www.gereedschapapp.nl
Issued by Trust Provider B.V. DV SSL CA - G2
About this certificate
This digital certificate with serial number 3e:f9:39:43:a9:92:b0:75:35:f6:0c:75:62:3c:11:9f was issued on by Trust Provider B.V..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=www.gereedschapapp.nl
Trust Provider B.V.
Organization:
Trust Provider B.V.
Organization unit: Domain Validated SSL
Organization unit: Domain Validated SSL
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 3e:f9:39:43:a9:92:b0:75:35:f6:0c:75:62:3c:11:9fSerial Number (int): 83706179114554555928594318266275205535
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d8:da:ef:d8:e0:ac:71:71:02:de:e6:62:fa:cf:fc:40:3b:fb:a0:52
Fingerprint (sha1): ea:62:ff:2f:9c:cd:d9:67:5f:ad:a0:fa:61:26:44:af:52:86:a2:dc
Fingerprint (sha256): 14:f5:68:9b:d8:37:e6:5c:81:fd:58:d2:24:50:9d:39:49:f3:1d:8a:44:71:f6:c7:c2:7f:ce:98:ae:22:8d:07
Issuing Certificate URL: http://trustprovider-aia.digitalcertvalidation.com/trustproviderg2.crt
Revocation information
OCSP Server: http://trustprovider-ocsp.digitalcertvalidation.comCRL Distribution Point: http://trustprovider-crl.digitalcertvalidation.com/trustproviderg2.crl
Check the revocation status for certificate www.gereedschapapp.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.gereedschapapp.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.gereedschapapp.nl
gereedschapapp.nl
gereedschapapp.nl
Other certificates including the domain name gereedschapapp.nl
(limited to 100 certificates)
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
itemstorage.io
firebaseapp.com
akshayverma.net
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.gereedschapapp.nl
firebaseapp.com
firebaseapp.com
reddoor.app
zeddtruecolors.com
firebaseapp.com
firebaseapp.com
baiotraze.app
firebaseapp.com
development.oauth2.socio.events
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.gereedschapapp.nl
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.mixolo.io
www.slacklah.com
gamingjs2.com
firebaseapp.com
firebaseapp.com
www.gereedschapapp.nl
app.dockpad.io
db.gereedschapapp.nl
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
enimrate.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
youtalk.tk
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
aureaavionics.com
firebaseapp.com
firebaseapp.com
db.gereedschapapp.nl
groweveryweek.com
www.gereedschapapp.nl
akshayverma.net
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.lifeholdings.llc
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
apt.benjaminshen.com
firebaseapp.com
agent.getmytravel.in
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
scrolldemo.tk
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
itemstorage.io
firebaseapp.com
akshayverma.net
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.gereedschapapp.nl
firebaseapp.com
firebaseapp.com
reddoor.app
zeddtruecolors.com
firebaseapp.com
firebaseapp.com
baiotraze.app
firebaseapp.com
development.oauth2.socio.events
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.gereedschapapp.nl
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.mixolo.io
www.slacklah.com
gamingjs2.com
firebaseapp.com
firebaseapp.com
www.gereedschapapp.nl
app.dockpad.io
db.gereedschapapp.nl
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
enimrate.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
youtalk.tk
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
aureaavionics.com
firebaseapp.com
firebaseapp.com
db.gereedschapapp.nl
groweveryweek.com
www.gereedschapapp.nl
akshayverma.net
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.lifeholdings.llc
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
apt.benjaminshen.com
firebaseapp.com
agent.getmytravel.in
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
scrolldemo.tk
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
Certificate
The complete raw certificate details for www.gereedschapapp.