store.universalmusic.com
- Universal Music Group, Inc. -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 04:3a:66:12:25:7a:2e:e7:f6:4c:9d:34:f6:03:2a:72 was issued on by DigiCert Inc.
With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Universal Music Group, Inc.
Organization:
Universal Music Group, Inc.
Organization unit: E-commerce
Organization unit: E-commerce
State / Province:
New York
Locality: New York
Country: US
Locality: New York
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:3a:66:12:25:7a:2e:e7:f6:4c:9d:34:f6:03:2a:72Serial Number (int): 5620135444419837042397894746707274354
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 01:2f:20:5b:ed:1e:4a:e0:f7:49:7a:2b:57:79:4a:4e:bf:69:f9:27
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): ae:ab:c6:58:c6:33:ce:6a:c3:02:aa:0d:bf:4d:f4:c8:15:83:8e:00
Fingerprint (sha256): 14:b4:e2:97:88:8f:e6:4c:62:15:7d:1e:b3:df:89:0f:67:80:3e:c8:ae:43:a3:99:90:c4:79:ce:99:f3:88:cd
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate store.universalmusic.com
85
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for store.universalmusic.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
store.universalmusic.com
shop.islandrecordsbeer.com
store.jamiroquai.com
store.thisissigrid.com
shop.pure.com
uk.lordeofficialstore.com
musicstore.niallhoran.com
store.deccaclassics.com
shop.cyberalma.com
store.thewho.com
shop.paddington.com
store.samsmithworld.com
store.mysteryjets.com
store.blossomsband.co.uk
shop.thejazzlabels.com
thesoundofvinyl.com
www.thesoundofvinyl.com
music.bastillebastille.com
shop.dreamboatsandpetticoats.com
store.amywinehouse.com
store.jessieware.com
store.jakebugg.com
store.florenceandthemachine.net
store.disclosureofficial.com
store.amfrecords.com
shop.itsradioactive.com
store.benhowardmusic.co.uk
shop.keanemusic.com
store.thechemicalbrothers.com
store.tomchaplinmusic.com
shop.emelisande.com
shop.islandrecords.co.uk
store.hozier.com
store.catfishandthebottlemen.com
shop.thisisofficial.com
shop.fictionrecords.co.uk
store.jackgarratt.com
store.udiscovermusic.com
shopuk.theweeknd.com
shop.abbeyroad.com
store.spinefarmrecords.com
greatofferstore.com
www.greatofferstore.com
getvamps.com
www.getvamps.com
shopuk.justinbiebermusic.com
store.springkingband.com
shop.loylecarner.com
store.dirtyhit.co.uk
store.blessedvice.com
store.mumfordandsons.com
store.frank-turner.com
store.puremccartney.com
store.abcmartinfry.com
store.jamesbay.com
store.amymacdonald.co.uk
store.eltonjohn.com
store.andrewlloydwebber.com
ukshop.shawnmendesofficial.com
uk.gnrmerch.com
store.sexpistolsofficial.com
egyptstation.co.uk
www.egyptstation.co.uk
shop.gorgoncity.com
shop.hardycaprio.co
store.benkhan.co.uk
dtrw.markknopfler.com
shop.whenyoungband.com
shop.westlife.com
shop.ianbrown.co.uk
shop.fourofdiamonds.co.uk
flashsalerecords.com
www.flashsalerecords.com
shop.walkingoncars.com
shop.ronniewood.com
shop.jamesblakemusic.com
shop.lewiscapaldi.com
shop.kawalaofficial.com
uk.shopxxxtentacion.com
shop.mabelofficial.com
shopuk.postmalone.com
shop.sheybaba.com
shop.ravescience.co.uk
shopuk.trippieredd.com
shop.decca.com
shop.islandrecordsbeer.com
store.jamiroquai.com
store.thisissigrid.com
shop.pure.com
uk.lordeofficialstore.com
musicstore.niallhoran.com
store.deccaclassics.com
shop.cyberalma.com
store.thewho.com
shop.paddington.com
store.samsmithworld.com
store.mysteryjets.com
store.blossomsband.co.uk
shop.thejazzlabels.com
thesoundofvinyl.com
www.thesoundofvinyl.com
music.bastillebastille.com
shop.dreamboatsandpetticoats.com
