www.verisign.com
- Verisign, Inc -
Issued by DigiCert SHA2 Extended Validation Server CA
About this certificate
This digital certificate with serial number 02:73:e8:80:c9:35:65:bd:a4:84:67:8f:4c:a3:16:e7 was issued on by DigiCert Inc.
With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Verisign, Inc
Company registration number:
2497886
Organization: Verisign, Inc
Organization: Verisign, Inc
State / Province:
Virginia
Locality: Reston
Country: US
Locality: Reston
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:73:e8:80:c9:35:65:bd:a4:84:67:8f:4c:a3:16:e7Serial Number (int): 3260285852805226436296236843866986215
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 69:10:b8:ef:f5:c4:35:aa:2b:2b:d5:01:c4:3f:95:f6:f2:6b:d0:3f
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f
Fingerprint (sha1): 54:aa:4d:ea:56:c3:6f:c5:e7:08:71:2f:a5:e2:49:3b:8c:21:0a:a8
Fingerprint (sha256): 11:73:28:4c:17:3f:36:e0:3c:5a:41:c6:45:77:63:95:8f:e0:46:8b:67:c5:76:69:34:dc:27:2a:04:40:0e:66
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl
Check the revocation status for certificate www.verisign.com
65
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.verisign.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
verisign.biz
verisign.com
www.verisign.com
verisign.ch
verisign.com.au
verisign.co.in
verisign.asia
verisign.co.uk
verisign.com.cn
verisign.com.tw
verisign.es
verisign.info
verisign.net
verisign.sg
verisigninc.com
www.verisign.co.in
www.verisign.com.br
www.verisign.com.sg
www.verisign.es
www.verisign.info
www.verisign.net
www.verisign.sg
www.verisigninc.com
verisign.com.es
verisign.com.vn
verisign.fr
verisign.jobs
verisign.org
verisign.tw
www.verisign.asia
www.verisign.co.uk
www.verisign.com.cn
www.verisign.com.tw
www.verisign.fr
www.verisign.jobs
www.verisign.org
www.verisign.tw
verisign.com.hk
verisign.de
verisign.hk
verisign.mobi
verisign.pro
verisign.us
www.verisign.biz
www.verisign.com.es
www.verisign.com.vn
www.verisign.hk
www.verisign.mobi
www.verisign.pro
www.verisign.us
verisign.com.br
verisign.com.sg
verisign.dk
verisign.in
verisign.name
verisign.se
verisign.vn
www.verisign.ch
www.verisign.com.au
www.verisign.com.hk
www.verisign.dk
www.verisign.in
www.verisign.name
www.verisign.se
www.verisign.vn
verisign.com
www.verisign.com
verisign.ch
verisign.com.au
verisign.co.in
verisign.asia
verisign.co.uk
verisign.com.cn
verisign.com.tw
verisign.es
verisign.info
verisign.net
verisign.sg
verisigninc.com
www.verisign.co.in
www.verisign.com.br
www.verisign.com.sg
www.verisign.es
www.verisign.info
www.verisign.net
www.verisign.sg
www.verisigninc.com
verisign.com.es
verisign.com.vn
verisign.fr
verisign.jobs
verisign.org
verisign.tw
www.verisign.asia
www.verisign.co.uk
www.verisign.com.cn
www.verisign.com.tw
www.verisign.fr
www.verisign.jobs
www.verisign.org
www.verisign.tw
verisign.com.hk
verisign.de
verisign.hk
verisign.mobi
verisign.pro
verisign.us
www.verisign.biz
www.verisign.com.es
www.verisign.com.vn
www.verisign.hk
www.verisign.mobi
www.verisign.pro
www.verisign.us
verisign.com.br
verisign.com.sg
verisign.dk
verisign.in
verisign.name
verisign.se
verisign.vn
www.verisign.ch
www.verisign.com.au
www.verisign.com.hk
www.verisign.dk
www.verisign.in
www.verisign.name
www.verisign.se
www.verisign.vn
