blfkmp.fti.de
- Criteo Technology SAS -
Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 07:86:08:c8:06:02:fe:74:fb:22:dd:b1:2d:6d:6a:01 was issued on by DigiCert Inc.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Criteo Technology SAS
Organization:
Criteo Technology SAS
State / Province:
Île-de-France
Locality: Paris
Country: FR
Locality: Paris
Country: FR
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 07:86:08:c8:06:02:fe:74:fb:22:dd:b1:2d:6d:6a:01Serial Number (int): 10000541856307939628353177333537794561
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: a5:66:74:7c:c0:09:af:f4:c0:74:26:3c:11:3a:58:b3:5e:cd:69:9e
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17
Fingerprint (sha1): 87:16:ab:56:4d:bf:86:a4:05:2d:85:94:a3:a2:8a:c2:f0:b0:7e:16
Fingerprint (sha256): 13:8c:52:4c:0f:84:af:ba:0c:ef:86:c9:e5:c2:ba:00:27:33:de:5f:65:00:e9:15:22:40:0a:0a:ca:96:23:00
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
Check the revocation status for certificate blfkmp.fti.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for blfkmp.fti.de
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Agreement
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blfkmp.fti.de
Other certificates including the domain name fti.de
(limited to 100 certificates)
www.fahrkarten.fti.de
roadbooks.fti.de
hotelbeschreibung.fti.de
www.tonsoffuntravel.net
rueckverguetung.fti.de
news.fti.de
qa.www.campings.com
rueckverguetung.fti.de
qa.www.campings.com
www.campings.com
www.fahrkarten.fti.de
gm-log.fti.de
roadbooks.fti.de
staging.hotelbeschreibung.fti.de
oneqa.erauqsh.com
gutscheine.fti.de
news.fti.de
blfkmp.fti.de
gutscheine.fti.de
staging.fti.de
qa.www.campings.com
www.fahrkarten.fti.de
esta-rueckverguetung.fti.de
s.camping.fti.de
qa.www.campings.com
www.fahrkarten.fti.de
fahrkarten.fti.de
staging-fahrkarten.fti.de
staging-rueckverguetung.fti.de
qa.www.campings.com
staging-fahrkarten.fti.de
rueckverguetung.fti.de
designtitles.com
qa.www.campings.com
kilpailu.lofbergs.fi
www.fti.de
news.fti.de
handbuch.fti.de
qa.www.campings.com
www.fahrkarten.fti.de
gm-log.fti.de
qa.www.campings.com
ath.atheer.io
www.fahrkarten.fti.de
qa.www.campings.com
links.aip.ibraph.app
fti.de
staging.fti.de
www.fahrkarten.fti.de
fti.de
www.fti.de
handbuch.fti.de
agenturverwaltung.fti.de
icn.ziggu.app
www.rueckverguetung.fti.de
cdn-prd.book.fti.de
news.fti.de
gm.fti.de
esta-rueckverguetung.fti.de
fti.de
kreuzfahrten.fti.de
handbuch.fti.de
fti.de
fti.de
blog.fti.de
staging.fti.de
www.rueckverguetung.fti.de
qa.www.campings.com
fti.de
highschool.pk
travelmag.fti.de
gm.fti.de
gm-api.fti.de
qa.www.campings.com
staging-fahrkarten.fti.de
fti.de
www.campings.com
www.rueckverguetung.fti.de
hotelbeschreibung.fti.de
cm1.fti.de
www.fti.de
www.campings.com
ads2.fti.de
gm-log.fti.de
handbuch.fti.de
www.campings.com
hotelbeschreibung.fti.de
www.olympictinhochvtc.com
handbuch.fti.de
siteminder.soap.fti.de
www.fahrkarten.fti.de
www.campings.com
handbuch.fti.de
camping.fti.de
drivefti.fti.de
kreuzfahrten.fti.de
handbuch.fti.de
www.campings.com
handbuch.fti.de
teacapps.de
roadbooks.fti.de
hotelbeschreibung.fti.de
www.tonsoffuntravel.net
rueckverguetung.fti.de
news.fti.de
qa.www.campings.com
rueckverguetung.fti.de
qa.www.campings.com
www.campings.com
www.fahrkarten.fti.de
gm-log.fti.de
roadbooks.fti.de
staging.hotelbeschreibung.fti.de
oneqa.erauqsh.com
gutscheine.fti.de
news.fti.de
blfkmp.fti.de
gutscheine.fti.de
staging.fti.de
qa.www.campings.com
www.fahrkarten.fti.de
esta-rueckverguetung.fti.de
s.camping.fti.de
qa.www.campings.com
www.fahrkarten.fti.de
fahrkarten.fti.de
staging-fahrkarten.fti.de
staging-rueckverguetung.fti.de
qa.www.campings.com
staging-fahrkarten.fti.de
rueckverguetung.fti.de
designtitles.com
qa.www.campings.com
kilpailu.lofbergs.fi
www.fti.de
news.fti.de
handbuch.fti.de
qa.www.campings.com
www.fahrkarten.fti.de
gm-log.fti.de
qa.www.campings.com
ath.atheer.io
www.fahrkarten.fti.de
qa.www.campings.com
links.aip.ibraph.app
