*.gannett.com
- Gannett Co., Inc. -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 0f:d2:d5:4b:8d:b2:59:23:72:6a:bc:2f:a7:e6:db:d2 was issued on by DigiCert Inc.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Gannett Co., Inc.
Organization:
Gannett Co., Inc.
Organization unit: Technology Operations
Organization unit: Technology Operations
State / Province:
Virginia
Locality: Mclean
Country: US
Locality: Mclean
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:d2:d5:4b:8d:b2:59:23:72:6a:bc:2f:a7:e6:db:d2Serial Number (int): 21033128416276814396372816055933262802
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: ba:15:ea:9b:d6:78:31:ef:c9:68:eb:cf:18:ad:7e:52:ab:b2:f5:10
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 39:4f:22:11:00:01:29:93:10:12:2e:b0:a6:05:7e:39:b9:00:8e:b2
Fingerprint (sha256): 13:bd:df:dc:c7:62:3d:6a:c3:f3:03:1c:d1:01:ab:eb:d8:9e:5b:37:cf:b8:eb:14:1b:52:2a:57:60:b4:a1:ed
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl
Check the revocation status for certificate *.gannett.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.gannett.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.gannett.com
gannett.com
bomgar.gannett.com
gannett.com
bomgar.gannett.com
Other certificates including the domain name gannett.com
(limited to 100 certificates)
gannett.com
gannett.com
webapps.us.ad.gannett.com
5726911808405504-fe1.pantheonsite.io
campaigninsights.gannett.com
gannett.com
*.gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
instant.gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
click.gannett.com
gannett.com
gannett.com
*.gannett.com
gannett.com
gannett.com
*.gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
gannett.com
*.gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
giadcwiki.gannett.com
*.gannett.com
gannett.com
*.gannett.com
gannett.com
*.gannett.com
mi.gannett.com
gannett.com
gannett.com
gannett.com
adbutler.com
5726911808405504-fe1.pantheonsite.io
*.gannett.com
*.gannett.com
okta.gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
5726911808405504-fe1.pantheonsite.io
gannett.com
gannett.com
okta.gannett.com
gannett.com
*.gannett.com
5726911808405504-fe1.pantheonsite.io
5726911808405504-fe1.pantheonsite.io
gannett.com
gannett.com
5726911808405504-fe1.pantheonsite.io
gannett.com
gannett.com
cueprintdev.gannett.com
gannett.com
gannett.com
gannett.com
5726911808405504-fe1.pantheonsite.io
5726911808405504-fe1.pantheonsite.io
*.gannett.com
*.cueprint.gannett.com
gannett.com
*.gannett.com
rio16.gannett.com
gannett.com
gannett.com
gannett.com
5726911808405504-fe1.pantheonsite.io
*.gannett.com
gannett.com
*.gannett.com
gannett.com
5726911808405504-fe1.pantheonsite.io
gannett.com
gannett.com
5726911808405504-fe1.pantheonsite.io
gannett.com
*.gannett.com
gannett.com
gannett.com
rio16.gannett.com
gannett.com
webapps.us.ad.gannett.com
5726911808405504-fe1.pantheonsite.io
campaigninsights.gannett.com
gannett.com
*.gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
instant.gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
click.gannett.com
gannett.com
gannett.com
*.gannett.com
gannett.com
gannett.com
*.gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
gannett.com
*.gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
giadcwiki.gannett.com
*.gannett.com
gannett.com
*.gannett.com
gannett.com
*.gannett.com
mi.gannett.com
gannett.com
gannett.com
gannett.com
adbutler.com
5726911808405504-fe1.pantheonsite.io
*.gannett.com
*.gannett.com
okta.gannett.com
gannett.com
gannett.com
gannett.com
gannett.com
*.gannett.com
5726911808405504-fe1.pantheonsite.io
gannett.com
gannett.com
okta.gannett.com
gannett.com
*.gannett.com
5726911808405504-fe1.pantheonsite.io
5726911808405504-fe1.pantheonsite.io
gannett.com
gannett.com
5726911808405504-fe1.pantheonsite.io
gannett.com
gannett.com
cueprintdev.gannett.com
gannett.com
gannett.com
gannett.com
5726911808405504-fe1.pantheonsite.io
5726911808405504-fe1.pantheonsite.io
*.gannett.com
*.cueprint.gannett.com
gannett.com
*.gannett.com
rio16.gannett.com
gannett.com
gannett.com
