mail.presidency.gov.rw

Issued by DigiCert SHA2 Secure Server CA

About this certificate


This digital certificate with serial number 0f:07:95:10:f8:c8:99:07:8a:89:fe:f5:f3:3e:11:d1 was issued on by DigiCert Inc .

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: Certificate subjectAltName '[PRES-MX01]' contains an internal server name
  • ERROR: Certificate subjectAltName '[PRES-MX02]' contains an internal server name
  • ERROR: Certificate subjectAltName '[PRES-DAG]' contains an internal server name
  • ERROR: Certificate subjectAltName '[RG-MX01.rgdomain.local]' contains an internal server name
  • ERROR: Certificate subjectAltName '[RG-MX02.rgdomain.local]' contains an internal server name
  • ERROR: Certificate subjectAltName '[RG-MX01]' contains an internal server name
  • ERROR: Certificate subjectAltName '[RG-MX02]' contains an internal server name
  • ERROR: Certificate subjectAltName '[GOV-MX01.govvdomain.local]' contains an internal server name
  • ERROR: Certificate subjectAltName '[GOV-MX02.govvdomain.local]' contains an internal server name
  • ERROR: Certificate subjectAltName '[GOV-DAG.govvdomain.local]' contains an internal server name
  • ERROR: Certificate subjectAltName '[GOV-MX01]' contains an internal server name
  • ERROR: Certificate subjectAltName '[GOV-MX02]' contains an internal server name
  • ERROR: Certificate subjectAltName '[GOV-DAG]' contains an internal server name
  • ERROR: Certificate subjectAltName '[DAG-RG]' contains an internal server name
  • ERROR: Certificate subjectAltName '[DAG-RG.rgdomain.local]' contains an internal server name

Office of the President

Organization: Office of the President
State / Province: City of Kigali
Locality: Kigali
Country: RW

DigiCert Inc

Organization: DigiCert Inc
State / Province: City of Kigali
Locality: Kigali
Country: RW

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:07:95:10:f8:c8:99:07:8a:89:fe:f5:f3:3e:11:d1
Serial Number (int): 19977789438459816474877769847370813905
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fb:f0:d0:28:c6:87:53:68:a9:f2:eb:6c:f7:45:54:f4:2e:80:ce:6e
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 98:fc:5a:08:09:f0:00:6a:6e:cb:5d:3b:d5:21:f7:f6:31:9c:7b:58
Fingerprint (sha256): 33:6e:47:9c:78:31:62:6d:7e:48:f2:21:f1:d1:dc:22:b1:72:ff:ad:5f:58:33:de:7a:72:d2:d3:ea:48:51:ee

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g2.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g2.crl

Check the revocation status for the current certificate on mail.presidency.gov.rw
23
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.presidency.gov.rw
autodiscover.presidency.gov.rw
pres-mx01.otpdom2.presidency.gov.rw
pres-mx02.otpdom2.presidency.gov.rw
PRES-DAG.otpdom2.presidency.gov.rw
PRES-MX01
PRES-MX02
PRES-DAG
mail.rg.gov.rw
autodiscover.rg.gov.rw
RG-MX01.rgdomain.local
RG-MX02.rgdomain.local
RG-MX01
RG-MX02
mail.gov.rw
GOV-MX01.govvdomain.local
GOV-MX02.govvdomain.local
GOV-DAG.govvdomain.local
GOV-MX01
GOV-MX02
GOV-DAG
DAG-RG
DAG-RG.rgdomain.local

