*.cityofhope.org
- City of Hope -
Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 07:ce:a8:0d:5b:db:c0:08:c7:67:82:a0:fe:2c:f3:46 was issued on by DigiCert Inc.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
City of Hope
Organization:
City of Hope
State / Province:
California
Locality: Duarte
Country: US
Locality: Duarte
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 07:ce:a8:0d:5b:db:c0:08:c7:67:82:a0:fe:2c:f3:46Serial Number (int): 10377617626560909272416808888961921862
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: ee:66:5f:e0:70:8c:52:73:e6:18:92:30:a9:d0:a6:0d:44:49:47:4e
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17
Fingerprint (sha1): 8a:bc:94:5d:81:6f:51:64:3a:14:41:24:99:4c:82:36:22:8c:49:5b
Fingerprint (sha256): 10:76:12:58:af:7b:c3:a1:17:d4:ff:0c:32:73:52:21:c5:f6:06:b1:56:cd:b7:40:1f:0a:da:fe:c3:44:a7:a4
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
Check the revocation status for certificate *.cityofhope.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.cityofhope.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.cityofhope.org
Other certificates including the domain name cityofhope.org
(limited to 100 certificates)
*.cityofhope.org
sni.cloudflaressl.com
sni.cloudflaressl.com
san-13-s10.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
*.cityofhope.org
sni.cloudflaressl.com
secure.cityofhope.org
ssl546023.cloudflaressl.com
apply.gradschool.cityofhope.org
sni.cloudflaressl.com
sni.cloudflaressl.com
*.cityofhope.org
*.cityofhope.org
www.cityofhope.org
sni.cloudflaressl.com
sni.cloudflaressl.com
ourhope.cityofhope.org
*.cityofhope.org
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
events.cityofhope.org
sni.cloudflaressl.com
cityshop.cityofhope.org
sni.cloudflaressl.com
*.cityofhope.org
sni.cloudflaressl.com
cme.cityofhope.org
ssl546022.cloudflaressl.com
ssl546026.cloudflaressl.com
breakthroughs.cityofhope.org
ourhope.cityofhope.org
apis.cityofhope.org
*.cityofhope.org
ourhope.cityofhope.org
ourhope.cityofhope.org
san-13-s10.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
secure.cityofhope.org
*.cityofhope.org
*.cityofhope.org
RECRUITING.CITYOFHOPE.ORG
*.cityofhope.org
secure.cityofhope.org
ourhope.cityofhope.org
sni.cloudflaressl.com
mask.stayclassy.org
ourhope.cityofhope.org
*.cityofhope.org
*.cityofhope.org
apply.gradschool.cityofhope.org
*.cityofhope.org
mask.stayclassy.org
sni.cloudflaressl.com
*.cityofhope.org
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl546026.cloudflaressl.com
sni.cloudflaressl.com
care.cityofhope.org
sni.cloudflaressl.com
cityshop.cityofhope.org
*.cityofhope.org
mask.stayclassy.org
secure.cityofhope.org
sni.cloudflaressl.com
sni.cloudflaressl.com
github.cityofhope.org
ourhope.cityofhope.org
github.cityofhope.org
*.cityofhope.org
sni.cloudflaressl.com
cityshop.cityofhope.org
ourhope.cityofhope.org
sni.cloudflaressl.com
sni.cloudflaressl.com
mask.stayclassy.org
sni.cloudflaressl.com
sni.cloudflaressl.com
dev-www.cityofhope.org
sni.cloudflaressl.com
sni.cloudflaressl.com
github.cityofhope.org
sni.cloudflaressl.com
gfjobs.alljobs.ai
sni.cloudflaressl.com
ssl330954.cloudflaressl.com
san-13-s10.tlsprovisioning.exacttarget.com
ourhope.cityofhope.org
cme.cityofhope.org
apply.gradschool.cityofhope.org
github.cityofhope.org
ourhope.cityofhope.org
sni.cloudflaressl.com
*.cityofhope.org
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
san-13-s10.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
*.cityofhope.org
sni.cloudflaressl.com
secure.cityofhope.org
ssl546023.cloudflaressl.com
apply.gradschool.cityofhope.org
sni.cloudflaressl.com
sni.cloudflaressl.com
*.cityofhope.org
*.cityofhope.org
www.cityofhope.org
sni.cloudflaressl.com
sni.cloudflaressl.com
ourhope.cityofhope.org
*.cityofhope.org
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
events.cityofhope.org
sni.cloudflaressl.com
cityshop.cityofhope.org
sni.cloudflaressl.com
*.cityofhope.org
sni.cloudflaressl.com
cme.cityofhope.org
ssl546022.cloudflaressl.com
ssl546026.cloudflaressl.com
breakthroughs.cityofhope.org
ourhope.cityofhope.org
apis.cityofhope.org
*.cityofhope.org
ourhope.cityofhope.org
ourhope.cityofhope.org
san-13-s10.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
secure.cityofhope.org
*.cityofhope.org
*.cityofhope.org
RECRUITING.CITYOFHOPE.ORG
*.cityofhope.org
secure.cityofhope.org
ourhope.cityofhope.org
sni.cloudflaressl.com
mask.stayclassy.org
ourhope.cityofhope.org
*.cityofhope.org
*.cityofhope.org
apply.gradschool.cityofhope.org
