mail.cmatrust.net

Issued by DigiCert SHA2 Secure Server CA

About this certificate


This digital certificate with serial number 0d:67:94:bd:9a:02:ef:74:9c:ec:06:51:4b:fa:87:9f was issued on by DigiCert Inc .

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cambridge Meridian Academies Trust

Organization: Cambridge Meridian Academies Trust
State / Province: Cambridge
Locality: Cambridge
Country: GB

DigiCert Inc

Organization: DigiCert Inc
State / Province: Cambridge
Locality: Cambridge
Country: GB

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:67:94:bd:9a:02:ef:74:9c:ec:06:51:4b:fa:87:9f
Serial Number (int): 17817787340041289397516190226688149407
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a6:80:0d:e5:3c:78:ed:99:7a:fd:8f:a3:3b:1f:ab:3d:07:e5:a2:79
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 0a:cf:91:2b:24:06:16:a8:6f:cc:23:9b:29:44:46:4f:47:74:5d:a0
Fingerprint (sha256): fd:ba:75:87:fa:2d:f3:5a:13:eb:b3:bc:cf:26:c1:d6:6a:f5:c1:51:a6:84:7f:45:58:fa:63:d7:29:16:5c:25

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g4.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g4.crl

Check the revocation status for the current certificate on mail.cmatrust.net
25
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.cmatrust.net
cmatrust.net
mail.neneparkacademy.org
autodiscover.neneparkacademy.org
lyncdiscover.neneparkacademy.org
mail.swaveseyvc.co.uk
autodiscover.swaveseyvc.co.uk
lyncdiscover.swaveseyvc.co.uk
mail.northcambridgeacademy.org
autodiscover.northcambridgeacademy.org
lyncdiscover.northcambridgeacademy.org
mailnpa.cmatrust.net
autodiscover.cmatrust.net
lyncdiscover.cmatrust.net
mailsvc.cmatrust.net
autodiscover.westtownprimary.org
lyncdiscover.westtownprimary.org
mail.westtownprimary.org
mail.stamfordwellandacademy.org
autodiscover.stamfordwellandacademy.org
lyncdiscover.stamfordwellandacademy.org
autodiscover.cpetrust.co.uk
autodiscover.sawtryva.org
lyncdiscover.sawtryva.org
lyncdiscover.cpetrust.co.uk

