*.kpmg.be
- KPMG Support Services -
Issued by DigiCert High Assurance CA-3
About this certificate
This digital certificate with serial number 0e:74:3d:43:58:f2:55:81:34:a7:9e:59:17:c9:12:67 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
KPMG Support Services
Organization:
KPMG Support Services
State / Province:
11
Locality: Brussels
Country: BE
Locality: Brussels
Country: BE
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:74:3d:43:58:f2:55:81:34:a7:9e:59:17:c9:12:67Serial Number (int): 19212740939379218130369627020893688423
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: f2:45:c9:6a:cd:39:ce:45:82:a8:4a:63:45:0f:20:45:db:ad:c4:b3
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7
Fingerprint (sha1): 37:83:9f:17:04:4b:7c:4b:9f:21:2f:1d:9e:2f:21:dc:64:86:1a:1a
Fingerprint (sha256): 14:80:0f:0b:94:3f:80:4b:bc:a7:08:6a:4e:d6:27:79:66:34:d9:36:92:60:73:76:64:94:3b:76:45:f3:35:ae
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ca3-g24.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g24.crl
Check the revocation status for certificate *.kpmg.be
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.kpmg.be
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.kpmg.be
kpmg.be
kpmg.be
Other certificates including the domain name kpmg.be
(limited to 100 certificates)
tracking.kpmg.be
onboarding.kpmg.be
cloudia.kpmg.be
*.kpmg.be
collector.kpmg.be
clientexperience.kpmg.com.br
dn.kpmg.be
clientexperience.kpmg.com.br
*.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
mmportal-secure.kpmg.be
*.kpmg.be
clientexperience.kpmg.com.br
*.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
marketing.kpmg.be
*.kpmg.be
clientexperience.kpmg.com.br
staytuned.kpmg.be
clientexperience.kpmg.com.br
info.nucleairforum.be
clientexperience.kpmg.com.br
marketing.kpmg.be
clientexperience.kpmg.com.br
marketing.kpmg.be
clientexperience.kpmg.com.br
digital.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
cl.sw-t.ch
smartchallenge.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
mmportal-secure.kpmg.be
mmportal-secure.kpmg.be
*.kpmg.be
*.kpmg.be
clientexperience.kpmg.com.br
marketing.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
collector.kpmg.be
clientexperience.kpmg.com.br
digital.kpmg.be
mi-vsp.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
*.kpmg.be
marketing.kpmg.be
clientexperience.kpmg.com.br
digital.kpmg.be
clientexperience.kpmg.com.br
*.kpmg.be
clientexperience.kpmg.com.br
socialsharing.bankenverzekering.kbc.be
onboarding.kpmg.be
clientexperience.kpmg.com.br
*.kpmg.be
clientexperience.kpmg.com.br
landing-employees.nationallottery.be
tracking.kpmg.be
staytuned.kpmg.be
*.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
tracking.kpmg.be
veniceasp.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
tracking.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
link.socialsharing.cbc.be
clientexperience.kpmg.com.br
tracking.kpmg.be
*.kpmg.be
*.kpmg.be
smartalwayswins.kpmg.be
*.kpmg.be
clientexperience.kpmg.com.br
landing-socialsharing.kbccorporatebanking.be
tracking.kpmg.be
digital.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
socialsharing.cbc.be
marketing.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
*.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
onboarding.kpmg.be
cloudia.kpmg.be
*.kpmg.be
collector.kpmg.be
clientexperience.kpmg.com.br
dn.kpmg.be
clientexperience.kpmg.com.br
*.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
mmportal-secure.kpmg.be
*.kpmg.be
clientexperience.kpmg.com.br
*.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
marketing.kpmg.be
*.kpmg.be
clientexperience.kpmg.com.br
staytuned.kpmg.be
clientexperience.kpmg.com.br
info.nucleairforum.be
clientexperience.kpmg.com.br
marketing.kpmg.be
clientexperience.kpmg.com.br
marketing.kpmg.be
clientexperience.kpmg.com.br
digital.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
cl.sw-t.ch
smartchallenge.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
mmportal-secure.kpmg.be
mmportal-secure.kpmg.be
*.kpmg.be
*.kpmg.be
clientexperience.kpmg.com.br
marketing.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
collector.kpmg.be
clientexperience.kpmg.com.br
digital.kpmg.be
mi-vsp.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
*.kpmg.be
marketing.kpmg.be
clientexperience.kpmg.com.br
digital.kpmg.be
clientexperience.kpmg.com.br
*.kpmg.be
clientexperience.kpmg.com.br
socialsharing.bankenverzekering.kbc.be
onboarding.kpmg.be
clientexperience.kpmg.com.br
*.kpmg.be
clientexperience.kpmg.com.br
landing-employees.nationallottery.be
tracking.kpmg.be
staytuned.kpmg.be
*.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
tracking.kpmg.be
veniceasp.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
