e.cru.org
- Campus Crusade for Christ, Inc. -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 02:b0:84:1f:c9:a9:c3:7b:97:63:38:fb:bc:6c:0e:7b was issued on by DigiCert Inc.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Campus Crusade for Christ, Inc.
Organization:
Campus Crusade for Christ, Inc.
State / Province:
FLORIDA
Locality: Orlando
Country: US
Locality: Orlando
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 02:b0:84:1f:c9:a9:c3:7b:97:63:38:fb:bc:6c:0e:7bSerial Number (int): 3574980035224399950046945079104114299
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: c0:f4:48:62:9c:f5:41:49:d3:c1:e8:fb:a9:2c:76:5f:8a:fc:13:b5
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 0e:e2:31:45:3e:39:68:5b:cb:be:74:d6:6e:18:28:c2:bf:d6:d7:33
Fingerprint (sha256): 13:87:3d:9b:a9:b6:fc:0c:24:aa:0d:ef:8e:01:3c:06:3a:f9:79:6d:11:f0:3a:86:f2:1e:92:2f:44:62:14:b2
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate e.cru.org
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for e.cru.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
e.cru.org
t.e.cru.org
m.e.cru.org
res.e.cru.org
t.e.cru.org
m.e.cru.org
res.e.cru.org
Other certificates including the domain name cru.org
(limited to 100 certificates)
*.cru.org
smetrics.cru.org
ml.cru.org
*.cru.org
sites-stage.cru.org
sites.cru.org
sites-stage.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
status.cru.org
*.lh.cru.org
sites-stage.cru.org
techhelp.cru.org
*.cru.org
*.cru.org
e.cru.org
sites-stage.cru.org
e.cru.org
sites.cru.org
techhelp.cru.org
ml.cru.org
ml.cru.org
*.cru.org
*.campuscontacts.cru.org
*.cru.org
ns1.lh.cru.org
smapp.cru.org
sites.cru.org
*.cru.org
*.cru.org
vip-wordpress.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
*.cru.org
*.cru.org
*.cru.org
smapp.cru.org
*.cru.org
sites.cru.org
hybridcall-e.cru.org
give-static-stage.cru.org
*.cru.org
*.cru.org
ns1.lh.cru.org
campuskgp.cru.org
*.lh.cru.org
sites-stage.cru.org
smetrics.cru.org
*.cru.org
jfprintshop.cru.org
*.cru.org
globalstaffweb.org
campuskgp.cru.org
sites.cru.org
*.cru.org
*.cru.org
www.give.cru.org
e.cru.org
*.cru.org
sites.cru.org
atlanta.cru.org
sites-stage.cru.org
*.cru.org
*.cru.org
*.cru.org
sites.cru.org
smetrics.cru.org
sites.cru.org
sites.cru.org
hybridcall-e.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
san-33-s12.tlsprovisioning.exacttarget.com
*.aws.cru.org
*.cru.org
author.cru.org
vip-wordpress.cru.org
*.cru.org
mhub.cc
seattle.cru.org
ml.cru.org
smetrics.cru.org
give-static-stage.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
*.cru.org
*.cru.org
vip-wordpress.cru.org
help.cru.org
sites.cru.org
*.cru.org
help.cru.org
vip-wordpress.cru.org
ibs.cru.org
*.cru.org
vip-wordpress.cru.org
*.cru.org
*.cru.org
*.cru.org
*.cru.org
ml.cru.org
*.lh.cru.org
sites-stage.cru.org
smapp.cru.org
smetrics.cru.org
ml.cru.org
*.cru.org
sites-stage.cru.org
sites.cru.org
sites-stage.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
status.cru.org
*.lh.cru.org
sites-stage.cru.org
techhelp.cru.org
*.cru.org
*.cru.org
e.cru.org
sites-stage.cru.org
e.cru.org
sites.cru.org
techhelp.cru.org
ml.cru.org
ml.cru.org
*.cru.org
*.campuscontacts.cru.org
