*.qastaging.launchpad.net
- CANONICAL GROUP LIMITED -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 05:67:97:e9:02:41:fa:14:3b:b9:13:e4:12:0c:c9:37 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
CANONICAL GROUP LIMITED
Organization:
CANONICAL GROUP LIMITED
State / Province:
Southwark
Locality: London
Country: GB
Locality: London
Country: GB
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:67:97:e9:02:41:fa:14:3b:b9:13:e4:12:0c:c9:37Serial Number (int): 7184027660064414998859084462501447991
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 86:61:77:a1:33:51:42:63:45:32:65:1c:eb:62:28:0e:c2:c5:e2:b7
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 70:e4:05:81:6c:08:ee:e8:a2:bc:f3:a3:23:fc:3e:fe:0d:bf:5b:36
Fingerprint (sha256): 0f:cf:8e:09:5d:42:d0:c0:fd:ca:db:b9:50:df:5c:96:b1:5e:4d:8a:4a:f2:67:83:d9:7f:97:26:eb:9e:c0:2e
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g4.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g4.crl
Check the revocation status for certificate *.qastaging.launchpad.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.qastaging.launchpad.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.qastaging.launchpad.net
qastaging.launchpad.net
qastaging.launchpad.net
Other certificates including the domain name launchpad.net
(limited to 100 certificates)
lists.launchpad.net
help.launchpad.net
lists.launchpad.net
edge.launchpad.net
git.launchpad.net
qastaging.launchpad.net
test-blog.launchpad.net
git.launchpad.net
launchpad.net
lists.launchpad.net
*.launchpad.net
private-ppa.launchpad.net
about.launchpad.net
help.launchpad.net
qastaging.launchpad.net
private-ppa.launchpad.net
test-blog.launchpad.net
launchpad.net
about.launchpad.net
lists.launchpad.net
edge.launchpad.net
help.launchpad.net
blog.launchpad.net
test-blog.launchpad.net
bazaar.staging.launchpad.net
qastaging.launchpad.net
dev.launchpad.net
help.launchpad.net
*.qastaging.launchpad.net
edge.launchpad.net
qastaging.launchpad.net
launchpad.net
private-ppa.launchpad.net
blog.launchpad.net
git.launchpad.net
launchpad.net
qastaging.launchpad.net
git.launchpad.net
help.launchpad.net
lists.launchpad.net
staging.launchpad.net
launchpad.net
bazaar.launchpad.net
help.launchpad.net
lists.launchpad.net
about.launchpad.net
login.launchpad.net
bazaar.launchpad.net
launchpad.net
blog.launchpad.net
staging.launchpad.net
bazaar.staging.launchpad.net
help.launchpad.net
qastaging.launchpad.net
staging.launchpad.net
staging.launchpad.net
*.qastaging.launchpad.net
git.launchpad.net
git.launchpad.net
bazaar.staging.launchpad.net
login.launchpad.net
login.launchpad.net
edge.launchpad.net
blog.launchpad.net
staging.launchpad.net
lists.launchpad.net
blog.launchpad.net
login.launchpad.net
launchpad.net
bazaar.staging.launchpad.net
dev.launchpad.net
edge.launchpad.net
bazaar.launchpad.net
lists.launchpad.net
staging.launchpad.net
bazaar.staging.launchpad.net
bazaar.launchpad.net
bazaar.launchpad.net
private-ppa.launchpad.net
about.launchpad.net
help.launchpad.net
test-blog.launchpad.net
dev.launchpad.net
login.launchpad.net
about.launchpad.net
staging.launchpad.net
qastaging.launchpad.net
bazaar.launchpad.net
lists.launchpad.net
edge.launchpad.net
private-ppa.launchpad.net
help.launchpad.net
edge.launchpad.net
blog.launchpad.net
private-ppa.launchpad.net
staging.launchpad.net
dev.launchpad.net
git.launchpad.net
launchpad.net
launchpad.net
help.launchpad.net
lists.launchpad.net
edge.launchpad.net
git.launchpad.net
qastaging.launchpad.net
test-blog.launchpad.net
git.launchpad.net
launchpad.net
lists.launchpad.net
*.launchpad.net
private-ppa.launchpad.net
about.launchpad.net
help.launchpad.net
qastaging.launchpad.net
private-ppa.launchpad.net
test-blog.launchpad.net
launchpad.net
about.launchpad.net
lists.launchpad.net
edge.launchpad.net
help.launchpad.net
blog.launchpad.net
test-blog.launchpad.net
bazaar.staging.launchpad.net
qastaging.launchpad.net
dev.launchpad.net
help.launchpad.net
*.qastaging.launchpad.net
edge.launchpad.net
qastaging.launchpad.net
launchpad.net
private-ppa.launchpad.net
blog.launchpad.net
git.launchpad.net
launchpad.net
qastaging.launchpad.net
git.launchpad.net
help.launchpad.net
lists.launchpad.net
staging.launchpad.net
launchpad.net
bazaar.launchpad.net
help.launchpad.net
lists.launchpad.net
about.launchpad.net
login.launchpad.net
bazaar.launchpad.net
launchpad.net
blog.launchpad.net
staging.launchpad.net
bazaar.staging.launchpad.net
help.launchpad.net
qastaging.launchpad.net
staging.launchpad.net