tracking.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
link.socialsharing.cbc.be
clientexperience.kpmg.com.br
tracking.kpmg.be
*.kpmg.be
*.kpmg.be
smartalwayswins.kpmg.be
*.kpmg.be
clientexperience.kpmg.com.br
landing-socialsharing.kbccorporatebanking.be
tracking.kpmg.be
digital.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
socialsharing.cbc.be
marketing.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
*.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
Certificate
The complete raw certificate details for *.kpmg.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGmzCCBYOgAwIBAgIQDnQ9Q1jyVYE0p55ZF8kSZzANBgkqhkiG9w0BAQUFADBm MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSUwIwYDVQQDExxEaWdpQ2VydCBIaWdoIEFzc3VyYW5j ZSBDQS0zMB4XDTEzMDYxMTAwMDAwMFoXDTE2MDgyNDEyMDAwMFowYTELMAkGA1UE BhMCQkUxCzAJBgNVBAgTAjExMREwDwYDVQQHEwhCcnVzc2VsczEeMBwGA1UEChMV S1BNRyBTdXBwb3J0IFNlcnZpY2VzMRIwEAYDVQQDDAkqLmtwbWcuYmUwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7nLDi23vZm36S7/qzAMusY0x6OmjW 0Bf2Jb1Rur5wNCK/IjaLvWxoL3zLmdQSTbWv7JeKtz1PgtaWl//SBzZ3Mfi5QYQj Jqw6/hIAJwkm1ZvIIFUQFCsuk1UthS2NkOCpYoeacs0jTPMoaoY/yt+iPzz9M9cI +iZ5ZOvB1l/ZQJxE14C8t2Mkpg5pKMrptMFhcICl5+s5d8+srCHoLigpwBnIe8lY oAaKNvVuk0A22YB0GPcHn2lSmt/PuYTzAGRFC5r6LufcHaM8vhB6yhUd/cDUpkJ0 MCPQoI/wGb+yLXN4EaZGiQ/eMgbfG/gcUgf1PEa+/RPgBvvCyDkPPeJVAgMBAAGj ggNIMIIDRDAfBgNVHSMEGDAWgBRQ6nOJ2yn7EI+e5QEg1N55mUiD9zAdBgNVHQ4E FgQU8kXJas05zkWCqEpjRQ8gRdutxLMwHQYDVR0RBBYwFIIJKi5rcG1nLmJlggdr cG1nLmJlMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwYQYDVR0fBFowWDAqoCigJoYkaHR0cDovL2NybDMuZGlnaWNlcnQuY29t L2NhMy1nMjQuY3JsMCqgKKAmhiRodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vY2Ez LWcyNC5jcmwwggHEBgNVHSAEggG7MIIBtzCCAbMGCWCGSAGG/WwBATCCAaQwOgYI KwYBBQUHAgEWLmh0dHA6Ly93d3cuZGlnaWNlcnQuY29tL3NzbC1jcHMtcmVwb3Np dG9yeS5odG0wggFkBggrBgEFBQcCAjCCAVYeggFSAEEAbgB5ACAAdQBzAGUAIABv AGYAIAB0AGgAaQBzACAAQwBlAHIAdABpAGYAaQBjAGEAdABlACAAYwBvAG4AcwB0 AGkAdAB1AHQAZQBzACAAYQBjAGMAZQBwAHQAYQBuAGMAZQAgAG8AZgAgAHQAaABl ACAARABpAGcAaQBDAGUAcgB0ACAAQwBQAC8AQwBQAFMAIABhAG4AZAAgAHQAaABl ACAAUgBlAGwAeQBpAG4AZwAgAFAAYQByAHQAeQAgAEEAZwByAGUAZQBtAGUAbgB0 ACAAdwBoAGkAYwBoACAAbABpAG0AaQB0ACAAbABpAGEAYgBpAGwAaQB0AHkAIABh AG4AZAAgAGEAcgBlACAAaQBuAGMAbwByAHAAbwByAGEAdABlAGQAIABoAGUAcgBl AGkAbgAgAGIAeQAgAHIAZQBmAGUAcgBlAG4AYwBlAC4wewYIKwYBBQUHAQEEbzBt MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRQYIKwYBBQUH MAKGOWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEhpZ2hBc3N1 cmFuY2VDQS0zLmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBQUAA4IBAQCp 6dfNYQi58DLxuYmxZQX/p5etZSdcCHecCPakVsmxHT2zpjhA8G/VrYymsjYChC/O eXnYlKbVH14R87JpOZB7rEIz+ML/MiG2adttdgfrxGaduBISDkJaR2dtFpzCTGUf H800qlI7Kuzx9XumrpS3XRUTurXZYqL2r+G3UHv3awdRBFSQfFVV0uSKtJMyoJvN L3njetl9I2HqYm3IgKzjiOjxC8B4Y16SdbBT5JJ8bPf5lidplRkNSx9NslfHku0k 1zHP8btQKq9WqVoPxysMs2ANu6UFk9GurGsRTn5Mu+ny76X2TIQo+NJSAzAPg1TC kj9tTFRGZxXkbvEzfrbJ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5yw4tt72Zt+ku/6swDL rGNMejpo1tAX9iW9Ubq+cDQivyI2i71saC98y5nUEk21r+yXirc9T4LWlpf/0gc2 dzH4uUGEIyasOv4SACcJJtWbyCBVEBQrLpNVLYUtjZDgqWKHmnLNI0zzKGqGP8rf oj88/TPXCPomeWTrwdZf2UCcRNeAvLdjJKYOaSjK6bTBYXCApefrOXfPrKwh6C4o KcAZyHvJWKAGijb1bpNANtmAdBj3B59pUprfz7mE8wBkRQua+i7n3B2jPL4QesoV Hf3A1KZCdDAj0KCP8Bm/si1zeBGmRokP3jIG3xv4HFIH9TxGvv0T4Ab7wsg5Dz3i VQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19212740939379218130369627020893688423 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-06-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-24 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '11' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KPMG Support Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kpmg.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23683830221590148112972511775959039705583452911260446257198007336119440707737558522086715265374558815024263759240056508042591186218206867860368404560292270342481973625466886224028452213942895180180697104004090874544844327162309713903645618066000411397219206882922861928712328505855512141509641329333220033953088796875168094350792827666253490629946061537519212451278536718762910346261171412527768816028403090597327146606410508397075103867155296872076099155839678636608110589106293857201994024512886990274924792284602539489903945242309213833547903792632114113607549880208566050859978471526911158398973138161372430721621 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f245c96acd39ce4582a84a63450f2045dbadc4b3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kpmg.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmg.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g24.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g24.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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