Other certificates including the domain name verisign.com
(limited to 100 certificates)
www.verisign.com
pilotsc-admin-enroll.verisign.com
ote-accounts-otp.verisign.com
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
namestudio.com
sc-admin-enroll.verisign.com
san-28-s12.tlsprovisioning.exacttarget.com
pilot-ocsp.verisign.com
sipaccess-dr.verisign.com
pilotonsite.verisign.com
qa.domainscope.verisign.com
mdm1.verisign.com
ipsapi.verisign.com
mem-lab.corparch.verisign.com
styleguide.verisign.com
connect.verisign.com
idprotect.vip.symantec.com
advocacy.verisign.com
ite-rdap.verisign.com
investor.verisign.com
pilot-pkiservices.verisign.com
ncilg1vacmpub.corparch.verisign.com
accountsdr-otp.verisign.com
knowledge.symantec.com
ssp.vip.symantec.com
www.tlab.verisign.com
user-apis.verisign.com
cofense-reporter.verisign.com
epki-admin.verisign.com
jamfdp.verisign.com
san-28-s12.tlsprovisioning.exacttarget.com
pkiservices.verisign.com
pilotonsite.verisign.com
ilg1vcsexpe.verisign.com
testdrive.verisign.com
mem-lab.corparch.verisign.com
testcr-payflow.verisign.com
Tun-r.verisign.com
pilot-certmanager.verisign.com
ua.verisign.com
eol-redirect.verisign.net
accounts.verisign.com
directservice.verisign.com
ote-accounts.verisign.com
san-28-s12.tlsprovisioning.exacttarget.com
manager.verisign.com
ua-portal.verisign.com
view.messages.verisign.com
seal.websecurity.norton.com
advocacy.verisign.com
ote-login.verisign.com
gp.verisign.com
sentinel.websecurity.symantec.com
publicdnsforum.verisign.com
pilotsc-admin-enroll.verisign.com
pilot-enterprise-ssl-admin.jp.websecurity.symantec.com
ssl-certificate-center-ncsa-ilg.verisign.net
mem.verisign.com
publicdnsforum.verisign.com
certmanager.websecurity.symantec.com
acano.vrsn.com
ias.verisign.com
pilot-ua.verisign.com
corpqa1uccxpub-ms.corparch.verisign.com
services-auth.vip.symantec.com
seal.websecurity.norton.com
support.verisign.com
neilg1lxsfm201.verisign.com
user-apisote.verisign.com
payments.verisign.com
userservices.vip.symantec.com
sc-admin-enroll.verisign.com
qa.verisigndns.com
verified-domains.verisign.com
pilotservicecenter.verisign.com
vendorportal.verisign.com
publicdnsforum.verisign.com
userservices.vip.symantec.com
gp-qa.verisign.com
lwas.verisign.com
click.messages.verisign.com
ssl-certificate-center.verisign.com
investor.verisign.com
pilot-epki-admin.verisign.com
os1-accounts-otp.verisign.com
accountsdr.verisign.com
startonline.verisign.com
sandboxkms.verisign.com
mdm1.verisign.com
vipdeveloper.verisign.com
www.verisign.com
ssl-tools.verisign.com
sealinfo.verisign.com
checkout.verisign.com
vidn.verisign.com
webmail.verisign.com
connect.verisign.com
seal.verisign.com
epki-admin.verisign.com
authentication.verisign.com
pilotsc-admin-enroll.verisign.com
ote-accounts-otp.verisign.com
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
namestudio.com
sc-admin-enroll.verisign.com
san-28-s12.tlsprovisioning.exacttarget.com
pilot-ocsp.verisign.com
sipaccess-dr.verisign.com
pilotonsite.verisign.com
qa.domainscope.verisign.com
mdm1.verisign.com
ipsapi.verisign.com
mem-lab.corparch.verisign.com
styleguide.verisign.com
connect.verisign.com
idprotect.vip.symantec.com
advocacy.verisign.com
ite-rdap.verisign.com
investor.verisign.com
pilot-pkiservices.verisign.com
