www.royalcanin.ch
- Mars Inc. -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 03:31:67:de:c4:51:73:a7:ab:e2:d4:48:4b:4c:95:d8 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Mars Inc.
Organization:
Mars Inc.
Organization unit: Mars Information Services
Organization unit: Mars Information Services
State / Province:
Virginia
Locality: McLean
Country: US
Locality: McLean
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:31:67:de:c4:51:73:a7:ab:e2:d4:48:4b:4c:95:d8Serial Number (int): 4244213271021739542755931918703564248
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: c6:ed:e0:a7:fe:92:d4:ff:33:02:21:1e:91:46:73:5d:42:85:e7:d2
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 9d:2b:2e:db:64:80:77:6e:04:0c:fe:42:d0:34:82:ca:18:14:08:d0
Fingerprint (sha256): 12:d7:77:4b:06:b4:0a:af:7d:74:96:b2:2b:3e:ff:94:91:6a:84:51:d5:d5:cf:ce:ae:42:24:91:41:85:21:db
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate www.royalcanin.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.royalcanin.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.royalcanin.ch
royalcanin.ch
royalcanin.ch
Other certificates including the domain name royalcanin.ch
(limited to 100 certificates)
my.royalcanin.ch
*.royalcanin.dk
check.royalcanin.ch
my.royalcanin.ch
multifunction.royalcanin.ch
*.royalcanin.dk
mail.royalcanin.ch
deals.royalcanin.ch
*.mars.com
multifunction.royalcanin.ch
www.royalcanin.ch
deals.royalcanin.ch
share.royalcanin.ch
vetfollowup.royalcanin.com.au
multifunction.royalcanin.ch
www.royalcanin.com
royalcanin-com-redirect.mars-inc.com
deals.royalcanin.ch
shop.royalcanin.ch
aws-cf-rd08.mars-inc.com
deals.royalcanin.ch
multifunction.royalcanin.ch
shop.royalcanin.ch
*.mars.com
*.mars.com
mail.royalcanin.ch
vetservices.royal-canin.at
vetservices.royalcanin.be
my.royalcanin.ch
royalcanin-com-redirect.mars-inc.com
vetservices.royalcanin.ch
*.royalcanin.dk
deals.royalcanin.ch
*.mars.com
*.mars.com
vetservices.royal-canin.at
*.mars.com
*.royalcanin.dk
*.mars.com
*.mars.com
vetservices.royalcanin.be
check.royalcanin.ch
*.mars.com
share.royalcanin.ch
multifunction.royalcanin.ch
*.mars.com
*.royalcanin.ch
my.royalcanin.ch
deals.royalcanin.ch
shop.royalcanin.ch
*.mars.com
adminvfu.royalcanin.com
aws-cf-www-royalcanin-com-rd01.mars-inc.com
multifunction.royalcanin.ch
deals.royalcanin.ch
multifunction.royalcanin.ch
my.royalcanin.ch
deals.royalcanin.ch
*.mars.com
adminvfu.royalcanin.com
deals.royalcanin.ch
vetservices.royal-canin.at
*.royalcanin.ch
www.royalcanin.ch
account.royalcanin.ch
check.royalcanin.ch
*.royalcanin.ch
my.royalcanin.ch
shop.royalcanin.ch
vetservices.royal-canin.at
adminvfu.royalcanin.com
deals.royalcanin.ch
shop.royalcanin.ch
*.mars.com
my.royalcanin.ch
deals.royalcanin.ch
multifunction.royalcanin.ch
adminvfu.royalcanin.com
aws-cf-rd19.mars-inc.com
*.royalcanin.ch
aws-cf-rd19.mars-inc.com
*.mars.com
vetservices.royal-canin.at
*.mars.com
mail.royalcanin.ch
vetservices.royal-canin.at
mail.royalcanin.ch
my.royalcanin.ch
mail.royalcanin.ch
*.mars.com
*.mars.com
*.royalcanin.dk
aws-cf-www-royalcanin-com-rd01.mars-inc.com
deals.royalcanin.ch
share.royalcanin.ch
*.mars.com
deals.royalcanin.ch
adminvfu.royalcanin.com
share.royalcanin.ch
*.royalcanin.dk
*.royalcanin.dk
check.royalcanin.ch
my.royalcanin.ch
multifunction.royalcanin.ch
*.royalcanin.dk
mail.royalcanin.ch
deals.royalcanin.ch
*.mars.com
multifunction.royalcanin.ch
www.royalcanin.ch
deals.royalcanin.ch
share.royalcanin.ch
vetfollowup.royalcanin.com.au
multifunction.royalcanin.ch
www.royalcanin.com
royalcanin-com-redirect.mars-inc.com
deals.royalcanin.ch
shop.royalcanin.ch
aws-cf-rd08.mars-inc.com
deals.royalcanin.ch
multifunction.royalcanin.ch
shop.royalcanin.ch
*.mars.com
*.mars.com
mail.royalcanin.ch
vetservices.royal-canin.at
vetservices.royalcanin.be
my.royalcanin.ch
royalcanin-com-redirect.mars-inc.com
vetservices.royalcanin.ch
*.royalcanin.dk
deals.royalcanin.ch
*.mars.com
*.mars.com
vetservices.royal-canin.at
*.mars.com
*.royalcanin.dk
*.mars.com
*.mars.com
vetservices.royalcanin.be
check.royalcanin.ch
*.mars.com
share.royalcanin.ch
multifunction.royalcanin.ch
*.mars.com
*.royalcanin.ch
my.royalcanin.ch
deals.royalcanin.ch
shop.royalcanin.ch
*.mars.com
adminvfu.royalcanin.com
aws-cf-www-royalcanin-com-rd01.mars-inc.com
multifunction.royalcanin.ch
deals.royalcanin.ch
