*.usps.com
- United States Postal Service -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 0a:22:c5:5e:3d:5b:89:14:f1:b6:19:31:c8:5c:c3:fd was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
United States Postal Service
Organization:
United States Postal Service
State / Province:
North Carolina
Locality: Morrisville
Country: US
Locality: Morrisville
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0a:22:c5:5e:3d:5b:89:14:f1:b6:19:31:c8:5c:c3:fdSerial Number (int): 13472821152167783787576510252834407421
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: fb:a8:e8:77:64:0c:df:2d:5f:56:79:f9:7a:46:8d:f2:71:63:82:65
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): d2:75:da:4d:6e:68:b5:9d:01:83:de:ba:3b:b5:df:7c:9e:d5:56:f8
Fingerprint (sha256): 10:d7:c8:60:9c:33:08:bb:72:e8:05:a0:7e:4b:0f:0d:71:40:79:36:70:86:9f:2a:26:cf:fa:e0:ba:10:a6:17
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate *.usps.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.usps.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.usps.com
*.usps.gov
*.usps.gov
Other certificates including the domain name usps.com
(limited to 100 certificates)
extrpt.usps.com
gateway-cat.usps.com
dev-reship.usps.com
eddmr-dr.usps.com
sdx-cat.usps.com
federation.usps.com
crosswalk.usps.com
fast-cat.usps.com
pfoiapal.usps.com
cid-prod.usps.com
pwim-sit.usps.com
mid-cat.usps.com
*.usps.com
rims-imdas-sit.usps.com
pdx-cat.usps.com
cat-smip.usps.com
pi.usps.com
lcrs.usps.com
q-mnas2see.usps.com
ereassign.usps.com
iletms-cat.usps.com
idp.usps.com
crosswalk-cat.usps.com
lgis-dev.usps.com
internationalclaims.usps.com
ea-webtools.usps.com
gateway.usps.com
www.usps.com
rims-imdas-cat.usps.com
eeo-dev.usps.com
myusps.gov
news.usps.com
crosswalk-cat.usps.com
pay.usps.com
mgoint-cat.usps.com
crosswalk-dev.usps.com
poboxes.usps.com
vrsi-841990001i.usps.com
mdxtem.usps.com
mdx.usps.com
ereassign.usps.com
mdxcat.usps.com
sphone-prd.usps.com
ivs-sign.usps.com
cat1a.usps.com
catpx-custreg.usps.com
cat-services.usps.com
dbcalc-cat.usps.com
cat-dp-secure-customertools.usps.com
ssmap-cat.usps.com
clds.usps.com
cat-services.usps.com
customerpulse.usps.com
abrm-prod.usps.com
ppc-reporting-cat.usps.com
efile-cat.usps.com
mailtracking.usps.com
onlineclaims.usps.com
qiv.usps.com
rims.usps.com
apt.usps.com
ecom-dev.usps.com
ecom-cat.usps.com
programregistration.usps.com
crosswalk.usps.com
dev-gab.usps.com
dev-retail-pi.usps.com
customerpulse.usps.com
*.usps.com
webivr-sit.usps.com
epay-sit.usps.com
reship.usps.com
origin-stage-reg.usps.com
fast-tem.usps.com
federation-cat.usps.com
anchor.usps.com
programregistration-cat2.usps.com
origin-apis-cat2-sm.usps.com
returns.usps.com
www.uspspostalone.com
efile-cat.usps.com
stage-postalpro.usps.com
*.usps.com
onlineclaims.usps.com
sit-gopost.usps.com
www.uspspostalone.com
omas.usps.com
mid-cat.usps.com
pfsc.usps.com
idp-test.usps.com
ssmap.usps.com
USPS
devpx-about.usps.com
stage-einvoice.usps.com