store.amywinehouse.com
store.jessieware.com
store.jakebugg.com
store.florenceandthemachine.net
store.disclosureofficial.com
store.amfrecords.com
shop.itsradioactive.com
store.benhowardmusic.co.uk
shop.keanemusic.com
store.thechemicalbrothers.com
store.tomchaplinmusic.com
shop.emelisande.com
shop.islandrecords.co.uk
store.hozier.com
store.catfishandthebottlemen.com
shop.thisisofficial.com
shop.fictionrecords.co.uk
store.jackgarratt.com
store.udiscovermusic.com
shopuk.theweeknd.com
shop.abbeyroad.com
store.spinefarmrecords.com
greatofferstore.com
www.greatofferstore.com
getvamps.com
www.getvamps.com
shopuk.justinbiebermusic.com
store.springkingband.com
shop.loylecarner.com
store.dirtyhit.co.uk
store.blessedvice.com
store.mumfordandsons.com
store.frank-turner.com
store.puremccartney.com
store.abcmartinfry.com
store.jamesbay.com
store.amymacdonald.co.uk
store.eltonjohn.com
store.andrewlloydwebber.com
ukshop.shawnmendesofficial.com
uk.gnrmerch.com
store.sexpistolsofficial.com
egyptstation.co.uk
www.egyptstation.co.uk
shop.gorgoncity.com
shop.hardycaprio.co
store.benkhan.co.uk
dtrw.markknopfler.com
shop.whenyoungband.com
shop.westlife.com
shop.ianbrown.co.uk
shop.fourofdiamonds.co.uk
flashsalerecords.com
www.flashsalerecords.com
shop.walkingoncars.com
shop.ronniewood.com
shop.jamesblakemusic.com
shop.lewiscapaldi.com
shop.kawalaofficial.com
uk.shopxxxtentacion.com
shop.mabelofficial.com
shopuk.postmalone.com
shop.sheybaba.com
shop.ravescience.co.uk
shopuk.trippieredd.com
shop.decca.com
Other certificates including the domain name universalmusic.com
(limited to 100 certificates)
acquia-sites.com
incapsula.com
acquia-sites.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.dev.investors.universalmusic.com
store.universalmusic.com
acquia-sites.com
incapsula.com
store.universalmusic.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
etassets.universalmusic.com
incapsula.com
uc17.janrainengage.com
incapsula.com
store.universalmusic.com
store.universalmusic.com
incapsula.com
incapsula.com
store.universalmusic.com
preview.investors.universalmusic.com
store.universalmusic.com
incapsula.com
*.qa.investors.universalmusic.com
investors.universalmusic.com
incapsula.com
uutiskirje.universalmusic.com
*.janraincapture.com
uc18.janrainengage.com
universalmusic.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
*.qa.investors.universalmusic.com
universalmusic.com
preview.dev.investors.universalmusic.com
incapsula.com
incapsula.com
*.dev.investors.universalmusic.com
acquia-sites.com
privacy.umusic.com
incapsula.com
shop.btobelabo.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
preview.preprod.investors.universalmusic.com
incapsula.com
acquia-sites.com
*.janraincapture.com
uutiskirje.universalmusic.com
store.universalmusic.com
uc18.janrainengage.com
acquia-sites.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
uc18.janrainengage.com
incapsula.com
acquia-sites.com
store.universalmusic.com
acquia-sites.com
incapsula.com
acquia-sites.com
incapsula.com
*.dev.investors.universalmusic.com
incapsula.com
universalmusic.com
*.qa.investors.universalmusic.com
uc17.janrainengage.com
universalmusic.com
store.universalmusic.com
universalmusic.com
incapsula.com
privacy.umusic.com
incapsula.com
*.qa.investors.universalmusic.com
store.universalmusic.com
store.universalmusic.com
incapsula.com
acquia-sites.com
incapsula.com
incapsula.com
store.universalmusic.com
incapsula.com
incapsula.com
go.universalmusic.com
incapsula.com
uc11.janraincapture.com
investors.universalmusic.com