multifunction.royalcanin.ch
my.royalcanin.ch
deals.royalcanin.ch
*.mars.com
adminvfu.royalcanin.com
deals.royalcanin.ch
vetservices.royal-canin.at
*.royalcanin.ch
www.royalcanin.ch
account.royalcanin.ch
check.royalcanin.ch
*.royalcanin.ch
my.royalcanin.ch
shop.royalcanin.ch
vetservices.royal-canin.at
adminvfu.royalcanin.com
deals.royalcanin.ch
shop.royalcanin.ch
*.mars.com
my.royalcanin.ch
deals.royalcanin.ch
multifunction.royalcanin.ch
adminvfu.royalcanin.com
aws-cf-rd19.mars-inc.com
*.royalcanin.ch
aws-cf-rd19.mars-inc.com
*.mars.com
vetservices.royal-canin.at
*.mars.com
mail.royalcanin.ch
vetservices.royal-canin.at
mail.royalcanin.ch
my.royalcanin.ch
mail.royalcanin.ch
*.mars.com
*.mars.com
*.royalcanin.dk
aws-cf-www-royalcanin-com-rd01.mars-inc.com
deals.royalcanin.ch
share.royalcanin.ch
*.mars.com
deals.royalcanin.ch
adminvfu.royalcanin.com
share.royalcanin.ch
*.royalcanin.dk
Certificate
The complete raw certificate details for www.royalcanin.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgIQAzFn3sRRc6er4tRIS0yV2DANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgxMjE4MDAwMDAwWhcN MjAwMjE5MTIwMDAwWjCBhTELMAkGA1UEBhMCVVMxETAPBgNVBAgTCFZpcmdpbmlh MQ8wDQYDVQQHEwZNY0xlYW4xEjAQBgNVBAoTCU1hcnMgSW5jLjEiMCAGA1UECxMZ TWFycyBJbmZvcm1hdGlvbiBTZXJ2aWNlczEaMBgGA1UEAxMRd3d3LnJveWFsY2Fu aW4uY2gwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp5HR5Yac+Xis5 thF3sx2c64/eAYvKBBW6EERosv86d0+2UdI1pDYm+oAqn905aH4jwH2LFdsmf0uy TemdcPoN05Guf6mRGKaggLcXZNthZF2Mzk0SFseHqK3HG4/Z+9j4YjucCBqqUr/s QWH9XT+6ub512KzG64NhzlzwEZOykbAa0pKxMhv+55xnsPSJcKleLY9TwACZ80r5 d+3Ik9/2LDHu1YIbKpyh4tl/yFlERm9WIbQKL6WpePfgMn7n43zILTJR1vwQN54t NtafAmpgNVyllQab/wASuf//x7nRSs+kUfp6hEeZ3wPEr5i36geb6VjjsCuISNSc d9b1vJEBAgMBAAGjggH8MIIB+DAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs 4cbZ4jAdBgNVHQ4EFgQUxu3gp/6S1P8zAiEekUZzXUKF59IwKwYDVR0RBCQwIoIR d3d3LnJveWFsY2FuaW4uY2iCDXJveWFsY2FuaW4uY2gwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaAr hilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2g K4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYD VR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cu ZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsG AQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0 dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2 ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq hkiG9w0BAQsFAAOCAQEAuGAMWIqRNlMNzVl2lDF8ncPcGF/fV5HVd/IklMrrdkNW LpwJ4+hW/9X/b4zXDY8vlbu+KTfkJa7iJK71lqhsXlTqF+lYLfpSFLxI7HMTS70K SxGSOerib9pSVJ1d+6qekc8kOy5sMgGgR46PsY8RB89bsrriTLej5sSFvUFv7ZZQ uH5G5c3hDDz1E0I78s6GHAYG+976DbU5sbZpTotxLHWJDZPtl2BrQiMHY2B/5+Vs 4vhc6EjibcJaaty1tV0iwgnrN7Z3UKDZ8TAzhCZt/IzHMx6wTsD31WPg7HtkFIbr LCNpp9eLin7PqWyuVWbOWAHKj6c1XUUlga+SvDUz7A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeR0eWGnPl4rObYRd7Md nOuP3gGLygQVuhBEaLL/OndPtlHSNaQ2JvqAKp/dOWh+I8B9ixXbJn9Lsk3pnXD6 DdORrn+pkRimoIC3F2TbYWRdjM5NEhbHh6itxxuP2fvY+GI7nAgaqlK/7EFh/V0/ urm+ddisxuuDYc5c8BGTspGwGtKSsTIb/uecZ7D0iXCpXi2PU8AAmfNK+XftyJPf 9iwx7tWCGyqcoeLZf8hZREZvViG0Ci+lqXj34DJ+5+N8yC0yUdb8EDeeLTbWnwJq YDVcpZUGm/8AErn//8e50UrPpFH6eoRHmd8DxK+Yt+oHm+lY47AriEjUnHfW9byR AQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4244213271021739542755931918703564248 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'McLean' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mars Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mars Information Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.royalcanin.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21446928887211033108303584811635182030109794728043323863926250034880417075963851421765315237567108660656191753517832970544143063416943191475430690055001960351640617477831901828878637484855898193961253823421733157644488764314493268759002810411373223482710781481900967299086247914889532264235248445318611297103395925901986409994757758886671875186430962190952116565166532330809189579395639935942155986942789550544728943600839668585214762285214858100168338186542292332635225435153575886915144443995159999572100550884303983942217049680186500585506064001481785307591619084917857758178758404733190656958102619062194300293377 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c6ede0a7fe92d4ff3302211e9146735d4285e7d2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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