*.cityofhope.org
mask.stayclassy.org
sni.cloudflaressl.com
*.cityofhope.org
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl546026.cloudflaressl.com
sni.cloudflaressl.com
care.cityofhope.org
sni.cloudflaressl.com
cityshop.cityofhope.org
*.cityofhope.org
mask.stayclassy.org
secure.cityofhope.org
sni.cloudflaressl.com
sni.cloudflaressl.com
github.cityofhope.org
ourhope.cityofhope.org
github.cityofhope.org
*.cityofhope.org
sni.cloudflaressl.com
cityshop.cityofhope.org
ourhope.cityofhope.org
sni.cloudflaressl.com
sni.cloudflaressl.com
mask.stayclassy.org
sni.cloudflaressl.com
sni.cloudflaressl.com
dev-www.cityofhope.org
sni.cloudflaressl.com
sni.cloudflaressl.com
github.cityofhope.org
sni.cloudflaressl.com
gfjobs.alljobs.ai
sni.cloudflaressl.com
ssl330954.cloudflaressl.com
san-13-s10.tlsprovisioning.exacttarget.com
ourhope.cityofhope.org
cme.cityofhope.org
apply.gradschool.cityofhope.org
github.cityofhope.org
ourhope.cityofhope.org
sni.cloudflaressl.com
*.cityofhope.org
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
Certificate
The complete raw certificate details for *.cityofhope.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIQB86oDVvbwAjHZ4Kg/izzRjANBgkqhkiG9w0BAQsFADBZ MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjMx MjA3MDAwMDAwWhcNMjUwMTAzMjM1OTU5WjBlMQswCQYDVQQGEwJVUzETMBEGA1UE CBMKQ2FsaWZvcm5pYTEPMA0GA1UEBxMGRHVhcnRlMRUwEwYDVQQKEwxDaXR5IG9m IEhvcGUxGTAXBgNVBAMMECouY2l0eW9maG9wZS5vcmcwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDthQW6zyAL2qrg2mtWQEW6kKJGDYJtCReZzO7bxHxy fazgFTz79DMLR+oZORg9e+LF9/myYJ2G6X2UOccCaVIOO1sMLDdW/+bYSzQOA8u1 CeLVULA2cnvQGo7WYizvbDCzq2vrs9NyKoIt/hhjkHlwWY0yjItxW6UyS0nbn56Z meLSpAdJ1KGYuUKp+yThOhCYM5Z/E9sGVTliaZf4FVM7Ec5ggzVlO9/YaxMLQXvk /QXmqup4eH/tQOaWpML1pUx5BkA+Mzhb4m2U+bG+cSjUTIl7rwRz2uQoSjm3iaLd gtNoeQSFQ0+uQP5bAxr8jdsAsfVby2SaBtwSZ1PvOf0NAgMBAAGjggIfMIICGzAf BgNVHSMEGDAWgBR0hYDAZsffN97PvSk3qgMdvu3NFzAdBgNVHQ4EFgQU7mZf4HCM UnPmGJIwqdCmDURJR04wGwYDVR0RBBQwEoIQKi5jaXR5b2Zob3BlLm9yZzA+BgNV HSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2lj ZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdp Y2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5j cmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2Jh bEcyVExTUlNBU0hBMjU2MjAyMENBMS0xLmNybDCBhwYIKwYBBQUHAQEEezB5MCQG CCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKG RWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcyVExT UlNBU0hBMjU2MjAyMENBMS0xLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkC BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQChNR7cdgUseI410tgcrnFJQFPm xnL0f44xupeWQTfjPClNUhOkzPwuDIsl3mQ//nVlCBmEyN/UDetO4oSYPzAxy2dM StbHQ0VSNab/hIYMQKOpfuaOb/tTXst3FLfzj/BSuNb4qBt8payISAEz10zs1MRN wmDDe3UgCR7AiOA7ZMBSZJ0DdYyqBD4jdSC2UKxeM9kZjeTyt3SZsJjyEOPfrTbp cFI95vhmjm5YLQl/T32qswmOTtHHpMFV/+MFXG7EDSEu0Dx6RpcwvAvfaEsZoRkj QLqBQ2i22CqZyiU0hHKkvGVZPhwk6XCLw82ayL8+0kdI+ng3kFoaxbS1d3cw -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YUFus8gC9qq4NprVkBF upCiRg2CbQkXmczu28R8cn2s4BU8+/QzC0fqGTkYPXvixff5smCdhul9lDnHAmlS DjtbDCw3Vv/m2Es0DgPLtQni1VCwNnJ70BqO1mIs72wws6tr67PTciqCLf4YY5B5 cFmNMoyLcVulMktJ25+emZni0qQHSdShmLlCqfsk4ToQmDOWfxPbBlU5YmmX+BVT OxHOYIM1ZTvf2GsTC0F75P0F5qrqeHh/7UDmlqTC9aVMeQZAPjM4W+JtlPmxvnEo 1EyJe68Ec9rkKEo5t4mi3YLTaHkEhUNPrkD+WwMa/I3bALH1W8tkmgbcEmdT7zn9 DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10377617626560909272416808888961921862 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Duarte' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City of Hope' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cityofhope.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29984074058175394425650666104141154304125151388089917564875728904477822523264081310165468467952492183379709750396103731295058378111100417604147308616154711391964343862830478793794768589817098322019045129419418283504870771664141862905867255650745099664228482461402807821085503189224551224576934598004500959390166691752029158070586214793922522309534584659828873178064334572753454027880577824323427822993205275344553223072738996591500669958028451666746100002517534755508182948761958662811257906120026445624847002447205453179088228641498461266232600914301534904841384780684850945613984695625634036901989080262769433509133 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ee665fe0708c5273e6189230a9d0a60d4449474e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cityofhope.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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