order.covestro.com
- Covestro AG -
Issued by Corporation Service Company RSA OV SSL CA
About this certificate
This digital certificate with serial number 07:36:cc:98:de:71:4d:4b:74:58:7f:a2:88:41:45:29 was issued on by Corporation Service Company.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Covestro AG
Organization:
Covestro AG
State / Province:
Nordrhein-Westfalen
Country: DE
Country: DE
Corporation Service Company
Organization:
Corporation Service Company
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 07:36:cc:98:de:71:4d:4b:74:58:7f:a2:88:41:45:29Serial Number (int): 9589129723937784723276731568621700393
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: e3:9e:32:b1:a4:d9:ba:3f:9f:1a:01:af:2b:8e:aa:a1:17:1c:70:99
AuthorityKeyId: 38:d1:f4:0e:87:6c:16:37:1b:65:74:dd:26:ce:9e:cc:28:ac:22:1d
Fingerprint (sha1): e9:1d:50:b4:ae:c1:19:c3:ff:5a:6f:35:40:50:0e:e9:4e:8c:e0:ed
Fingerprint (sha256): 15:27:6f:0f:28:6c:bd:4c:cb:0a:6b:ad:3e:27:fb:32:fa:69:90:0b:51:76:73:52:cf:75:9b:c6:84:ff:43:36
Issuing Certificate URL: http://crt.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crl
Check the revocation status for certificate order.covestro.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for order.covestro.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
order.covestro.com
china.order.covestro.com
www.china.order.covestro.com
www.order.covestro.com
china.order.covestro.com
www.china.order.covestro.com
www.order.covestro.com
Other certificates including the domain name covestro.com
(limited to 100 certificates)
order.covestro.com
qa.service.media-assistant.covestro.com
customerday.covestro.com
app-main.easy-entry-app-qa.covestro.com
tec-p4t-p1p.covestro.com
initiativeplanner.covestro.com
pureinsights.covestro.com
www.covestro.com
www.covestro.com
corporateshop.covestro.com
commoditycatalog.covestro.com
*.preview.covestro.com
www.solutions.covestro.com
myaccess-pgh.covestro.com
catalogue.api-qa.covestro.com
cups.covestro.com
www.i4pto.covestro.com
customerday.covestro.com
mtr-qa.covestro.com
order.covestro.com
adamintellecat.covestro.com
customerday.covestro.com
new-select.covestro.com
order.covestro.com
www.pureinsights.covestro.com
extsipap.covestro.com
extsipap.covestro.com
mediahub.covestro.com
www.covestro.com
www.covestro.com
corporateshop.covestro.com
order.covestro.com
*.preview.covestro.com
vmi.covestro.com
www.mediathek.covestro.com
app-main.easy-entry-app-qa.covestro.com
etrip-cn.covestro.com
corporateshop.covestro.com
www.covestro.com
auth.optical-material-data.dev-imagio.covestro.com
api.select.covestro.com
select.covestro.com
rimgate.covestro.com
dev.identitynet.covestro.com
qa.identitynet.covestro.com
www.pac.covestro.com
adamintellecat.covestro.com
www.covestro.com
trainingportal.covestro.com
api-development.lisa-qa.covestro.com
sentry.select.covestro.com
auth.optical-material-data.dev-imagio.covestro.com
warehouse.covestro.com
www.covestro.com
em.covestro.com
proveedores.covestro.com
easy-entry-app.covestro.com
catalogue.api-qa.covestro.com
commoditycatalog.covestro.com
proveedores.covestro.com
www.sheeteurope.covestro.com
extsipde.covestro.com
www.prodin.covestro.com
pureinsights.covestro.com
trophy.covestro.com
catalogue-cognito.api-qa.covestro.com
cups.covestro.com
catalogue.api-qa.covestro.com
www.covestro.com
investor.covestro.com
apac-qa.order.covestro.com
update-manager.select.covestro.com
extsipap.covestro.com
www.covestro.com
mediahub.covestro.com
www.solutions.covestro.com
cp.covestro.com
investor.covestro.com
service.media-assistant.covestro.com
www.covestro.com
salesaid.covestro.com
logging.select.covestro.com
customerday.covestro.com
pac.covestro.com
*.p6.ta-qa.covestro.com
qa.service.media-assistant.covestro.com
docs.api.preview.select.covestro.com
smtpmx01.covestro.com