*.cru.org
ns1.lh.cru.org
smapp.cru.org
sites.cru.org
*.cru.org
*.cru.org
vip-wordpress.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
*.cru.org
*.cru.org
*.cru.org
smapp.cru.org
*.cru.org
sites.cru.org
hybridcall-e.cru.org
give-static-stage.cru.org
*.cru.org
*.cru.org
ns1.lh.cru.org
campuskgp.cru.org
*.lh.cru.org
sites-stage.cru.org
smetrics.cru.org
*.cru.org
jfprintshop.cru.org
*.cru.org
globalstaffweb.org
campuskgp.cru.org
sites.cru.org
*.cru.org
*.cru.org
www.give.cru.org
e.cru.org
*.cru.org
sites.cru.org
atlanta.cru.org
sites-stage.cru.org
*.cru.org
*.cru.org
*.cru.org
sites.cru.org
smetrics.cru.org
sites.cru.org
sites.cru.org
hybridcall-e.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
san-33-s12.tlsprovisioning.exacttarget.com
*.aws.cru.org
*.cru.org
author.cru.org
vip-wordpress.cru.org
*.cru.org
mhub.cc
seattle.cru.org
ml.cru.org
smetrics.cru.org
give-static-stage.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
*.cru.org
*.cru.org
vip-wordpress.cru.org
help.cru.org
sites.cru.org
*.cru.org
help.cru.org
vip-wordpress.cru.org
ibs.cru.org
*.cru.org
vip-wordpress.cru.org
*.cru.org
*.cru.org
*.cru.org
*.cru.org
ml.cru.org
*.lh.cru.org
sites-stage.cru.org
smapp.cru.org
Certificate
The complete raw certificate details for e.cru.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG4TCCBcmgAwIBAgIQArCEH8mpw3uXYzj7vGwOezANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzExMDEwMDAwMDBa Fw0yNDEyMDEyMzU5NTlaMG8xCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdGTE9SSURB MRAwDgYDVQQHEwdPcmxhbmRvMSgwJgYDVQQKEx9DYW1wdXMgQ3J1c2FkZSBmb3Ig Q2hyaXN0LCBJbmMuMRIwEAYDVQQDEwllLmNydS5vcmcwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQC2W9AcMCb/wMfExFuwldFOTwCaHZNW2ATqPPKdkfHK 2nLEZNPqPyliwLCGGkfBEDBKk2gxf4+NFysCZzOCut2CDbjAVNijYETwlCqwBYnp n8Jr37gDf49HCqDCtoBzbALvje59Bo3Cj6hHQFSDUIZbmC9IlvSq7g9sSA5om4Cd JC8MC5RFIJpsr+zG35LavUIYh0SMxHiTn41YeCKZEb/6h723kEEez3NvXCbzCEz/ uwSZbW8lhWyDnB52gQNzIjdujavyXrKqOMwkN/3R/Y7XuE+FPrsaE+G7fYfkVFqi I/TMo2NNt5FvyvPcYMv7wbxjpFN0F0KoyNul8x57HJIDAgMBAAGjggOXMIIDkzAf BgNVHSMEGDAWgBS3a6LqqKqEjHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQUwPRIYpz1 QUnTwej7qSx2X4r8E7UwPQYDVR0RBDYwNIIJZS5jcnUub3Jnggt0LmUuY3J1Lm9y Z4ILbS5lLmNydS5vcmeCDXJlcy5lLmNydS5vcmcwPgYDVR0gBDcwNTAzBgZngQwB AgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgY8G A1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lD ZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00LmNybDBAoD6gPIY6aHR0cDovL2NybDQu ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00LmNybDB/ BggrBgEFBQcBAQRzMHEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0 LmNvbTBJBggrBgEFBQcwAoY9aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0Rp Z2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS0xLmNydDAMBgNVHRMBAf8EAjAAMIIB gAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdwDuzdBk1dsazsVct520zROiModGfLzs 3sNRSFlGcR+1mwAAAYuKrPHqAAAEAwBIMEYCIQCGhV+nwkQs/BcOzpeXEn8PKajr va8blFnQDkKBK7s3iAIhAI60IHC/DikW09LwJrLApoKOArwfhm9EScb4zOYXxuVu AHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGLiqzxvgAABAMA RzBFAiEAnv7Ru8w6oT7IdvumPmnSgSG4os0dzxza68om4zvAvXcCIDxtFFpNriWd