mail2.gcfa.org

Issued by DigiCert SHA2 Secure Server CA

About this certificate


This digital certificate with serial number 0e:a3:f4:b6:c1:73:e7:e4:02:bc:04:de:05:4b:47:47 was issued on by DigiCert Inc .

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

General Council on Finance and Administration of the United Methodist Church

Organization: General Council on Finance and Administration of the United Methodist Church
State / Province: Tennessee
Locality: Nashville
Country: US

DigiCert Inc

Organization: DigiCert Inc
State / Province: Tennessee
Locality: Nashville
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:a3:f4:b6:c1:73:e7:e4:02:bc:04:de:05:4b:47:47
Serial Number (int): 19460499716269596165284165048012064583
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f9:19:26:43:b1:ce:5b:33:ab:3f:be:83:ac:6a:55:4e:58:bd:64:7b
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 36:90:35:5b:3c:ad:b7:8d:d0:05:ff:73:12:fd:d7:97:e9:e1:61:c3
Fingerprint (sha256): 32:57:1c:8b:80:29:21:9f:a3:d5:87:99:c3:de:cc:c8:97:14:74:92:4f:92:9e:7a:6c:f3:e2:aa:43:34:4c:95

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g4.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g4.crl

Check the revocation status for the current certificate on mail2.gcfa.org
29
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

mail2.gcfa.org
gcfa.org
mail.gcfa.org
gcfamx01.gcfa.org
AutoDiscover.GCFA.ORG
AutoDiscover.UMCFoundation.ORG
AutoDiscover.unitedmethodistinsurance.org
AutoDiscover.umins.com
AutoDiscover.umins.org
AutoDiscover.umcglobalimpact.org
AutoDiscover.UMCDevelopmentCenter.ORG
AutoDiscover.GCUMM.ORG
AutoDiscover.easy2give.net
AutoDiscover.umcares.org
UMCFoundation.ORG
unitedmethodistinsurance.org
umins.com
umins.org
umcglobalimpact.org
UMCDevelopmentCenter.ORG
GCUMM.ORG
easy2give.net
umcares.org
gcfamx01h.gcfa.org
gcfamx02.gcfa.org
gcfamx02h.gcfa.org
cas.gcfa.org
smtp.gcfa.org
GCFA.ORG