qa.media-assistant.covestro.com
investor.covestro.com
catalogue.api-qa.covestro.com
www.covestro.com
test-catalogue.api-qa.covestro.com
auth.optical-material-data.dev-imagio.covestro.com
proveedores.covestro.com
customerday.covestro.com
extsipde.covestro.com
extsipde.covestro.com
monitoring.select.covestro.com
iot-platform-qa.covestro.com
qa.service.media-assistant.covestro.com
customerday.covestro.com
app-main.easy-entry-app-qa.covestro.com
tec-p4t-p1p.covestro.com
initiativeplanner.covestro.com
pureinsights.covestro.com
www.covestro.com
www.covestro.com
corporateshop.covestro.com
commoditycatalog.covestro.com
*.preview.covestro.com
www.solutions.covestro.com
myaccess-pgh.covestro.com
catalogue.api-qa.covestro.com
cups.covestro.com
www.i4pto.covestro.com
customerday.covestro.com
mtr-qa.covestro.com
order.covestro.com
adamintellecat.covestro.com
customerday.covestro.com
new-select.covestro.com
order.covestro.com
www.pureinsights.covestro.com
extsipap.covestro.com
extsipap.covestro.com
mediahub.covestro.com
www.covestro.com
www.covestro.com
corporateshop.covestro.com
order.covestro.com
*.preview.covestro.com
vmi.covestro.com
www.mediathek.covestro.com
app-main.easy-entry-app-qa.covestro.com
etrip-cn.covestro.com
corporateshop.covestro.com
www.covestro.com
auth.optical-material-data.dev-imagio.covestro.com
api.select.covestro.com
select.covestro.com
rimgate.covestro.com
dev.identitynet.covestro.com
qa.identitynet.covestro.com
www.pac.covestro.com
adamintellecat.covestro.com
www.covestro.com
trainingportal.covestro.com
api-development.lisa-qa.covestro.com
sentry.select.covestro.com
auth.optical-material-data.dev-imagio.covestro.com
warehouse.covestro.com
www.covestro.com
em.covestro.com
proveedores.covestro.com
easy-entry-app.covestro.com
catalogue.api-qa.covestro.com
commoditycatalog.covestro.com
proveedores.covestro.com
www.sheeteurope.covestro.com
extsipde.covestro.com
www.prodin.covestro.com
pureinsights.covestro.com
trophy.covestro.com
catalogue-cognito.api-qa.covestro.com
cups.covestro.com
catalogue.api-qa.covestro.com
www.covestro.com
investor.covestro.com
apac-qa.order.covestro.com
update-manager.select.covestro.com
extsipap.covestro.com
www.covestro.com
mediahub.covestro.com
www.solutions.covestro.com
cp.covestro.com
investor.covestro.com
service.media-assistant.covestro.com
www.covestro.com
salesaid.covestro.com
logging.select.covestro.com
customerday.covestro.com
pac.covestro.com
*.p6.ta-qa.covestro.com
qa.service.media-assistant.covestro.com
docs.api.preview.select.covestro.com
smtpmx01.covestro.com
qa.media-assistant.covestro.com
investor.covestro.com
catalogue.api-qa.covestro.com
www.covestro.com
test-catalogue.api-qa.covestro.com
auth.optical-material-data.dev-imagio.covestro.com
proveedores.covestro.com
customerday.covestro.com
extsipde.covestro.com
extsipde.covestro.com
monitoring.select.covestro.com
iot-platform-qa.covestro.com
Certificate
The complete raw certificate details for order.covestro.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHXzCCBcegAwIBAgIQBzbMmN5xTUt0WH+iiEFFKTANBgkqhkiG9w0BAQwFADBn MQswCQYDVQQGEwJVUzEkMCIGA1UEChMbQ29ycG9yYXRpb24gU2VydmljZSBDb21w YW55MTIwMAYDVQQDEylDb3Jwb3JhdGlvbiBTZXJ2aWNlIENvbXBhbnkgUlNBIE9W IFNTTCBDQTAeFw0yMzExMjcwMDAwMDBaFw0yNDExMjYyMzU5NTlaMF4xCzAJBgNV BAYTAkRFMRwwGgYDVQQIExNOb3JkcmhlaW4tV2VzdGZhbGVuMRQwEgYDVQQKEwtD b3Zlc3RybyBBRzEbMBkGA1UEAxMSb3JkZXIuY292ZXN0cm8uY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLyh22S7gKrlYkRUNllJx7/6g4qCmLkz Ex5BrM9AvCGCmdzZ9nxadUklJUEaHLbtkPeKqiRF0L/Rr9vvEmt4ojP5uax0nGEq IsWIhMjyZWYerPWostgHTPc383KkQXF/6ArqpCXtCrimMMQncXWu1BENb+Eii6fR 0R0+wD9HZTq1z8ulu+ADoYH0jbw5mwcDvGrfCQPF2Zt6B7QCVU/qh4pR68fyKafs 8ywqBO6Bn8jyGMW5RnKhkd4sBklum6ISuMUB7Vo3CM7LKTHvcz1SpcSe5qZCn+xH kXQ65FcR4ebQEN/DV0IFAXuvmUz1PU5M9Wms+VbyWTlw0cbrveJZLQIDAQABo4ID