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIH/zCCBuegAwIBAgIQDWeUvZoC73Sc7AZRS/qHnzANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTQxMTAzMDAwMDAwWhcN MTcxMTE1MTIwMDAwWjB+MQswCQYDVQQGEwJHQjESMBAGA1UECBMJQ2FtYnJpZGdl MRIwEAYDVQQHEwlDYW1icmlkZ2UxKzApBgNVBAoTIkNhbWJyaWRnZSBNZXJpZGlh biBBY2FkZW1pZXMgVHJ1c3QxGjAYBgNVBAMTEW1haWwuY21hdHJ1c3QubmV0MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu6uPPO+q7THciv46YYpJo4i X5cmgJebNUMG7gGuV7n1ai0QdbKrAQY3iF0cMbjgARKVzh4/UxU2Ve+Da0lKod58 Oh16YG8WgHP1EUr5uRchOqCvZAigE0A/pzg7T90u3Y8MvECykEPOZyp1CwTxgDQ2 ngshvaMAaEVjlNJPMV0JDIEcKZFqx50f2ib3tVuSyNGpU5LdFPK+lbHN5HAsk9Ww AYhf4psETi5uNolIvQYH4kWPmQdfpxSg6Yr/uKca5yOZ6L0TdssVrkPSYcmY1Wnh 9vwCP27eENwkCT+xsAtXdu+hCp8nPhyU7vkTry/a8FfE0rJyMSioNF5V+CVUGQID AQABo4IEqDCCBKQwHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYD VR0OBBYEFKaADeU8eO2Zev2Pozsfqz0H5aJ5MIIC9AYDVR0RBIIC6zCCAueCEW1h aWwuY21hdHJ1c3QubmV0ggxjbWF0cnVzdC5uZXSCGG1haWwubmVuZXBhcmthY2Fk ZW15Lm9yZ4IgYXV0b2Rpc2NvdmVyLm5lbmVwYXJrYWNhZGVteS5vcmeCIGx5bmNk aXNjb3Zlci5uZW5lcGFya2FjYWRlbXkub3JnghVtYWlsLnN3YXZlc2V5dmMuY28u dWuCHWF1dG9kaXNjb3Zlci5zd2F2ZXNleXZjLmNvLnVrgh1seW5jZGlzY292ZXIu c3dhdmVzZXl2Yy5jby51a4IebWFpbC5ub3J0aGNhbWJyaWRnZWFjYWRlbXkub3Jn giZhdXRvZGlzY292ZXIubm9ydGhjYW1icmlkZ2VhY2FkZW15Lm9yZ4ImbHluY2Rp c2NvdmVyLm5vcnRoY2FtYnJpZGdlYWNhZGVteS5vcmeCFG1haWxucGEuY21hdHJ1 c3QubmV0ghlhdXRvZGlzY292ZXIuY21hdHJ1c3QubmV0ghlseW5jZGlzY292ZXIu Y21hdHJ1c3QubmV0ghRtYWlsc3ZjLmNtYXRydXN0Lm5ldIIgYXV0b2Rpc2NvdmVy Lndlc3R0b3ducHJpbWFyeS5vcmeCIGx5bmNkaXNjb3Zlci53ZXN0dG93bnByaW1h cnkub3JnghhtYWlsLndlc3R0b3ducHJpbWFyeS5vcmeCH21haWwuc3RhbWZvcmR3 ZWxsYW5kYWNhZGVteS5vcmeCJ2F1dG9kaXNjb3Zlci5zdGFtZm9yZHdlbGxhbmRh Y2FkZW15Lm9yZ4InbHluY2Rpc2NvdmVyLnN0YW1mb3Jkd2VsbGFuZGFjYWRlbXku b3JnghthdXRvZGlzY292ZXIuY3BldHJ1c3QuY28udWuCGWF1dG9kaXNjb3Zlci5z YXd0cnl2YS5vcmeCGWx5bmNkaXNjb3Zlci5zYXd0cnl2YS5vcmeCG2x5bmNkaXNj b3Zlci5jcGV0cnVzdC5jby51azAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwz LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzQuY3JsMC+gLaArhilodHRwOi8vY3Js NC5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc0LmNybDBCBgNVHSAEOzA5MDcGCWCG SAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20v Q1BTMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGln aWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5j b20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAw DQYJKoZIhvcNAQELBQADggEBAKckKNVmLqqh+YPfQYrJO7tXj2kw4NoCh9a88841 zGara5DlwZ0lC8eypx7nci6FtpDnEnN7+zmXTJIiXqUEtfKJISX2wqhYu52au2tW ZTV1CqYs9mkka90xfFc+Ss6Rt0JjYjjTF0uMgatueu2Bk2fZqN5nnXfmbs17pzZr 0LVCaSb9SgMZV1uhXeA6XEgkgYGdInV1d6sTARzgn4xaEI0rEtpPX0bYbKBvVFve E5ANjdULuzjMM0VGab2eyrQAMqRBO/X6oOT0spLKqR55TIriuzJNvtedowW3Sqlk EBUwsXL6TcEg8QYq4x64fp5tHq6xJ9gy5HSKLbO517nJ2DY= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu6uPPO+q7THciv46YYp Jo4iX5cmgJebNUMG7gGuV7n1ai0QdbKrAQY3iF0cMbjgARKVzh4/UxU2Ve+Da0lK od58Oh16YG8WgHP1EUr5uRchOqCvZAigE0A/pzg7T90u3Y8MvECykEPOZyp1CwTx gDQ2ngshvaMAaEVjlNJPMV0JDIEcKZFqx50f2ib3tVuSyNGpU5LdFPK+lbHN5HAs k9WwAYhf4psETi5uNolIvQYH4kWPmQdfpxSg6Yr/uKca5yOZ6L0TdssVrkPSYcmY 1Wnh9vwCP27eENwkCT+xsAtXdu+hCp8nPhyU7vkTry/a8FfE0rJyMSioNF5V+CVU GQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17817787340041289397516190226688149407 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-15 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridge' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridge' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridge Meridian Academies Trust' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.cmatrust.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21578209643403713531050260618971333736916666210898864723121117308221354896543759868318594368917342177812449590680962641137448924368788970657765174816214785895753798059750581132915112378955448056779200363156580620176301033871881283645753271170078932674616744080473170276334804928951908971102569269074172238460937366175088896816367256844750910899414587578282118430698093082126965112113887750831196485515608957795888299527682932485371427389551390011045199335157150161244204513963234181472511362111734293350018200587804285137825797954434974702349868810942262568760505411026517885277194600334300750856300800885301973439513 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a6800de53c78ed997afd8fa33b1fab3d07e5a279 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (747 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cmatrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmatrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.neneparkacademy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.neneparkacademy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.neneparkacademy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.swaveseyvc.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.swaveseyvc.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.swaveseyvc.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.northcambridgeacademy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.northcambridgeacademy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.northcambridgeacademy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailnpa.cmatrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cmatrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.cmatrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailsvc.cmatrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.westtownprimary.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.westtownprimary.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.westtownprimary.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.stamfordwellandacademy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.stamfordwellandacademy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.stamfordwellandacademy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cpetrust.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sawtryva.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sawtryva.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.cpetrust.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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