gannett.com
5726911808405504-fe1.pantheonsite.io
*.gannett.com
gannett.com
*.gannett.com
gannett.com
5726911808405504-fe1.pantheonsite.io
gannett.com
gannett.com
5726911808405504-fe1.pantheonsite.io
gannett.com
*.gannett.com
gannett.com
gannett.com
rio16.gannett.com
Certificate
The complete raw certificate details for *.gannett.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIQD9LVS42yWSNyarwvp+bb0jANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xNjEyMTUwMDAwMDBaFw0yMDAyMTIxMjAwMDBa MIGFMQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWExDzANBgNVBAcTBk1j bGVhbjEaMBgGA1UEChMRR2FubmV0dCBDby4sIEluYy4xHjAcBgNVBAsTFVRlY2hu b2xvZ3kgT3BlcmF0aW9uczEWMBQGA1UEAwwNKi5nYW5uZXR0LmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMznHV68XsZBYOA/tbwOgWLE2FCornXn uVzRzhRZFIuH2RkVi3rSi24zky7NC23QdFYz0q/8UEROSu//6CgueLiTMZHbke+u WmG07sE+sd0qFV/GLIdzMPfznBLqPfxz/5IGFmnJYi4LUV+yAAratbHG8dpyBt9g 9zrPoa1EVgR4yUkWKOSLE5JA5gWyVZwFsS26xr2x/w7vmaoj6V7ozv02ymmb8Iw1 gjAnF5gHiOWKABGTIo4NH44J1g9KEYPuc1IS2Qz1/msMqxK5ETsXjujB/5GyDxF4 hQJhVXA5pxOxjBluE7sC18EjrJCPug5EPoPVjAiJKy2hUeCAitgmmmsCAwEAAaOC AgcwggIDMB8GA1UdIwQYMBaAFFFo/5CvAgd1PMzZZWRiohK4WXI7MB0GA1UdDgQW BBS6Feqb1ngx78lo688YrX5Sq7L1EDA5BgNVHREEMjAwgg0qLmdhbm5ldHQuY29t ggtnYW5uZXR0LmNvbYISYm9tZ2FyLmdhbm5ldHQuY29tMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKg MIYuaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc1LmNy bDA0oDKgMIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVy LWc1LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxo dHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjCBgwYIKwYBBQUH AQEEdzB1MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTQYI KwYBBQUHMAKGQWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNI QTJIaWdoQXNzdXJhbmNlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZI hvcNAQELBQADggEBAKY22Plvz+IuuJCMBfnTq57cRKvCpSa3gVFtWmT743bF0nVf I0M83F+j7IdNXN3XyqL/zrwvkuxfcQsTBdktSBUtFTjVbnWAcYWnKdt7xOcfF+wi 9/969Ybg7Jpu5mTNvvD7KFfKToHzaCgyoFWXt0CcfRE4YelG/bOlVYbcMIOCFNSI DStvqS9Brq1j+dNGKFUSVFWOQkJHKNvngwdhexrIfz6Z3Mg7xnh3QhBRhr09ICxQ JfkY51rjTp79OYgdr/hqNgv1SXD3Bq1oi7NsFqquyvG0Y1CtVFucduMZMjbSejbi dPOhv0LoyTiEiocA8yX/Wqt6fkgGHJ/CGbnaHNY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOcdXrxexkFg4D+1vA6B YsTYUKiudee5XNHOFFkUi4fZGRWLetKLbjOTLs0LbdB0VjPSr/xQRE5K7//oKC54 uJMxkduR765aYbTuwT6x3SoVX8Ysh3Mw9/OcEuo9/HP/kgYWacliLgtRX7IACtq1 scbx2nIG32D3Os+hrURWBHjJSRYo5IsTkkDmBbJVnAWxLbrGvbH/Du+ZqiPpXujO /TbKaZvwjDWCMCcXmAeI5YoAEZMijg0fjgnWD0oRg+5zUhLZDPX+awyrErkROxeO 6MH/kbIPEXiFAmFVcDmnE7GMGW4TuwLXwSOskI+6DkQ+g9WMCIkrLaFR4ICK2Caa awIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21033128416276814396372816055933262802 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-12 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mclean' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gannett Co., Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technology Operations' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gannett.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25866581132468222618763419574839682330289650507041236184039789010042466617760430616596334397469268612674411600621610414768159007424243664431650336711176082856007781244116754790110584939506341923328217443194503407301576170217995321104888390617688688590186835475854283656243357241118620003056832394960490727794458678998969844879578236359446373264984884112917132817743920323403409585050870877597269838800781442917206476104668312359746859964041199714935533411727610649024153373934059843628230012327398287497715274066139912201428303884381139739606364842244305125564748658187015619286290034161110697982743623014275449526891 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ba15ea9bd67831efc968ebcf18ad7e52abb2f510 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gannett.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gannett.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bomgar.gannett.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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