www.reservedestin.com

Issued by DigiCert SHA2 Secure Server CA

About this certificate


This digital certificate with serial number 0d:67:6d:03:85:d8:8c:87:aa:51:07:f5:fe:d9:8f:37 was issued on by DigiCert Inc .

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Reserve America LLC

Organization: Reserve America LLC
Organization unit: Reserve Direct
State / Province: Missouri
Locality: St. Louis
Country: US

DigiCert Inc

Organization: DigiCert Inc
State / Province: Missouri
Locality: St. Louis
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:67:6d:03:85:d8:8c:87:aa:51:07:f5:fe:d9:8f:37
Serial Number (int): 17816981583387577085523660892513341239
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 50:4d:80:58:8f:29:95:58:c4:b9:ce:c1:04:ff:57:35:f8:b2:c8:c3
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): e5:79:d2:e4:a6:ea:5f:ba:44:be:52:38:89:0f:56:d8:08:f9:b0:63
Fingerprint (sha256): 32:d3:d2:3e:10:19:77:2c:5e:10:7d:4e:5f:0a:cf:85:22:e3:16:82:88:f1:2d:a3:35:16:c2:22:9e:50:fb:d7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g4.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g4.crl

Check the revocation status for the current certificate on www.reservedestin.com
24
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.reservedestin.com
www.reservepanamacitybeach.com
ripleys.reservepanamacitybeach.com
wonderworks.reservepanamacitybeach.com
fountainofyouthflorida.reservestaugustine.com
ghosttrainadventure.reservestaugustine.com
ripleys.reservestaugustine.com
sightseeingtrains.reservestaugustine.com
www.reservestaugustine.com
paradiseadventurespcb.reservepanamacitybeach.com
oldfloridamuseum.reservestaugustine.com
seablasterdestin.reservedestin.com
villazorayda.reservestaugustine.com
colonialquarter.reservestaugustine.com
thepiratemuseum.reservestaugustine.com
tampaspeedboatadventures.reservetampa.com
flatironhotel.reservenewyorkcity.com
staytimessquare.reservenewyorkcity.com
ripleys.reservewilliamsburg.com
gowilliamsburg.reservewilliamsburg.com
3westclub.reservenewyorkcity.com
spanishmilitaryhospitalmuseum.reservestaugustine.com
amnh.reservenewyorkcity.com
iroquoisny.reservenewyorkcity.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIIuDCCB6CgAwIBAgIQDWdtA4XYjIeqUQf1/tmPNzANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTQwNzMxMDAwMDAwWhcN MTYxMDE5MTIwMDAwWjCBizELMAkGA1UEBhMCVVMxETAPBgNVBAgTCE1pc3NvdXJp MRIwEAYDVQQHEwlTdC4gTG91aXMxHDAaBgNVBAoTE1Jlc2VydmUgQW1lcmljYSBM TEMxFzAVBgNVBAsTDlJlc2VydmUgRGlyZWN0MR4wHAYDVQQDExV3d3cucmVzZXJ2 ZWRlc3Rpbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDry150 SrjB+9VtD4eXWnigq3p/EsNULsU1GUkjUu9Ohbi9wjBLLSYgTkfQr/OYuo4JcWTq n72/0AqcP2SM53XuZcr9FgaWE+24ggCYt6dED3nfQVKMBj7U9H5FP9QNzjyTY3L6 UqVSR4nbDg5sSg1RuHaRaEgoFgHJWsEcgvMgLnnh3ScODVyYGLLpM7nqnH4YiuhY JpwgX4fOQsViYVKl0By00zxdpCqLcwWyeei70bd8s23V5gk4VVEdfhlWQrFUXw/L aJjmonMJqMDYHG4bCkqqCTYrxNoHSoDNe2J91WZ56563xU79pnlMrQo42Sarrdgt SOpQEKvFhkz3/lo/AgMBAAGjggVTMIIFTzAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o 541GOLQs4cbZ4jAdBgNVHQ4EFgQUUE2AWI8plVjEuc7BBP9XNfiyyMMwggOfBgNV HREEggOWMIIDkoIVd3d3LnJlc2VydmVkZXN0aW4uY29tgh53d3cucmVzZXJ2ZXBh bmFtYWNpdHliZWFjaC5jb22CInJpcGxleXMucmVzZXJ2ZXBhbmFtYWNpdHliZWFj aC5jb22CJndvbmRlcndvcmtzLnJlc2VydmVwYW5hbWFjaXR5YmVhY2guY29tgi1m b3VudGFpbm9meW91dGhmbG9yaWRhLnJlc2VydmVzdGF1Z3VzdGluZS5jb22CKmdo b3N0dHJhaW5hZHZlbnR1cmUucmVzZXJ2ZXN0YXVndXN0aW5lLmNvbYIecmlwbGV5 cy5yZXNlcnZlc3RhdWd1c3RpbmUuY29tgihzaWdodHNlZWluZ3RyYWlucy5yZXNl cnZlc3RhdWd1c3RpbmUuY29tghp3d3cucmVzZXJ2ZXN0YXVndXN0aW5lLmNvbYIw cGFyYWRpc2VhZHZlbnR1cmVzcGNiLnJlc2VydmVwYW5hbWFjaXR5YmVhY2guY29t gidvbGRmbG9yaWRhbXVzZXVtLnJlc2VydmVzdGF1Z3VzdGluZS5jb22CInNlYWJs YXN0ZXJkZXN0aW4ucmVzZXJ2ZWRlc3Rpbi5jb22CI3ZpbGxhem9yYXlkYS5yZXNl cnZlc3RhdWd1c3RpbmUuY29tgiZjb2xvbmlhbHF1YXJ0ZXIucmVzZXJ2ZXN0YXVn dXN0aW5lLmNvbYImdGhlcGlyYXRlbXVzZXVtLnJlc2VydmVzdGF1Z3VzdGluZS5j b22CKXRhbXBhc3BlZWRib2F0YWR2ZW50dXJlcy5yZXNlcnZldGFtcGEuY29tgiRm bGF0aXJvbmhvdGVsLnJlc2VydmVuZXd5b3JrY2l0eS5jb22CJnN0YXl0aW1lc3Nx dWFyZS5yZXNlcnZlbmV3eW9ya2NpdHkuY29tgh9yaXBsZXlzLnJlc2VydmV3aWxs aWFtc2J1cmcuY29tgiZnb3dpbGxpYW1zYnVyZy5yZXNlcnZld2lsbGlhbXNidXJn LmNvbYIgM3dlc3RjbHViLnJlc2VydmVuZXd5b3JrY2l0eS5jb22CNHNwYW5pc2ht aWxpdGFyeWhvc3BpdGFsbXVzZXVtLnJlc2VydmVzdGF1Z3VzdGluZS5jb22CG2Ft bmgucmVzZXJ2ZW5ld3lvcmtjaXR5LmNvbYIhaXJvcXVvaXNueS5yZXNlcnZlbmV3 eW9ya2NpdHkuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNl cnQuY29tL3NzY2Etc2hhMi1nNC5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2lj