jjCCA4owHwYDVR0jBBgwFoAUONH0DodsFjcbZXTdJs6ezCisIh0wHQYDVR0OBBYE FOOeMrGk2bo/nxoBryuOqqEXHHCZMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8E AjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQG CysGAQQBsjEBAgIIMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20v Q1BTMAgGBmeBDAECAjBPBgNVHR8ESDBGMESgQqBAhj5odHRwOi8vY3JsLnNlY3Rp Z28uY29tL0NvcnBvcmF0aW9uU2VydmljZUNvbXBhbnlSU0FPVlNTTENBLmNybDB/ BggrBgEFBQcBAQRzMHEwSgYIKwYBBQUHMAKGPmh0dHA6Ly9jcnQuc2VjdGlnby5j b20vQ29ycG9yYXRpb25TZXJ2aWNlQ29tcGFueVJTQU9WU1NMQ0EuY3J0MCMGCCsG AQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTCCAX0GCisGAQQB1nkCBAIE ggFtBIIBaQFnAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGM D9xGKQAABAMARzBFAiBbUJfQwenCiUgqkM3u3VsaxMr6AWhoazmhYif7oUD7zwIh APeyR86jHnTAJ6IpBcgeayFlq8VCyXooPLzzYHQe7kSUAHYAPxdLT9ciR1iUHWUc hL4NEu2QN38fhWrrwb8ohez4ZG4AAAGMD9xGUwAABAMARzBFAiAxjMyVT/slERD1 2rmZNwn6dQlvCos11jKqB4K7MiQXgAIhAJVWlC99qjhQNeOMoFBZtWLk2MZ8DDjV mGxY34jjKqcmAHUA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGM D9xGWAAABAMARjBEAiBojnDzXy2/3Uq9ppKXqkqFUfZ/aVrJz/xPDKfw7b72cwIg K7nsTwDoFOE7As3ToexzrUBucbV5drQ58tmmFqgld0UwbQYDVR0RBGYwZIISb3Jk ZXIuY292ZXN0cm8uY29tghhjaGluYS5vcmRlci5jb3Zlc3Ryby5jb22CHHd3dy5j aGluYS5vcmRlci5jb3Zlc3Ryby5jb22CFnd3dy5vcmRlci5jb3Zlc3Ryby5jb20w DQYJKoZIhvcNAQEMBQADggGBAL8CV7vTlqfUFIPF9jN9sot5xFxPy0tzPuYchfRv gxt9EfuckvLkxoNonEwDNAkkqFZtp6lI0ibmPwSh9bOAMjWrm/hIJyFql2BVxLF3 TGWT6Deka775NENr72a8da7mMgrWvChXS1HUM4oSGmjk/vqZkZthIICAyJVp5g2k iSy9ohCjERozqgeDoNmO85GZOSpc7qMq911fWpIH8Jkf72/n5Wq6dXR1tOg2N+U4 oc4+x5gGAYxufWHnHkKJSCah9qCgB0lkoUQXjovv87jusz6oXAgu5P3pWzEIEjoY Z90gaJTfZ1Mm/MHUxZhk8bJG5IGLdt3iLYI1G5eIaXh2iq0ArMpWLEowvnzePsYT +fOr2IuNd2hGjvyh2pLt36xfdCJSH54xTNYFTxMhfDDZdjTrhMIr5t8xeygt0Cq0 4wnhgkxYXfLXNNdr7W1OVkaNBPDW5Yk6UBy8cHpiCqu3xKqI37EAXrqRIpyEPcZV UZFka2a1hrEO0jcRSrYs6INTow== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLyh22S7gKrlYkRUNllJ x7/6g4qCmLkzEx5BrM9AvCGCmdzZ9nxadUklJUEaHLbtkPeKqiRF0L/Rr9vvEmt4 ojP5uax0nGEqIsWIhMjyZWYerPWostgHTPc383KkQXF/6ArqpCXtCrimMMQncXWu 1BENb+Eii6fR0R0+wD9HZTq1z8ulu+ADoYH0jbw5mwcDvGrfCQPF2Zt6B7QCVU/q h4pR68fyKafs8ywqBO6Bn8jyGMW5RnKhkd4sBklum6ISuMUB7Vo3CM7LKTHvcz1S pcSe5qZCn+xHkXQ65FcR4ebQEN/DV0IFAXuvmUz1PU5M9Wms+VbyWTlw0cbrveJZ LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9589129723937784723276731568621700393 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company RSA OV SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Covestro AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'order.covestro.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19281240386082764917862140551702540997203866323384458006946470641603664906132167470964027841361735993361941589961690600783874986685079988823734212513229887852462041329990438102132534862182251274270751397977387285741315349553191532668655260779574603836264912846344711820348777139640296425116826915605065810091162947759130519478703604761467734972207487900306533915772431780968476280737971676528380040947743782149820826425034063145174473818185344539547585105048580785537462151632902661512044454088967438487540765307242947227105135106365225619628260227665026602235467059026645659908780424932865735952890259878737648703789 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 38d1f40e876c16371b6574dd26ce9ecc28ac221d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e39e32b1a4d9ba3f9f1a01af2b8eaaa1171c7099 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.covestro.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.order.covestro.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.china.order.covestro.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.order.covestro.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (3072 bits) 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