MAxExXkOvBJfRVq4FUsMWFHlYmLHqAYSAHcA2ra/az+1tiKfm8K7XGvocJFxbLtR hIU0vaQ9MEjX+6sAAAGLiqzyFQAABAMASDBGAiEA+HwqrR7WaJBDcvxxatxiGF9r ZMUKhm8hcT28YYHTg2gCIQDmSy1CLTiqYTMTd44yeTspFGEAqy23UkSREUoM7ZEc vjANBgkqhkiG9w0BAQsFAAOCAQEAjIijKyqMUYebvcSK4iQhJnAEFxfz+sv3PY3O +xFa3UHzPBSXtK030eF7kenc1YI8/QoqbgyCfOM8KwXr3Dc2SC0+Wzqwk81ay71R AGSicAiKrcc3MFlntYIep/0WhiuBi6vobYyUj17owpa4e6px1iWOCrD3u33xc6HC BBj0+XHu00tTa3CzfIiKHYaQqfNP2j1WzaetyXh+qeyTeTtxgAvxBagfv6wG5dIH AekdrPYY1Qc2blopyoG5K4BlvZcuoSWsPoFw4rnfV+SyFhvEeLlHnIIbhh8X1Rmy 0ajbbcqgsS3L6S5cvwzKwXPUmfGkoR3IYp8C2Ii1xx81djp7sA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlvQHDAm/8DHxMRbsJXR Tk8Amh2TVtgE6jzynZHxytpyxGTT6j8pYsCwhhpHwRAwSpNoMX+PjRcrAmczgrrd gg24wFTYo2BE8JQqsAWJ6Z/Ca9+4A3+PRwqgwraAc2wC743ufQaNwo+oR0BUg1CG W5gvSJb0qu4PbEgOaJuAnSQvDAuURSCabK/sxt+S2r1CGIdEjMR4k5+NWHgimRG/ +oe9t5BBHs9zb1wm8whM/7sEmW1vJYVsg5wedoEDcyI3bo2r8l6yqjjMJDf90f2O 17hPhT67GhPhu32H5FRaoiP0zKNjTbeRb8rz3GDL+8G8Y6RTdBdCqMjbpfMeexyS AwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3574980035224399950046945079104114299 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FLORIDA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Orlando' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Campus Crusade for Christ, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'e.cru.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23020646147072028192453668400152291450855786898208259341141452290035631275559138626285193144221102282396063091875630812556407421134163555980429693156122357355009592971059062734255698880355325323628980176559750840266388222466785181424949803203543043677444169583379359865334372047476205082385283319427096405580479992185428829695328830718046758235920565537905679550399740069681671349267229132388988780172847410098964932640827146038089359172980902062494503957072482818566455429698365124936314214538816258969341914488297558204445131409694720586915548283028293666764272691554563971189532386854661977073207704936494176965123 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c0f448629cf54149d3c1e8fba92c765f8afc13b5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.cru.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.e.cru.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.e.cru.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.e.cru.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 016a007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b8aacf1ea000004030048304602210086855fa7c2442cfc170ece9797127f0f29a8ebbdaf1b9459d00e42812bbb37880221008eb42070bf0e2916d3d2f026b2c0a6828e02bc1f866f4449c6f8cce617c6e56e00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b8aacf1be00000403004730450221009efed1bbcc3aa13ec876fba63e69d28121b8a2cd1dcf1cdaebca26e33bc0bd7702203c6d145a4dae259d300c44c5790ebc125f455ab8154b0c5851e56262c7a80612007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b8aacf2150000040300483046022100f87c2aad1ed668904372fc716adc62185f6b64c50a866f21713dbc6181d38368022100e64b2d422d38aa613313778e32793b29146100ab2db7524491114a0ced911cbe . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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