ZXJ0LmNvbS9zc2NhLXNoYTItZzQuY3JsMEIGA1UdIAQ7MDkwNwYJYIZIAYb9bAEB MCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwfAYI KwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j b20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdp Q2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADANBgkqhkiG 9w0BAQsFAAOCAQEAUEQMmL+boCc5cl1Gru1Ye3HWb7OlrsH4rbmMcWJPdqwYjHaV yB06r39sRXBosQwJrQc6oH0iJ1oAdDMvDt26iK1DF83dP5dJXLBxBg3Etw6fxTET QZt57JKI29eCzAp74fw22JoSpykhVpZyFPan8IQgn7S/YMkHg/FjtakkSHMdgea/ B2I25hLHAKAZhIgZZhDiEK/ZhtqZ/Hs8yUcEAqDRebsgmKo8X2zqaxn05CCC68qY H/jZ8DzjOZqXQlWDefqNrZ5/qrp50JYnTA85INL+s1od+HFdjcW4k6Bp+uFDQwKR 251uW2Q9QmW7elSH0WSjfYz9iRRDaLXefSKlsQ== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68tedEq4wfvVbQ+Hl1p4 oKt6fxLDVC7FNRlJI1LvToW4vcIwSy0mIE5H0K/zmLqOCXFk6p+9v9AKnD9kjOd1 7mXK/RYGlhPtuIIAmLenRA9530FSjAY+1PR+RT/UDc48k2Ny+lKlUkeJ2w4ObEoN Ubh2kWhIKBYByVrBHILzIC554d0nDg1cmBiy6TO56px+GIroWCacIF+HzkLFYmFS pdActNM8XaQqi3MFsnnou9G3fLNt1eYJOFVRHX4ZVkKxVF8Py2iY5qJzCajA2Bxu GwpKqgk2K8TaB0qAzXtifdVmeeuet8VO/aZ5TK0KONkmq63YLUjqUBCrxYZM9/5a PwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17816981583387577085523660892513341239 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-19 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Louis' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reserve America LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reserve Direct' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.reservedestin.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29766286639844929527996481148779414203135131329234512570067409319012426670153061977933048758274185331444768092721390764288915591844140929274510022464034442009078843504569914857002276485680722586071006798231604295257995048019471388741430020688352180183804605552231509789948392598554010309697846698410783362070560402533475893880313268345921067851976962837247505641539647551565914332100057644157421619331037719428237850110971567142839500843288058606909609666527560011653862773316634966004621070037019692491848527341323699463725947087419463303860560669111648186499909787525093979214864073745241387159618948712055667841599 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 504d80588f299558c4b9cec104ff5735f8b2c8c3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (918 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reservedestin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reservepanamacitybeach.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ripleys.reservepanamacitybeach.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wonderworks.reservepanamacitybeach.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fountainofyouthflorida.reservestaugustine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghosttrainadventure.reservestaugustine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ripleys.reservestaugustine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sightseeingtrains.reservestaugustine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reservestaugustine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradiseadventurespcb.reservepanamacitybeach.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldfloridamuseum.reservestaugustine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seablasterdestin.reservedestin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villazorayda.reservestaugustine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colonialquarter.reservestaugustine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepiratemuseum.reservestaugustine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tampaspeedboatadventures.reservetampa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flatironhotel.reservenewyorkcity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staytimessquare.reservenewyorkcity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ripleys.reservewilliamsburg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gowilliamsburg.reservewilliamsburg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3westclub.reservenewyorkcity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spanishmilitaryhospitalmuseum.reservestaugustine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amnh.reservenewyorkcity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iroquoisny.reservenewyorkcity.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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