fti.de
staging.fti.de
www.fahrkarten.fti.de
fti.de
www.fti.de
handbuch.fti.de
agenturverwaltung.fti.de
icn.ziggu.app
www.rueckverguetung.fti.de
cdn-prd.book.fti.de
news.fti.de
gm.fti.de
esta-rueckverguetung.fti.de
fti.de
kreuzfahrten.fti.de
handbuch.fti.de
fti.de
fti.de
blog.fti.de
staging.fti.de
www.rueckverguetung.fti.de
qa.www.campings.com
fti.de
highschool.pk
travelmag.fti.de
gm.fti.de
gm-api.fti.de
qa.www.campings.com
staging-fahrkarten.fti.de
fti.de
www.campings.com
www.rueckverguetung.fti.de
hotelbeschreibung.fti.de
cm1.fti.de
www.fti.de
www.campings.com
ads2.fti.de
gm-log.fti.de
handbuch.fti.de
www.campings.com
hotelbeschreibung.fti.de
www.olympictinhochvtc.com
handbuch.fti.de
siteminder.soap.fti.de
www.fahrkarten.fti.de
www.campings.com
handbuch.fti.de
camping.fti.de
drivefti.fti.de
kreuzfahrten.fti.de
handbuch.fti.de
www.campings.com
handbuch.fti.de
teacapps.de
Certificate
The complete raw certificate details for blfkmp.fti.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGEDCCBPigAwIBAgIQB4YIyAYC/nT7It2xLW1qATANBgkqhkiG9w0BAQsFADBZ MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjQw NTIyMDAwMDAwWhcNMjQwODE2MjM1OTU5WjBuMQswCQYDVQQGEwJGUjEXMBUGA1UE CAwOw45sZS1kZS1GcmFuY2UxDjAMBgNVBAcTBVBhcmlzMR4wHAYDVQQKExVDcml0 ZW8gVGVjaG5vbG9neSBTQVMxFjAUBgNVBAMTDWJsZmttcC5mdGkuZGUwWTATBgcq hkjOPQIBBggqhkjOPQMBBwNCAARl19Lk4NzDMMLtcLIdPa555MhrS2Xr2E5Gk/+Z jBzyk5qugM27GknW/ufEeHA6b1RMNCWd2ScEhyfVduf23QKLo4IDiDCCA4QwHwYD VR0jBBgwFoAUdIWAwGbH3zfez70pN6oDHb7tzRcwHQYDVR0OBBYEFKVmdHzACa/0 wHQmPBE6WLNezWmeMBgGA1UdEQQRMA+CDWJsZmttcC5mdGkuZGUwPgYDVR0gBDcw NTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5j b20vQ1BTMA4GA1UdDwEB/wQEAwIDiDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEagRIZCaHR0cDovL2NybDMuZGlnaWNlcnQu Y29tL0RpZ2lDZXJ0R2xvYmFsRzJUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3JsMEig RqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRM U1JTQVNIQTI1NjIwMjBDQTEtMS5jcmwwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEF BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRw Oi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNI QTI1NjIwMjBDQTEtMS5jcnQwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkCBAIE ggFtBIIBaQFnAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGP n9I6ogAABAMARzBFAiBoL+xDNPnhyv6Pt1H0xkoBBmSdqsZ1fEltf0HPloiLIgIh APCREfOeC2wIxQQB0fLord1dPcmg0zPHjx/7B6rLW3yWAHYASLDja9qmRzQP5WoC +p0w6xxSActW3SyB2bu/qznYhHMAAAGPn9I6VQAABAMARzBFAiEAsVVwU5yEIOLJ s1z5oirOoUlDAVCviPNFDQBiiox+J10CIF4rgYEscEcByTvxH1FT1rEsG8QsFUMM BlR4Q7pCVPMpAHUA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGP n9I6MQAABAMARjBEAiASzX4LJ/WUF+4tYynvhvtTiYR5NOAztyIxvfPDWEY/qQIg MHusegS4tkZ3JKl9oSn/eRf1S4pJW94ZAaG4VSahyBYwDQYJKoZIhvcNAQELBQAD ggEBAGZoO99BCWQZN4XLv8AiHSjDWug74NNoCnkknPLzXAWz7Re/joFOOhJ5nlqM z8gVuIR5uV5cZ00fDp+cXd4xtXtBPr/Oq8tNDkxAEBtIfgZDR0FhWrx+FMh68d89 Jw7J7z216kgWdlteZucCNCwX/vwOJVVxcEaYPbUkYxudelTuBoJ/q7GeBgAi4lSO CVFh977AbJGVo9sh4zZINXDZucteD8AYSrLRiZ0ogfQ9N306zdnoC5qOtR+bsUN/ jYC2ECSPXeD/XtXLhQ2WqsRoz5/d5ufQNAT4pAOG5WBiMSY+hVObHatp2TlNox26 tHRv+zXqS0HWXwNE5Z8bhf7ZHpo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEZdfS5ODcwzDC7XCyHT2ueeTIa0tl 69hORpP/mYwc8pOaroDNuxpJ1v7nxHhwOm9UTDQlndknBIcn1Xbn9t0Ciw== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10000541856307939628353177333537794561 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Criteo Technology SAS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blfkmp.fti.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 000465d7d2e4e0dcc330c2ed70b21d3dae79e4c86b4b65ebd84e4693ff998c1cf2939aae80cdbb1a49d6fee7c478703a6f544c34259dd927048727d576e7f6dd028b . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a566747cc009aff4c074263c113a58b35ecd699e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blfkmp.fti.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 0388 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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