ncilg1vacmpub.corparch.verisign.com
accountsdr-otp.verisign.com
knowledge.symantec.com
ssp.vip.symantec.com
www.tlab.verisign.com
user-apis.verisign.com
cofense-reporter.verisign.com
epki-admin.verisign.com
jamfdp.verisign.com
san-28-s12.tlsprovisioning.exacttarget.com
pkiservices.verisign.com
pilotonsite.verisign.com
ilg1vcsexpe.verisign.com
testdrive.verisign.com
mem-lab.corparch.verisign.com
testcr-payflow.verisign.com
Tun-r.verisign.com
pilot-certmanager.verisign.com
ua.verisign.com
eol-redirect.verisign.net
accounts.verisign.com
directservice.verisign.com
ote-accounts.verisign.com
san-28-s12.tlsprovisioning.exacttarget.com
manager.verisign.com
ua-portal.verisign.com
view.messages.verisign.com
seal.websecurity.norton.com
advocacy.verisign.com
ote-login.verisign.com
gp.verisign.com
sentinel.websecurity.symantec.com
publicdnsforum.verisign.com
pilotsc-admin-enroll.verisign.com
pilot-enterprise-ssl-admin.jp.websecurity.symantec.com
ssl-certificate-center-ncsa-ilg.verisign.net
mem.verisign.com
publicdnsforum.verisign.com
certmanager.websecurity.symantec.com
acano.vrsn.com
ias.verisign.com
pilot-ua.verisign.com
corpqa1uccxpub-ms.corparch.verisign.com
services-auth.vip.symantec.com
seal.websecurity.norton.com
support.verisign.com
neilg1lxsfm201.verisign.com
user-apisote.verisign.com
payments.verisign.com
userservices.vip.symantec.com
sc-admin-enroll.verisign.com
qa.verisigndns.com
verified-domains.verisign.com
pilotservicecenter.verisign.com
vendorportal.verisign.com
publicdnsforum.verisign.com
userservices.vip.symantec.com
gp-qa.verisign.com
lwas.verisign.com
click.messages.verisign.com
ssl-certificate-center.verisign.com
investor.verisign.com
pilot-epki-admin.verisign.com
os1-accounts-otp.verisign.com
accountsdr.verisign.com
startonline.verisign.com
sandboxkms.verisign.com
mdm1.verisign.com
vipdeveloper.verisign.com
www.verisign.com
ssl-tools.verisign.com
sealinfo.verisign.com
checkout.verisign.com
vidn.verisign.com
webmail.verisign.com
connect.verisign.com
seal.verisign.com
epki-admin.verisign.com
authentication.verisign.com
Certificate
The complete raw certificate details for www.verisign.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILaTCCClGgAwIBAgIQAnPogMk1Zb2khGePTKMW5zANBgkqhkiG9w0BAQsFADB1 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTIxMDYxODAwMDAwMFoXDTIyMDYyMzIz NTk1OVowgcUxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYB BAGCNzwCAQMTAlVTMRkwFwYLKwYBBAGCNzwCAQITCERlbGF3YXJlMRAwDgYDVQQF EwcyNDk3ODg2MQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWExDzANBgNV BAcTBlJlc3RvbjEWMBQGA1UEChMNVmVyaXNpZ24sIEluYzEZMBcGA1UEAxMQd3d3 LnZlcmlzaWduLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOFE Y6gVyyufpwEOMerDzCt+7VyRXhT0iNukFUKNzwqKoO2iDO5Y/z5kwxLBUZw9DTIt Bde5TlIsrSBObWTZb50IEMWWVIPhJcv1hbxPmf6pRYlx10aBpm8pbu6AxTHGCC8k SbV1Pv34cPJG9RFJ/46zSMHsjvjtR3A6R4Jlq9a346wM5M07qSDLFk+2Ehsvb4G0 LI7Gz+iz6XwxVJMVtuJSF06I2mN3MHwXIgwvKP8W7ciVMq+yowJm5vekSOS5ESGa jr8hgZrVVYmEkuKjByj+NTm2KFj3bpAEROVrmoY2WlBrpGF+66P5RUj21OfeztnG uM4mUYbbBeEFdp7QpFsCAwEAAaOCB6IwggeeMB8GA1UdIwQYMBaAFD3TUKXWoK3u 80pgCmXTIdT4+NYPMB0GA1UdDgQWBBRpELjv9cQ1qisr1QHEP5X28mvQPzCCBEwG A1UdEQSCBEMwggQ/ggx2ZXJpc2lnbi5iaXqCDHZlcmlzaWduLmNvbYIQd3d3LnZl cmlzaWduLmNvbYILdmVyaXNpZ24uY2iCD3ZlcmlzaWduLmNvbS5hdYIOdmVyaXNp