incapsula.com
store.universalmusic.com
incapsula.com
incapsula.com
store.universalmusic.com
incapsula.com
acquia-sites.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.dev.investors.universalmusic.com
store.universalmusic.com
acquia-sites.com
incapsula.com
store.universalmusic.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
etassets.universalmusic.com
incapsula.com
uc17.janrainengage.com
incapsula.com
store.universalmusic.com
store.universalmusic.com
incapsula.com
incapsula.com
store.universalmusic.com
preview.investors.universalmusic.com
store.universalmusic.com
incapsula.com
*.qa.investors.universalmusic.com
investors.universalmusic.com
incapsula.com
uutiskirje.universalmusic.com
*.janraincapture.com
uc18.janrainengage.com
universalmusic.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
*.qa.investors.universalmusic.com
universalmusic.com
preview.dev.investors.universalmusic.com
incapsula.com
incapsula.com
*.dev.investors.universalmusic.com
acquia-sites.com
privacy.umusic.com
incapsula.com
shop.btobelabo.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
preview.preprod.investors.universalmusic.com
incapsula.com
acquia-sites.com
*.janraincapture.com
uutiskirje.universalmusic.com
store.universalmusic.com
uc18.janrainengage.com
acquia-sites.com
store.universalmusic.com
incapsula.com
store.universalmusic.com
uc18.janrainengage.com
incapsula.com
acquia-sites.com
store.universalmusic.com
acquia-sites.com
incapsula.com
acquia-sites.com
incapsula.com
*.dev.investors.universalmusic.com
incapsula.com
universalmusic.com
*.qa.investors.universalmusic.com
uc17.janrainengage.com
universalmusic.com
store.universalmusic.com
universalmusic.com
incapsula.com
privacy.umusic.com
incapsula.com
*.qa.investors.universalmusic.com
store.universalmusic.com
store.universalmusic.com
incapsula.com
acquia-sites.com
incapsula.com
incapsula.com
store.universalmusic.com
incapsula.com
incapsula.com
go.universalmusic.com
incapsula.com
uc11.janraincapture.com
investors.universalmusic.com
incapsula.com
store.universalmusic.com
incapsula.com
incapsula.com
store.universalmusic.com
Certificate
The complete raw certificate details for store.universalmusic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIINbjCCDFagAwIBAgIQBDpmEiV6Luf2TJ009gMqcjANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xOTA0MjUwMDAwMDBaFw0yMTAyMTgxMjAwMDBa MIGRMQswCQYDVQQGEwJVUzERMA8GA1UECBMITmV3IFlvcmsxETAPBgNVBAcTCE5l dyBZb3JrMSQwIgYDVQQKExtVbml2ZXJzYWwgTXVzaWMgR3JvdXAsIEluYy4xEzAR BgNVBAsTCkUtY29tbWVyY2UxITAfBgNVBAMTGHN0b3JlLnVuaXZlcnNhbG11c2lj LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANVHjygmRPQbIXuw Usdu3qhX4lyLuS9+VRQkpLzUiklZS4pTplSH9X612RvQBs8y1Ozc18lJG6t415Ft 6vDZ42l053PepOQX/KTSrbdK9JnLLx8Cw6sB5fnE/65KP1gMwN7nI9bir072VDAH uwFwDcU9hglZFDRAXLR2NfHgopzKDZIkkI8eki+OZ7H43Ub8loABMhET83V/Cmfs 49WrBGA11F+NyBvMvbI4dR4xR3z/aSWbu/4LcoXO6XOyN71Ujj9iB4GTp37xtZGp l4y3H9S5e7cipkvIFV1AhzK9csaAm/JrBYb5NhQ+m4sSfg7Z2EN9Xpw6we79yBSy 5fP7mi8CAwEAAaOCCeAwggncMB8GA1UdIwQYMBaAFFFo/5CvAgd1PMzZZWRiohK4 WXI7MB0GA1UdDgQWBBQBLyBb7R5K4PdJeitXeUpOv2n5JzCCB/sGA1UdEQSCB/Iw ggfughhzdG9yZS51bml2ZXJzYWxtdXNpYy5jb22CGnNob3AuaXNsYW5kcmVjb3Jk c2JlZXIuY29tghRzdG9yZS5qYW1pcm9xdWFpLmNvbYIWc3RvcmUudGhpc2lzc2ln cmlkLmNvbYINc2hvcC5wdXJlLmNvbYIZdWsubG9yZGVvZmZpY2lhbHN0b3JlLmNv bYIZbXVzaWNzdG9yZS5uaWFsbGhvcmFuLmNvbYIXc3RvcmUuZGVjY2FjbGFzc2lj cy5jb22CEnNob3AuY3liZXJhbG1hLmNvbYIQc3RvcmUudGhld2hvLmNvbYITc2hv cC5wYWRkaW5ndG9uLmNvbYIXc3RvcmUuc2Ftc21pdGh3b3JsZC5jb22CFXN0b3Jl Lm15c3RlcnlqZXRzLmNvbYIYc3RvcmUuYmxvc3NvbXNiYW5kLmNvLnVrghZzaG9w