staging.launchpad.net
*.qastaging.launchpad.net
git.launchpad.net
git.launchpad.net
bazaar.staging.launchpad.net
login.launchpad.net
login.launchpad.net
edge.launchpad.net
blog.launchpad.net
staging.launchpad.net
lists.launchpad.net
blog.launchpad.net
login.launchpad.net
launchpad.net
bazaar.staging.launchpad.net
dev.launchpad.net
edge.launchpad.net
bazaar.launchpad.net
lists.launchpad.net
staging.launchpad.net
bazaar.staging.launchpad.net
bazaar.launchpad.net
bazaar.launchpad.net
private-ppa.launchpad.net
about.launchpad.net
help.launchpad.net
test-blog.launchpad.net
dev.launchpad.net
login.launchpad.net
about.launchpad.net
staging.launchpad.net
qastaging.launchpad.net
bazaar.launchpad.net
lists.launchpad.net
edge.launchpad.net
private-ppa.launchpad.net
help.launchpad.net
edge.launchpad.net
blog.launchpad.net
private-ppa.launchpad.net
staging.launchpad.net
dev.launchpad.net
git.launchpad.net
launchpad.net
launchpad.net
Certificate
The complete raw certificate details for *.qastaging.launchpad.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIQBWeX6QJB+hQ7uRPkEgzJNzANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTUwNTA1MDAwMDAwWhcN MTYwNTA5MTIwMDAwWjB4MQswCQYDVQQGEwJHQjESMBAGA1UECBMJU291dGh3YXJr MQ8wDQYDVQQHEwZMb25kb24xIDAeBgNVBAoTF0NBTk9OSUNBTCBHUk9VUCBMSU1J VEVEMSIwIAYDVQQDDBkqLnFhc3RhZ2luZy5sYXVuY2hwYWQubmV0MIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyksP9WxKGi1IYGswt3q8myll1k6NFux qdqyd7Pb+Psp/jKTt2Q0Pnf29ChZ43CCRqA9o1s8wDf/jESlUt3nujyRLWsa7zR2 RGIP2xSIIqJhH010tgcSEW4sYjU8y1ja8wg3aduVcLW+qliPp8+R01GfYEaDB7mm NzCqC77o/WDamvnDGTpiQx2/KRdHhal4Qf8k9eG4MIzKtSDbyKDSIh8boeUyJ0nP nCAWwoo9G904AYeuf0F/sik11/SqvuYWVILNRKtrbUiA1Ir6I0kR32f65UwXvwQo wuihvS4BPQkPY1KniYPzJbWMH7nu0NuwYqrDvgwKHr6VwhaRxDrVtQIDAQABo4IB 7zCCAeswHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYE FIZhd6EzUUJjRTJlHOtiKA7CxeK3MD0GA1UdEQQ2MDSCGSoucWFzdGFnaW5nLmxh dW5jaHBhZC5uZXSCF3Fhc3RhZ2luZy5sYXVuY2hwYWQubmV0MA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAv oC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNC5jcmww L6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzQuY3Js MEIGA1UdIAQ7MDkwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzAB hhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9j YWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5j cnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAQEAKGv3Xqi0VEnpmaPx TFCmmYROWNXmxDFvL2UXGNg0Il4ACsnOQMDg1hMKCUpOp/0WDpx9YYh6wu8Xg6iN 00NRdarK8FMi/wm7LJmhx5ihTPBZ8m53WAK1GhPoKs5OrWvuGiY7SIGSepSyvqQV p5nWwl0DWmqaG7DNuEKXY8iz31Aun1jI04LbnOKlFJ+WebVyn2qm+S1+C3X+U0NQ 52wuB9LnO8Ek26SyLKGv5X7WbQy4ezgriJnmVIvcOoaIai9sRycA2nYJU/I0OwE+ JexOnZzOZFAD4xOmTf8erO9Q0x/600Ch5coHiQWVnIJeDfnjxmZOSN0LE0nzcwO9 ov5Yog== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyksP9WxKGi1IYGswt3q 8myll1k6NFuxqdqyd7Pb+Psp/jKTt2Q0Pnf29ChZ43CCRqA9o1s8wDf/jESlUt3n ujyRLWsa7zR2RGIP2xSIIqJhH010tgcSEW4sYjU8y1ja8wg3aduVcLW+qliPp8+R 01GfYEaDB7mmNzCqC77o/WDamvnDGTpiQx2/KRdHhal4Qf8k9eG4MIzKtSDbyKDS Ih8boeUyJ0nPnCAWwoo9G904AYeuf0F/sik11/SqvuYWVILNRKtrbUiA1Ir6I0kR 32f65UwXvwQowuihvS4BPQkPY1KniYPzJbWMH7nu0NuwYqrDvgwKHr6VwhaRxDrV tQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7184027660064414998859084462501447991 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-09 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Southwark' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CANONICAL GROUP LIMITED' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.qastaging.launchpad.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21607053237764490996137869132075918111319242336307958046589677311372385010381696668864173729485631057662182224858394888815491344661691151390936837654730029824856093298063517519998441583031502107113561550935546562674346346274543434505905493035723276748925053742040627544457341635620776466766166229781317245133800530725365965256801539344930325729729733903490153700893733047407557661655438147648649146199344178037764945262372324904411220357938181393048617661041417658519064116855895455940052210748269711263882423310298575724832057552753262227516276299242258583867237822867518253961604286986172643337874838672630859093429 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 866177a1335142634532651ceb62280ec2c5e2b7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qastaging.launchpad.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qastaging.launchpad.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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