Z24uY28uaW6CDXZlcmlzaWduLmFzaWGCDnZlcmlzaWduLmNvLnVrgg92ZXJpc2ln bi5jb20uY26CD3ZlcmlzaWduLmNvbS50d4ILdmVyaXNpZ24uZXOCDXZlcmlzaWdu LmluZm+CDHZlcmlzaWduLm5ldIILdmVyaXNpZ24uc2eCD3ZlcmlzaWduaW5jLmNv bYISd3d3LnZlcmlzaWduLmNvLmlughN3d3cudmVyaXNpZ24uY29tLmJyghN3d3cu dmVyaXNpZ24uY29tLnNngg93d3cudmVyaXNpZ24uZXOCEXd3dy52ZXJpc2lnbi5p bmZvghB3d3cudmVyaXNpZ24ubmV0gg93d3cudmVyaXNpZ24uc2eCE3d3dy52ZXJp c2lnbmluYy5jb22CD3ZlcmlzaWduLmNvbS5lc4IPdmVyaXNpZ24uY29tLnZuggt2 ZXJpc2lnbi5mcoINdmVyaXNpZ24uam9ic4IMdmVyaXNpZ24ub3Jnggt2ZXJpc2ln bi50d4IRd3d3LnZlcmlzaWduLmFzaWGCEnd3dy52ZXJpc2lnbi5jby51a4ITd3d3 LnZlcmlzaWduLmNvbS5jboITd3d3LnZlcmlzaWduLmNvbS50d4IPd3d3LnZlcmlz aWduLmZyghF3d3cudmVyaXNpZ24uam9ic4IQd3d3LnZlcmlzaWduLm9yZ4IPd3d3 LnZlcmlzaWduLnR3gg92ZXJpc2lnbi5jb20uaGuCC3ZlcmlzaWduLmRlggt2ZXJp c2lnbi5oa4INdmVyaXNpZ24ubW9iaYIMdmVyaXNpZ24ucHJvggt2ZXJpc2lnbi51 c4IQd3d3LnZlcmlzaWduLmJpeoITd3d3LnZlcmlzaWduLmNvbS5lc4ITd3d3LnZl cmlzaWduLmNvbS52boIPd3d3LnZlcmlzaWduLmhrghF3d3cudmVyaXNpZ24ubW9i aYIQd3d3LnZlcmlzaWduLnByb4IPd3d3LnZlcmlzaWduLnVzgg92ZXJpc2lnbi5j b20uYnKCD3ZlcmlzaWduLmNvbS5zZ4ILdmVyaXNpZ24uZGuCC3ZlcmlzaWduLmlu gg12ZXJpc2lnbi5uYW1lggt2ZXJpc2lnbi5zZYILdmVyaXNpZ24udm6CD3d3dy52 ZXJpc2lnbi5jaIITd3d3LnZlcmlzaWduLmNvbS5hdYITd3d3LnZlcmlzaWduLmNv bS5oa4IPd3d3LnZlcmlzaWduLmRrgg93d3cudmVyaXNpZ24uaW6CEXd3dy52ZXJp c2lnbi5uYW1lgg93d3cudmVyaXNpZ24uc2WCD3d3dy52ZXJpc2lnbi52bjAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1Ud HwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWV2LXNl cnZlci1nMy5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEy LWV2LXNlcnZlci1nMy5jcmwwSgYDVR0gBEMwQTALBglghkgBhv1sAgEwMgYFZ4EM AQEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMIGI BggrBgEFBQcBAQR8MHowJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0 LmNvbTBSBggrBgEFBQcwAoZGaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0Rp Z2lDZXJ0U0hBMkV4dGVuZGVkVmFsaWRhdGlvblNlcnZlckNBLmNydDAMBgNVHRMB Af8EAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwApeb7wnjk5IfBWc59j pXflvld9nGAK+PlNXSZcJV3HhAAAAXogJ7+hAAAEAwBIMEYCIQDsEXA53mkHNrBV vj5aEgEws/AfqP8UcLqae9udN6EKfwIhANd5GIHp5nODJAlzT+gcSFLnKjC3SAMM pqYFK+624RcTAHYAIkVFB1lVJFaWP6Ev8fdthuAjJmOtwEt/XcaDXG7iDwIAAAF6 ICe/8AAABAMARzBFAiEA7kEk3rUUOZZw8xn7tlA6mBLQAIgn9kM3PN3osPqvG3kC IEQkxaCkMVws7XB84sEF9xahteS+ZkKmCZbZgvDsRGwNAHYAQcjKsd8iRkoQxqE6 CUKHXk4xixsD6+tLx2jwkGKWBvYAAAF6ICe/qgAABAMARzBFAiEAhmoJq/ZUbkKG O9OCxwLI8UALDBws1VZcpPLWPe5adIsCIE28hyUWLX1UjKavb0GbK7por+z2ldAP VFRmeAGb8N6pMA0GCSqGSIb3DQEBCwUAA4IBAQA4lhzoodiOaJvjmSV9c7CxyiXa ZK3mpPOk7UhatS8Zq03hpAtN4W/4AK4UhmA9QRl9cTjoLF6g43KudljEZU3TkQl8 JIYrUJ5448vjFthbXgYxYxFvJDK1u6KRSqCWA4smgQvJkAl8f+PTEKHGuBh4ti5F iKXgo/hQvzotulkkTz8rjCqUtsUq7qdJ58pDjuLga6ldqGDl2UR1jzs5ca4SJ1hZ mFYCZH/MFZ4W81peq0YwclWNt65yFt2T6xRhW8gfB9X7VxF9KAEeaXgJKChv4Cx0 1UGAh2v+v4nWEYYH7NrnZD1FxoeRXxi6EJ7hJ0BFZYfI8NzF6894oOOthQjW -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4URjqBXLK5+nAQ4x6sPM K37tXJFeFPSI26QVQo3PCoqg7aIM7lj/PmTDEsFRnD0NMi0F17lOUiytIE5tZNlv nQgQxZZUg+Ely/WFvE+Z/qlFiXHXRoGmbylu7oDFMcYILyRJtXU+/fhw8kb1EUn/ jrNIweyO+O1HcDpHgmWr1rfjrAzkzTupIMsWT7YSGy9vgbQsjsbP6LPpfDFUkxW2 4lIXTojaY3cwfBciDC8o/xbtyJUyr7KjAmbm96RI5LkRIZqOvyGBmtVViYSS4qMH KP41ObYoWPdukARE5WuahjZaUGukYX7ro/lFSPbU597O2ca4ziZRhtsF4QV2ntCk WwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3260285852805226436296236843866986215 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2497886' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verisign, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.verisign.