis.com
sni.cloudflaressl.com
xolair.co.uk
image.email.novartis.es
svisitor.pharma.us.novartis.com
view.engage-us.novartis.com
usbrc.novartis.com
oak.novartis.com
www.us.state.lookup.novartis.com
www.ophthalmic.novartis.com
Certificate
The complete raw certificate details for www.portal.novartis.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIQDDrd7W85sZo9Rx4mL5YQpzANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwMTA4MDAwMDAwWhcN MjEwMTEyMTIwMDAwWjCBnDELMAkGA1UEBhMCQ0gxFDASBgNVBAgTC0Jhc2VsLVN0 YWR0MQ4wDAYDVQQHEwVCYXNlbDEbMBkGA1UEChMSTm92YXJ0aXMgUGhhcm1hIEFH MSgwJgYDVQQLEx9FLWJ1c2luZXNzIGFuZCBFLWluZnJhc3RydWN0dXJlMSAwHgYD VQQDExd3d3cucG9ydGFsLm5vdmFydGlzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANQ1HkTc8sVSgSjVhrlaSh74ew8D017BxrFRVF81NK60Dih3 cGK8f74d9SDYJ769ci+lZdXagL/KfGZu/uWP+lwLkIFyk7By1ZC5PnHpgTLUQM64 RaWsRHWD5iHdWghszajsnuqppQCf/nZvog7vI7FC4twhBUp0EQroIsSkdiDIPZZZ kxAsfjcinMSCORXHMQSio/4iGT2sWPxtaVFfn+3WMv1Qp+lx6F6YW/EoUEW0oGlM aSTjIZgmb6iMATeBsuR9mlj68H9ZeJW7uHWT8XZ6DIJdcJjMs1Uybsq9Yv3G7KfJ tvhEP+fXovN62eQ3XyifbbBOQqYBNWjBM0jiXB8CAwEAAaOCAggwggIEMB8GA1Ud IwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBTqfnb8qtJz/tyf +KxzcgdTnVw1DzA3BgNVHREEMDAughd3d3cucG9ydGFsLm5vdmFydGlzLmNvbYIT cG9ydGFsLm5vdmFydGlzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwz LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8vY3Js NC5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCG SAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20v Q1BTMAgGBmeBDAECAjB8BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6 Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMu ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAMBgNV HRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQADKmhZHfpOJz9p7fazir8Fta5ppU4lPZ/WXbcn8t6DAc4abJHnkRAmCJ9OFo30 4qYV8e4E3DDqgBsglWLmv8R93BpUNgM+dPGKmSNair5IljHjri5j9VS/QILi33VB L3/WGz/Kvj7CL4TDaQVZKt9D4fXhb3No1yVQVoMHNanphF1Jr0L2EsjbL71oBKAr l648DQhAllsdd+11VRxluY6s7pOnkX9nFfYED4j7VOJ+MaRWlAG8+WA3GGsn9osO PHR3aLpDpYJNll1DE0TmI6N2CucnIxVOL+GtWK9Q00hfoa38gZ5r8rEObQruzj/Y 3mzoZwhbpCpoAo0OP7adcotr -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DUeRNzyxVKBKNWGuVpK Hvh7DwPTXsHGsVFUXzU0rrQOKHdwYrx/vh31INgnvr1yL6Vl1dqAv8p8Zm7+5Y/6 XAuQgXKTsHLVkLk+cemBMtRAzrhFpaxEdYPmId1aCGzNqOye6qmlAJ/+dm+iDu8j sULi3CEFSnQRCugixKR2IMg9llmTECx+NyKcxII5FccxBKKj/iIZPaxY/G1pUV+f 7dYy/VCn6XHoXphb8ShQRbSgaUxpJOMhmCZvqIwBN4Gy5H2aWPrwf1l4lbu4dZPx dnoMgl1wmMyzVTJuyr1i/cbsp8m2+EQ/59ei83rZ5DdfKJ9tsE5CpgE1aMEzSOJc HwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16256390391233516943081078401808076967 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-12 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel-Stadt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Novartis Pharma AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'E-business and E-infrastructure' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.portal.novartis.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26788714232342064188839821233411008554178723876363927139779626826851642069277992178970152877248759457861968805293704862655726856542372065059355295393418147977517823212900199650216256640950156983109864052390059393112868457593613782888628206233036716880111892037134407439782067987115101184727037036266362918945013077418755442709434680512950305539853251443399786454142206487375600315888546843251249553664203515286284945238856388977841095317849390166401146741825350366135327930062455501626027310796425976857929029310128743292165706466008291015923198142741198061818866705160635469889228282729419435486599342510952092425247 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ea7e76fcaad273fedc9ff8ac737207539d5c350f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portal.novartis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.novartis.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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