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIHrjCCBpagAwIBAgIQDqP0tsFz5+QCvATeBUtHRzANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTUwNTA2MDAwMDAwWhcN MTYwNTEwMTIwMDAwWjCBpTELMAkGA1UEBhMCVVMxEjAQBgNVBAgTCVRlbm5lc3Nl ZTESMBAGA1UEBxMJTmFzaHZpbGxlMVUwUwYDVQQKE0xHZW5lcmFsIENvdW5jaWwg b24gRmluYW5jZSBhbmQgQWRtaW5pc3RyYXRpb24gb2YgdGhlIFVuaXRlZCBNZXRo b2Rpc3QgQ2h1cmNoMRcwFQYDVQQDEw5tYWlsMi5nY2ZhLm9yZzCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAKXVrgJeGZYitZT++A0kL6EDpEF8oJtOfVsZ /FFbCMXUhZgmYxmUcE7lU+MVb2l1hxaXS55xWLAuIoMrm0hhhqmJlEZcBnasXxi3 ojXYaWbsIZp26lJRj7P9CkSp5qZ3XybhXnB7VWRA35nptCD+aijxMHVes4d74UP5 8rlArh/Bb9HF7d6eDBIpHNIDxNHhlntDGJkzzqRo52mPkczCQaPw1lyN1Kq6k7+H lO56NzwLIG2iesmgRQM8fGEs3zmCOBSAGGM5tQ1lxT8cM12HoToSL6CTSK0WW8z+ jMkvGNPXFIk2X0npPDJ83LjByDUpure59VlMVv623ZKUaC4VuD0CAwEAAaOCBC8w ggQrMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBT5 GSZDsc5bM6s/voOsalVOWL1kezCCAnEGA1UdEQSCAmgwggJkgg5tYWlsMi5nY2Zh Lm9yZ4IIZ2NmYS5vcmeCDW1haWwuZ2NmYS5vcmeCEWdjZmFteDAxLmdjZmEub3Jn ghVBdXRvRGlzY292ZXIuR0NGQS5PUkeCHkF1dG9EaXNjb3Zlci5VTUNGb3VuZGF0 aW9uLk9SR4IpQXV0b0Rpc2NvdmVyLnVuaXRlZG1ldGhvZGlzdGluc3VyYW5jZS5v cmeCFkF1dG9EaXNjb3Zlci51bWlucy5jb22CFkF1dG9EaXNjb3Zlci51bWlucy5v cmeCIEF1dG9EaXNjb3Zlci51bWNnbG9iYWxpbXBhY3Qub3JngiVBdXRvRGlzY292 ZXIuVU1DRGV2ZWxvcG1lbnRDZW50ZXIuT1JHghZBdXRvRGlzY292ZXIuR0NVTU0u T1JHghpBdXRvRGlzY292ZXIuZWFzeTJnaXZlLm5ldIIYQXV0b0Rpc2NvdmVyLnVt Y2FyZXMub3JnghFVTUNGb3VuZGF0aW9uLk9SR4IcdW5pdGVkbWV0aG9kaXN0aW5z dXJhbmNlLm9yZ4IJdW1pbnMuY29tggl1bWlucy5vcmeCE3VtY2dsb2JhbGltcGFj dC5vcmeCGFVNQ0RldmVsb3BtZW50Q2VudGVyLk9SR4IJR0NVTU0uT1JHgg1lYXN5 MmdpdmUubmV0ggt1bWNhcmVzLm9yZ4ISZ2NmYW14MDFoLmdjZmEub3JnghFnY2Zh bXgwMi5nY2ZhLm9yZ4ISZ2NmYW14MDJoLmdjZmEub3JnggxjYXMuZ2NmYS5vcmeC DXNtdHAuZ2NmYS5vcmeCCEdDRkEuT1JHMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDov L2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNC5jcmwwL6AtoCuGKWh0dHA6 Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzQuY3JsMEwGA1UdIARFMEMw NwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0 LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYY aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2Fj ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0 MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBAFIs6nWQWl5nXinZa4a0 rxXhGHi/z0Bq8i1tpuPN/5A9gxP8yKWsNG9u7vrJxLkrXgNzgjDIzGiQU0Y6r3uT 2QLPsLuE2Zf07shEaqKzX965yag9cszJWIf///k2dYP/DU/1QqxSBOoO1mQ02vIT VGnSrL6V9C3oQDf4ON1yG4iUXP1//CfAiqElWcl5qNO55XzKHRGuF0tbTaph07qC fng85nCG2st4sh2Epg3otv5xxHyWDAivRlhmZLSKUAP6i5P0NIitpyjR7cvkVCDd 8d6vMdnecyQTM2jC5s/HowNokSmUN86nmsI9Xy2HjiOJRReNG/xa9bPhhMWEeB7h UOg= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdWuAl4ZliK1lP74DSQv oQOkQXygm059Wxn8UVsIxdSFmCZjGZRwTuVT4xVvaXWHFpdLnnFYsC4igyubSGGG qYmURlwGdqxfGLeiNdhpZuwhmnbqUlGPs/0KRKnmpndfJuFecHtVZEDfmem0IP5q KPEwdV6zh3vhQ/nyuUCuH8Fv0cXt3p4MEikc0gPE0eGWe0MYmTPOpGjnaY+RzMJB o/DWXI3UqrqTv4eU7no3PAsgbaJ6yaBFAzx8YSzfOYI4FIAYYzm1DWXFPxwzXYeh OhIvoJNIrRZbzP6MyS8Y09cUiTZfSek8MnzcuMHINSm6t7n1WUxW/rbdkpRoLhW4 PQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19460499716269596165284165048012064583 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-10 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tennessee' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nashville' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'General Council on Finance and Administration of the United Methodist Church' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail2.gcfa.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20934689718291114378828085677436960110409042063355411636507361577655936364158008995577486080352162330355944073644533375007969835050427840266632231133394059593926529628180990001925439298256918230528547753851727164643560326425756764841213397526266342210500645239536711193271760101172780847451249929168035788979076081723109406780217578959826303537398807000593446329114227221062470725168304267751686557441754885653167934127809930308718922642503811763015413243227768274626056638807304794722981068186170375273917847854496862996110539911994927522824789377368181222968951565481400462123222458576258955011135453427586966075453 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f9192643b1ce5b33ab3fbe83ac6a554e58bd647b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (616 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.gcfa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcfa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gcfa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcfamx01.gcfa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.GCFA.ORG' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.UMCFoundation.ORG' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.unitedmethodistinsurance.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.umins.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.umins.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.umcglobalimpact.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.UMCDevelopmentCenter.ORG' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.GCUMM.ORG' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.easy2give.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.umcares.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'UMCFoundation.ORG' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedmethodistinsurance.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umins.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umins.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umcglobalimpact.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'UMCDevelopmentCenter.ORG' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'GCUMM.ORG' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy2give.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umcares.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcfamx01h.gcfa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcfamx02.gcfa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcfamx02h.gcfa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas.gcfa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.gcfa.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'GCFA.ORG' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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