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIQPvk5Q6mSsHU19gx1YjwRnzANBgkqhkiG9w0BAQsFADB3 MQswCQYDVQQGEwJOTDEcMBoGA1UEChMTVHJ1c3QgUHJvdmlkZXIgQi5WLjEdMBsG A1UECxMURG9tYWluIFZhbGlkYXRlZCBTU0wxKzApBgNVBAMTIlRydXN0IFByb3Zp ZGVyIEIuVi4gRFYgU1NMIENBIC0gRzIwHhcNMTcwMjIxMDAwMDAwWhcNMTgwMjIx MjM1OTU5WjAgMR4wHAYDVQQDDBV3d3cuZ2VyZWVkc2NoYXBhcHAubmwwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC+5QxSSbjfiZQ4m6HdyCGWAHreyyG/ KLY3C2l28wttAcL+ZCA0AWYO8B7AtioSlY5wZKhK2AXaPI+UPUtXYLHRhlIpt3lL O219IZTBOaH6ppPHVT8KgAVpN9QD1ZGO5/9lwsbP06i+OwgPFthz29D0hLU1sMov MfFxIBRVKIXAkG4zTY/QXUMRDxV2LRVVCDF9vt1i5NINL6W+qhi6c7hhK3bhU06N enUb4WgzUGI63MV0E+K2ysITAZyrb/0BrNYaOHUAakYBYHtaSDsilsFl3FSawJ8Z N3lgTqgI15x1FucW6qwQdVTlQXfXd4sMoX/J0HNK9w25uL4fkKNVH6L/pDqEn/46 FyuXp7Y2elP/+3mFIpwyOlVrpU5fes1H9TjbLNeF+79f7Fwhin6hclY3X8sPQYGj yMJGo1McnGDxqlm/txdw8XfmWIXHi6omjy03zuICYLOfiDgy6cE4f6F+Rji2w24I K9eD+kIV9QC5hyHR1qWH6XFqKKZ/wpInCcrCFX7X7YvQCgNYrHBxX4aOk314LFyA vYh56mriv4pq5hN2+MzEU38BwgES+ICLi4NsBX1msXdWy9OfEwj/WA8kfYJkIQIB fIdjTLky8c2bUTaGJf0o8KrhGZ3iDIqOg1rEpdtIdGuGvD0nM7592m0/3IXsbvt+ Ju6gDKHIeBijzwIDAQABo4ICSjCCAkYwMwYDVR0RBCwwKoIVd3d3LmdlcmVlZHNj aGFwYXBwLm5sghFnZXJlZWRzY2hhcGFwcC5ubDAJBgNVHRMEAjAAMFcGA1UdHwRQ ME4wTKBKoEiGRmh0dHA6Ly90cnVzdHByb3ZpZGVyLWNybC5kaWdpdGFsY2VydHZh bGlkYXRpb24uY29tL3RydXN0cHJvdmlkZXJnMi5jcmwwgZ0GA1UdIASBlTCBkjCB jwYGZ4EMAQIBMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5j b20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0 cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2Fs MB8GA1UdIwQYMBaAFNja79jgrHFxAt7mYvrP/EA7+6BSMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgaUGCCsGAQUFBwEBBIGY MIGVMD8GCCsGAQUFBzABhjNodHRwOi8vdHJ1c3Rwcm92aWRlci1vY3NwLmRpZ2l0 YWxjZXJ0dmFsaWRhdGlvbi5jb20wUgYIKwYBBQUHMAKGRmh0dHA6Ly90cnVzdHBy b3ZpZGVyLWFpYS5kaWdpdGFsY2VydHZhbGlkYXRpb24uY29tL3RydXN0cHJvdmlk ZXJnMi5jcnQwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB ACG2KvsUdti18xFh+tYS1NGQs51r8p0up8FOdbG50T4DnMywRbJ3SfhvfLiIc8tm iT+TILteSteH2lxg2q7Fcix30ccMuwGdk8eiDo71py49d3Sm/u5xqvlE2O0Oqw21 dzKZAcFDCv5BamNuOC2IMFUOlEMWj1Oe9hbJIdsCvbKAqZiTIAweAKyifyuVXBfZ TXkTSp5/VdTS5aoYbgrnx31r2RSSUWsZ/UsxpVMVuNM6YAm0vrBmSHe93t4EYTRi FquEevWZDk/7DAdyQDKGh+Ynl5KpZCMiyqiNe+n2m4iHunc7B1VXg1TzPBnUnGS1 Jti5JnuVfLQeftoGbDAb+Ek= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvuUMUkm434mUOJuh3cgh lgB63sshvyi2NwtpdvMLbQHC/mQgNAFmDvAewLYqEpWOcGSoStgF2jyPlD1LV2Cx 0YZSKbd5SzttfSGUwTmh+qaTx1U/CoAFaTfUA9WRjuf/ZcLGz9OovjsIDxbYc9vQ 9IS1NbDKLzHxcSAUVSiFwJBuM02P0F1DEQ8Vdi0VVQgxfb7dYuTSDS+lvqoYunO4 YSt24VNOjXp1G+FoM1BiOtzFdBPitsrCEwGcq2/9AazWGjh1AGpGAWB7Wkg7IpbB ZdxUmsCfGTd5YE6oCNecdRbnFuqsEHVU5UF313eLDKF/ydBzSvcNubi+H5CjVR+i /6Q6hJ/+Ohcrl6e2NnpT//t5hSKcMjpVa6VOX3rNR/U42yzXhfu/X+xcIYp+oXJW N1/LD0GBo8jCRqNTHJxg8apZv7cXcPF35liFx4uqJo8tN87iAmCzn4g4MunBOH+h fkY4tsNuCCvXg/pCFfUAuYch0dalh+lxaiimf8KSJwnKwhV+1+2L0AoDWKxwcV+G jpN9eCxcgL2Ieepq4r+KauYTdvjMxFN/AcIBEviAi4uDbAV9ZrF3VsvTnxMI/1gP JH2CZCECAXyHY0y5MvHNm1E2hiX9KPCq4Rmd4gyKjoNaxKXbSHRrhrw9JzO+fdpt P9yF7G77fibuoAyhyHgYo88CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 83706179114554555928594318266275205535 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V. DV SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-21 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.gereedschapapp.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778782509046301158438544394147664277441077766423514154254005965058004123165043142599010088057361189217754950207300306427739831552993413277173207011961883464132636499805936372554223030919769543884458880066785873603197071706328085955923467164767397398876021963431493126557685644863075977319393964261629675330396671662402324447565188734157692636814851121150510849598042549408273702380951119006298225115099232233035024967257084130226169734061808012495695851345041621864035553322082017261402695362980088726082986544556174012894920113750187733834739034898333513141764664626295355003493777165440026591714535720535831049942525067671222124519754192320715315634880179849118729233684217476195416596675182549077649018280961818279855514992031802684012690361513006476232666193008216937395071423135961953281861396247971106192302266548195167805535168824292904664615300063551161777107190832501068458703238629295448552493841371290093844096818570614456181023959105504963900074534891223562978205721333984404391364078907311502260189389333908648099448504637441291775094706451467559016182105749277055988575302176057503544369737328475460778045067452540575738624402188304010320492681771188101882656500384126819013209643430090483708432081957479800796236784591 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gereedschapapp.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gereedschapapp.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-crl.digitalcertvalidation.com/trustproviderg2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d8daefd8e0ac717102dee662facffc403bfba052 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-ocsp.digitalcertvalidation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-aia.digitalcertvalidation.com/trustproviderg2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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