LnRoZWphenpsYWJlbHMuY29tghN0aGVzb3VuZG9mdmlueWwuY29tghd3d3cudGhl c291bmRvZnZpbnlsLmNvbYIabXVzaWMuYmFzdGlsbGViYXN0aWxsZS5jb22CIHNo b3AuZHJlYW1ib2F0c2FuZHBldHRpY29hdHMuY29tghZzdG9yZS5hbXl3aW5laG91 c2UuY29tghRzdG9yZS5qZXNzaWV3YXJlLmNvbYISc3RvcmUuamFrZWJ1Z2cuY29t gh9zdG9yZS5mbG9yZW5jZWFuZHRoZW1hY2hpbmUubmV0ghxzdG9yZS5kaXNjbG9z dXJlb2ZmaWNpYWwuY29tghRzdG9yZS5hbWZyZWNvcmRzLmNvbYIXc2hvcC5pdHNy YWRpb2FjdGl2ZS5jb22CGnN0b3JlLmJlbmhvd2FyZG11c2ljLmNvLnVrghNzaG9w LmtlYW5lbXVzaWMuY29tgh1zdG9yZS50aGVjaGVtaWNhbGJyb3RoZXJzLmNvbYIZ c3RvcmUudG9tY2hhcGxpbm11c2ljLmNvbYITc2hvcC5lbWVsaXNhbmRlLmNvbYIY c2hvcC5pc2xhbmRyZWNvcmRzLmNvLnVrghBzdG9yZS5ob3ppZXIuY29tgiBzdG9y ZS5jYXRmaXNoYW5kdGhlYm90dGxlbWVuLmNvbYIXc2hvcC50aGlzaXNvZmZpY2lh bC5jb22CGXNob3AuZmljdGlvbnJlY29yZHMuY28udWuCFXN0b3JlLmphY2tnYXJy YXR0LmNvbYIYc3RvcmUudWRpc2NvdmVybXVzaWMuY29tghRzaG9wdWsudGhld2Vl a25kLmNvbYISc2hvcC5hYmJleXJvYWQuY29tghpzdG9yZS5zcGluZWZhcm1yZWNv cmRzLmNvbYITZ3JlYXRvZmZlcnN0b3JlLmNvbYIXd3d3LmdyZWF0b2ZmZXJzdG9y ZS5jb22CDGdldHZhbXBzLmNvbYIQd3d3LmdldHZhbXBzLmNvbYIcc2hvcHVrLmp1 c3RpbmJpZWJlcm11c2ljLmNvbYIYc3RvcmUuc3ByaW5na2luZ2JhbmQuY29tghRz aG9wLmxveWxlY2FybmVyLmNvbYIUc3RvcmUuZGlydHloaXQuY28udWuCFXN0b3Jl LmJsZXNzZWR2aWNlLmNvbYIYc3RvcmUubXVtZm9yZGFuZHNvbnMuY29tghZzdG9y ZS5mcmFuay10dXJuZXIuY29tghdzdG9yZS5wdXJlbWNjYXJ0bmV5LmNvbYIWc3Rv cmUuYWJjbWFydGluZnJ5LmNvbYISc3RvcmUuamFtZXNiYXkuY29tghhzdG9yZS5h bXltYWNkb25hbGQuY28udWuCE3N0b3JlLmVsdG9uam9obi5jb22CG3N0b3JlLmFu ZHJld2xsb3lkd2ViYmVyLmNvbYIedWtzaG9wLnNoYXdubWVuZGVzb2ZmaWNpYWwu Y29tgg91ay5nbnJtZXJjaC5jb22CHHN0b3JlLnNleHBpc3RvbHNvZmZpY2lhbC5j b22CEmVneXB0c3RhdGlvbi5jby51a4IWd3d3LmVneXB0c3RhdGlvbi5jby51a4IT c2hvcC5nb3Jnb25jaXR5LmNvbYITc2hvcC5oYXJkeWNhcHJpby5jb4ITc3RvcmUu YmVua2hhbi5jby51a4IVZHRydy5tYXJra25vcGZsZXIuY29tghZzaG9wLndoZW55 b3VuZ2JhbmQuY29tghFzaG9wLndlc3RsaWZlLmNvbYITc2hvcC5pYW5icm93bi5j by51a4IZc2hvcC5mb3Vyb2ZkaWFtb25kcy5jby51a4IUZmxhc2hzYWxlcmVjb3Jk cy5jb22CGHd3dy5mbGFzaHNhbGVyZWNvcmRzLmNvbYIWc2hvcC53YWxraW5nb25j YXJzLmNvbYITc2hvcC5yb25uaWV3b29kLmNvbYIYc2hvcC5qYW1lc2JsYWtlbXVz aWMuY29tghVzaG9wLmxld2lzY2FwYWxkaS5jb22CF3Nob3Aua2F3YWxhb2ZmaWNp YWwuY29tghd1ay5zaG9weHh4dGVudGFjaW9uLmNvbYIWc2hvcC5tYWJlbG9mZmlj aWFsLmNvbYIVc2hvcHVrLnBvc3RtYWxvbmUuY29tghFzaG9wLnNoZXliYWJhLmNv bYIWc2hvcC5yYXZlc2NpZW5jZS5jby51a4IWc2hvcHVrLnRyaXBwaWVyZWRkLmNv bYIOc2hvcC5kZWNjYS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5odHRwOi8vY3JsMy5k aWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYuY3JsMDSgMqAwhi5odHRwOi8v Y3JsNC5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYuY3JsMEwGA1UdIARF MEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2lj ZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMIGDBggrBgEFBQcBAQR3MHUwJAYIKwYBBQUH MAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBNBggrBgEFBQcwAoZBaHR0cDov L2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkhpZ2hBc3N1cmFuY2VT ZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADAN BgkqhkiG9w0BAQsFAAOCAQEAa9CfVCxqzJ3L1IAG1scrA8AyZdJc2uqiIDFAafC4 dYSuqz2Y8GDzAPNuuwn3aX8craLZqfMhVoVDtA7VwE3aqu9mx2hy+GSEC6JnpC26 JIlW0NJSDLSK4qahZxb7Y0VVzJKMZZGN23gbRPxyEgV3sjHHrnDqQ1njv7wksw6F ZQ4VFmxq6svAkp7rxnsKfSd9wdELBdh5G27G5H5KjGcMZxxV8xFxZh9CHXUkdcx0 Mulskw9fgYT8drhDVcPNtnfqbnoFS3YMJCt1Y2cZuPMoEwKY9Y3pPbEMYKxvFazB DxksAyt+vQdUl4YhPVqbG7IwpFqkQNAZKyTaRG1jI77aVw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UePKCZE9Bshe7BSx27e qFfiXIu5L35VFCSkvNSKSVlLilOmVIf1frXZG9AGzzLU7NzXyUkbq3jXkW3q8Nnj aXTnc96k5Bf8pNKtt0r0mcsvHwLDqwHl+cT/rko/WAzA3ucj1uKvTvZUMAe7AXAN xT2GCVkUNEBctHY18eCinMoNkiSQjx6SL45nsfjdRvyWgAEyERPzdX8KZ+zj1asE