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIG3TCCBcWgAwIBAgIQDweVEPjImQeKif718z4R0TANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTQwODE0MDAwMDAwWhcN MTUxMDIwMTIwMDAwWjB6MQswCQYDVQQGEwJSVzEXMBUGA1UECBMOQ2l0eSBvZiBL aWdhbGkxDzANBgNVBAcTBktpZ2FsaTEgMB4GA1UEChMXT2ZmaWNlIG9mIHRoZSBQ cmVzaWRlbnQxHzAdBgNVBAMTFm1haWwucHJlc2lkZW5jeS5nb3YucncwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD4uVvhNkZ+EfOjag+BhaDDV0yf4hW ELfYb4qqD70cOEgpbXAAuvTEEG7KW51jwWXcqVmF7FQr6MGHGhMycb+7Wz6A6BIY FR0eeB5LyLNPWMTF8kV1Ru6PtLJSA/Fpr3pACIKejijtblAAVxqkSNyOqEKv1FD3 RhEnD67MFxB31FTX2e8NwNMgTheKvYHf8yi+4x4OsnLg3u+2t8ECqvGJuJ3cC67e 7sixIEPSv4MLb8QVKYzNcmm+HgTfVq3XcY8QCDS4BN07UfxnlKYWxOUG23ILGVMs HEQ9R6+t5YGrTgmGf1wV+Tlq0/wJ02kzz+uE9JqzjPvt2a4o+4CxoCQ1AgMBAAGj ggOKMIIDhjAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4E FgQU+/DQKMaHU2ip8uts90VU9C6Azm4wggHWBgNVHREEggHNMIIByYIWbWFpbC5w cmVzaWRlbmN5Lmdvdi5yd4IeYXV0b2Rpc2NvdmVyLnByZXNpZGVuY3kuZ292LnJ3 giNwcmVzLW14MDEub3RwZG9tMi5wcmVzaWRlbmN5Lmdvdi5yd4IjcHJlcy1teDAy Lm90cGRvbTIucHJlc2lkZW5jeS5nb3YucneCIlBSRVMtREFHLm90cGRvbTIucHJl c2lkZW5jeS5nb3YucneCCVBSRVMtTVgwMYIJUFJFUy1NWDAygghQUkVTLURBR4IO bWFpbC5yZy5nb3YucneCFmF1dG9kaXNjb3Zlci5yZy5nb3YucneCFlJHLU1YMDEu cmdkb21haW4ubG9jYWyCFlJHLU1YMDIucmdkb21haW4ubG9jYWyCB1JHLU1YMDGC B1JHLU1YMDKCC21haWwuZ292LnJ3ghlHT1YtTVgwMS5nb3Z2ZG9tYWluLmxvY2Fs ghlHT1YtTVgwMi5nb3Z2ZG9tYWluLmxvY2FsghhHT1YtREFHLmdvdnZkb21haW4u bG9jYWyCCEdPVi1NWDAxgghHT1YtTVgwMoIHR09WLURBR4IGREFHLVJHghVEQUct Ukcucmdkb21haW4ubG9jYWwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5k aWdpY2VydC5jb20vc3NjYS1zaGEyLWcyLmNybDAvoC2gK4YpaHR0cDovL2NybDQu ZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nMi5jcmwwQgYDVR0gBDswOTA3BglghkgB hv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ UzB8BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2lj ZXJ0LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29t L0RpZ2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMA0G CSqGSIb3DQEBCwUAA4IBAQAkNEaC9b40CP3GeRVo3N55lDXaIDz5tLsdWD4dl8Y9 JAUhO4bLoNc8P+Ppp8FRVo5iQq1T0S1egbuIhlJ/HA63vdXETnM9/9K3GtR5ysWO VqgnRQjBmASsTbqUMWMPDktow8YWGQYsEnKHHT8HnHROE3DIlkK9gdo2jJOEQDu2 zvljL6yHsNER0Bw6A+dag5DttLvrec645f/cDuxqcIZCXs4w3DVOivNWNz6uD7/9 gGWe1+j9HKszxMznIugKJAanXkTlHxpPp9796dtHTYKRL95hro5Rr5Mjv/q5nqmH h1tLP4gzmbpCOmNLtGfYHJzMCHEtd18yhtrKE1LYF30C -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Llb4TZGfhHzo2oPgYW gw1dMn+IVhC32G+Kqg+9HDhIKW1wALr0xBBuyludY8Fl3KlZhexUK+jBhxoTMnG/ u1s+gOgSGBUdHngeS8izT1jExfJFdUbuj7SyUgPxaa96QAiCno4o7W5QAFcapEjc jqhCr9RQ90YRJw+uzBcQd9RU19nvDcDTIE4Xir2B3/MovuMeDrJy4N7vtrfBAqrx ibid3Auu3u7IsSBD0r+DC2/EFSmMzXJpvh4E31at13GPEAg0uATdO1H8Z5SmFsTl BttyCxlTLBxEPUevreWBq04Jhn9cFfk5atP8CdNpM8/rhPSas4z77dmuKPuAsaAk NQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19977789438459816474877769847370813905 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-20 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RW' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City of Kigali' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kigali' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Office of the President' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.presidency.gov.rw' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24728356170895946704883090009246368526945378953473019141178927369098378771509407272330832600087454493693355073534538030962653529289824495953332625844044959881409541901934456729335964166132020062040878482537842212003492090149889969699668568825333307297925843526144568285054716738913331303248657649341327510910863535897494844539961007861621513194018923709807978083417442968044065785834985123480626752752799545422418127468823720071872885582305366639219466029454039471308850786903559860104422735570062097927493059635901966252129279944535451283123838628937443727167011291949236137328344425144038759592111366268864692233269 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fbf0d028c6875368a9f2eb6cf74554f42e80ce6e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (461 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.presidency.gov.rw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.presidency.gov.rw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pres-mx01.otpdom2.presidency.gov.rw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pres-mx02.otpdom2.presidency.gov.rw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PRES-DAG.otpdom2.presidency.gov.rw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PRES-MX01' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PRES-MX02' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PRES-DAG' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.rg.gov.rw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.rg.gov.rw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'RG-MX01.rgdomain.local' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'RG-MX02.rgdomain.local' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'RG-MX01' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'RG-MX02' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gov.rw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'GOV-MX01.govvdomain.local' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'GOV-MX02.govvdomain.local' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'GOV-DAG.govvdomain.local' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'GOV-MX01' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'GOV-MX02' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'GOV-DAG' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DAG-RG' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DAG-RG.rgdomain.local' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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