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28437342629980808914662302314359660190047452138550544703958475944830173704626331217833806919891571859676985870370204238864883189225305542302584952065555579020930793704761749680096007387272658128166585293410919893461573028222086707001222956579753532934771829991920318920132852016108620442205057031268177151622443847575228323015913912125577539058388280524563231378646414027135992349743175879849901399414104434491603211798970071232684958118370038103264175250485508284248327588449452100205042181855344872881376122739755081121556679884990579839060165564531362118473705929141674154820839250226326459004584369032290286740571 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6910b8eff5c435aa2b2bd501c43f95f6f26bd03f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1091 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.asia' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.com.tw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisigninc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisigninc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.com.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.com.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.jobs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.tw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.asia' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.com.tw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.jobs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.tw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.com.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.mobi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.pro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.com.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.com.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.mobi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.pro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.name' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisign.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.com.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.name' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisign.vn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 01690077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017a2027bfa10000040300483046022100ec117039de690736b055be3e5a120130b3f01fa8ff1470ba9a7bdb9d37a10a7f022100d7791881e9e673832409734fe81c4852e72a30b748030ca6a6052beeb6e117130076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f020000017a2027bff00000040300473045022100ee4124deb514399670f319fbb6503a9812d0008827f643373cdde8b0faaf1b7902204424c5a0a4315c2ced707ce2c105f716a1b5e4be6642a60996d982f0ec446c0d00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017a2027bfaa0000040300473045022100866a09abf6546e42863bd382c702c8f1400b0c1c2cd5565ca4f2d63dee5a748b02204dbc8725162d7d548ca6af6f419b2bba68afecf695d00f54546678019bf0dea9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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