YDXUX43IG8y9sjh1HjFHfP9pJZu7/gtyhc7pc7I3vVSOP2IHgZOnfvG1kamXjLcf 1Ll7tyKmS8gVXUCHMr1yxoCb8msFhvk2FD6bixJ+DtnYQ31enDrB7v3IFLLl8/ua LwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5620135444419837042397894746707274354 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal Music Group, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'E-commerce' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'store.universalmusic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26924046117608201256762783716276012649967337665012193730709563782260070815635096048768153212403317670752152881781251460763104273352995363214467479100878559449676117794697299808320383507287699823208256057341603713924169495329927918767176482523676842875995874042975738369527626545658772484138463190024982064144594671368877902431999759655614493299278698570353393611270537156274905759255134558102924437427108651443324166371219688344287633334168139547243232563101245077404559877294163581411520578749823660682645707006510103495578253022218316628770734135049534350172276172680551063377401054042788357264045077857852033047087 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 012f205bed1e4ae0f7497a2b57794a4ebf69f927 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2034 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.universalmusic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.islandrecordsbeer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jamiroquai.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thisissigrid.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pure.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.lordeofficialstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicstore.niallhoran.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.deccaclassics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cyberalma.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thewho.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.paddington.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.samsmithworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mysteryjets.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.blossomsband.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thejazzlabels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesoundofvinyl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesoundofvinyl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.bastillebastille.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.dreamboatsandpetticoats.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.amywinehouse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jessieware.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jakebugg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.florenceandthemachine.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.disclosureofficial.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.amfrecords.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.itsradioactive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.benhowardmusic.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.keanemusic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thechemicalbrothers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.tomchaplinmusic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.emelisande.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.islandrecords.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.hozier.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.catfishandthebottlemen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thisisofficial.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fictionrecords.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jackgarratt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.udiscovermusic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.theweeknd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.abbeyroad.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.spinefarmrecords.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatofferstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatofferstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getvamps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getvamps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.justinbiebermusic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.springkingband.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.loylecarner.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.dirtyhit.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.blessedvice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mumfordandsons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.frank-turner.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.puremccartney.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.abcmartinfry.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.jamesbay.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.amymacdonald.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.eltonjohn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.andrewlloydwebber.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukshop.shawnmendesofficial.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.gnrmerch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.sexpistolsofficial.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egyptstation.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egyptstation.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gorgoncity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hardycaprio.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.benkhan.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtrw.markknopfler.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.whenyoungband.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.westlife.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ianbrown.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fourofdiamonds.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flashsalerecords.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flashsalerecords.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.walkingoncars.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ronniewood.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.jamesblakemusic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.lewiscapaldi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kawalaofficial.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.shopxxxtentacion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mabelofficial.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.postmalone.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sheybaba.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ravescience.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopuk.trippieredd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.decca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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