rims-imdas-sit.usps.com
gateway-cat.usps.com
dev-reship.usps.com
eddmr-dr.usps.com
sdx-cat.usps.com
federation.usps.com
crosswalk.usps.com
fast-cat.usps.com
pfoiapal.usps.com
cid-prod.usps.com
pwim-sit.usps.com
mid-cat.usps.com
*.usps.com
rims-imdas-sit.usps.com
pdx-cat.usps.com
cat-smip.usps.com
pi.usps.com
lcrs.usps.com
q-mnas2see.usps.com
ereassign.usps.com
iletms-cat.usps.com
idp.usps.com
crosswalk-cat.usps.com
lgis-dev.usps.com
internationalclaims.usps.com
ea-webtools.usps.com
gateway.usps.com
www.usps.com
rims-imdas-cat.usps.com
eeo-dev.usps.com
myusps.gov
news.usps.com
crosswalk-cat.usps.com
pay.usps.com
mgoint-cat.usps.com
crosswalk-dev.usps.com
poboxes.usps.com
vrsi-841990001i.usps.com
mdxtem.usps.com
mdx.usps.com
ereassign.usps.com
mdxcat.usps.com
sphone-prd.usps.com
ivs-sign.usps.com
cat1a.usps.com
catpx-custreg.usps.com
cat-services.usps.com
dbcalc-cat.usps.com
cat-dp-secure-customertools.usps.com
ssmap-cat.usps.com
clds.usps.com
cat-services.usps.com
customerpulse.usps.com
abrm-prod.usps.com
ppc-reporting-cat.usps.com
efile-cat.usps.com
mailtracking.usps.com
onlineclaims.usps.com
qiv.usps.com
rims.usps.com
apt.usps.com
ecom-dev.usps.com
ecom-cat.usps.com
programregistration.usps.com
crosswalk.usps.com
dev-gab.usps.com
dev-retail-pi.usps.com
customerpulse.usps.com
*.usps.com
webivr-sit.usps.com
epay-sit.usps.com
reship.usps.com
origin-stage-reg.usps.com
fast-tem.usps.com
federation-cat.usps.com
anchor.usps.com
programregistration-cat2.usps.com
origin-apis-cat2-sm.usps.com
returns.usps.com
www.uspspostalone.com
efile-cat.usps.com
stage-postalpro.usps.com
*.usps.com
onlineclaims.usps.com
sit-gopost.usps.com
www.uspspostalone.com
omas.usps.com
mid-cat.usps.com
pfsc.usps.com
idp-test.usps.com
ssmap.usps.com
USPS
devpx-about.usps.com
stage-einvoice.usps.com
rims-imdas-sit.usps.com
Certificate
The complete raw certificate details for *.usps.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGzDCCBbSgAwIBAgIQCiLFXj1biRTxthkxyFzD/TANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yNDA1MTcwMDAwMDBa Fw0yNTA2MTMyMzU5NTlaMHgxCzAJBgNVBAYTAlVTMRcwFQYDVQQIEw5Ob3J0aCBD YXJvbGluYTEUMBIGA1UEBxMLTW9ycmlzdmlsbGUxJTAjBgNVBAoTHFVuaXRlZCBT dGF0ZXMgUG9zdGFsIFNlcnZpY2UxEzARBgNVBAMMCioudXNwcy5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVbpB5G7PzhlOutTVXl9TLMJ30tIT3 21yh0fQptSdKX8HyWwHTPiUN1Gh5nUvF1MMOUDvfpf+aujWuTbKoVdNEpIIb/a9M d3iciNUODv5UE79HBDrXPYeH/H44JTnIcXA+qCAjv8En7y3XVROzAhP0R9AUAKbG PsUmuKSuWVyxy8cMvBMWyrWLxebxbcnG8E3NPzEwT/xp7Ntt7c3JhvMapWa+3/kX +8p2HGF/ZCKdVcbz+3Ytj1lBZ5lmdOWKZvgIq/faHdLmFt+p6bMGfRvuumwC2cNa wSuQQlFY89GdEtc0IbHLR5CAhPQ7JXkub6g+GPdNDcwMZUcrPBql3WCVAgMBAAGj ggN5MIIDdTAfBgNVHSMEGDAWgBS3a6LqqKqEjHnqtNoPmLLFlXa59DAdBgNVHQ4E FgQU+6jod2QM3y1fVnn5ekaN8nFjgmUwIQYDVR0RBBowGIIKKi51c3BzLmNvbYIK Ki51c3BzLmdvdjA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhto dHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBjwYDVR0fBIGHMIGEMECgPqA8hjpo dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIw Q0ExLTQuY3JsMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNl cnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMH8GCCsGAQUFBwEBBHMwcTAkBggr BgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEkGCCsGAQUFBzAChj1o dHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYy MDIwQ0ExLTEuY3J0MAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSC AWoBaAB3AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABj4gxP0sA AAQDAEgwRgIhAPMfdCEu0EHcpKUSN3GVmTXSyt40j/DER6L0nbgr60azAiEAmYm2 VliWa+k1AQhcMdFGJFVbYaRHSXQ0PRisI3QoQdEAdQB9WR4S4XgqexxhZ3xe/fjQ h1wUoE6VnrkDL9kOjC55uAAAAY+IMT72AAAEAwBGMEQCIAwd1qqABLpoYHw54oHG jLg6brrhFDodtSLy8M+zUxL/AiAT63+jkH3oeqWU79+6CHcEdVigMko/BE7jVOgs nYx8TwB2AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAABj4gxPwoA AAQDAEcwRQIhALtTQ12fcYzAXqXwo6x+EJJgpATdi0xuS8F5HlsBeLkmAiBqoY8q FuqFYYIJogVJNKbCLfwMYFUoWpwivXX6WvTURzANBgkqhkiG9w0BAQsFAAOCAQEA P8OTfaMcdYXW15T5JtiCnGAE62U+mB0U16FlN2YNa1b6FPWNmcCvWgT6Fw5ZYP7c 3cP4SqT5xkye8hwTMNliSW761YijQC+yoXWokwG4CXVL7cwr7dunNWQdDvKYWVQ3 yz/CFrlkI76qvK5stec2DTGd4I2w+XmV7ShPeyHzGwOsdZJeN8arhATWfHZVB+A6 5mNtEt4etZf3ulPvhVASzD91nLIQejwMXRUt+ydLIW7k5uSjLciyEqlobih6tQIf 8vUE9JKnvZzJIOCz0B5WY/G/m07GySEZPGgqnKKFp3mi15Nk8td6Z7dvR4fdjsBX nB+P9J1Y3Hk7EZjpT3QhGw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW6QeRuz84ZTrrU1V5fU yzCd9LSE99tcodH0KbUnSl/B8lsB0z4lDdRoeZ1LxdTDDlA736X/mro1rk2yqFXT RKSCG/2vTHd4nIjVDg7+VBO/RwQ61z2Hh/x+OCU5yHFwPqggI7/BJ+8t11UTswIT 9EfQFACmxj7FJrikrllcscvHDLwTFsq1i8Xm8W3JxvBNzT8xME/8aezbbe3NyYbz GqVmvt/5F/vKdhxhf2QinVXG8/t2LY9ZQWeZZnTlimb4CKv32h3S5hbfqemzBn0b 7rpsAtnDWsErkEJRWPPRnRLXNCGxy0eQgIT0OyV5Lm+oPhj3TQ3MDGVHKzwapd1g lQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13472821152167783787576510252834407421 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-13 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Morrisville' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Postal Service' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.usps.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18864028751961255184190213008344307626527093015553060583805262188257345420673958757909610436009147138076796083738971302966554351420504845033825539994405734274579613986334599710114568062661631562990558132527589731730965487574257626757012177419382584363969195929460414287217717041342756801995842960590076092099643018474393150415262431433737218917180608856745714778480746604187210922674278583176124930639636926907757440201770643268944376560657179182958734152534313057170737927918343093862409328100958369723927216187428767641145713035635925620814232732997573821708880947323046287742873616147233132426637092011212153905301 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fba8e877640cdf2d5f5679f97a468df271638265 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usps.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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