okta.affirm.com
- Affirm, Inc. -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 0b:66:b0:46:46:6c:28:61:8e:94:ab:8a:e6:10:c0:af was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Affirm, Inc.
Organization:
Affirm, Inc.
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:66:b0:46:46:6c:28:61:8e:94:ab:8a:e6:10:c0:afSerial Number (int): 15154697505060951082830284513197736111
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 88:6d:9c:f5:ad:91:32:45:1f:de:8b:49:9a:a2:91:f8:6d:13:41:7b
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 34:78:37:1d:bf:24:9e:29:97:e7:ad:7f:99:26:8d:91:25:85:4d:c7
Fingerprint (sha256): 15:bb:c9:87:c4:3b:c0:dd:54:2f:f1:14:0e:30:44:98:01:79:22:a7:18:bb:30:fa:ee:21:77:a6:f1:4d:21:52
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate okta.affirm.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for okta.affirm.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
okta.affirm.com
Other certificates including the domain name affirm.com
(limited to 100 certificates)
statuspage.io
au.affirm.com
appstatus.dancecapsules.merce.broadleafclients.com
cloud.e.affirm.com
sales-demo.affirm.com
appstatus.dancecapsules.merce.broadleafclients.com
appstatus.dancecapsules.merce.broadleafclients.com
status.affirm.com
cdn1.affirm.com
prospective2.shared.global.fastly.net
cdn1.au.affirm.com
prospective2.shared.global.fastly.net
cwl.status.cloudsigma.com
prospective2.shared.global.fastly.net
prospective2.shared.global.fastly.net
mailer.shop.affirm.com
education.team.affirm.com
hello.affirm.com
image.comms.caredeliveryorganization.com
demo.affirm.com
fp.affirm.com
prospective2.shared.global.fastly.net
leapfrog-ssl-40.gcs-web.com
cdn1.affirm.com
statuspage.io
prospective2.shared.global.fastly.net
statuspage.io
statuspage.io
appstatus.dancecapsules.merce.broadleafclients.com
lp.affirm.com
appstatus.dancecapsules.merce.broadleafclients.com
statuspage.io
twittertest.plusplus.app
prospective2.shared.global.fastly.net
leapfrog-ssl-40.gcs-web.com
statuspage.io
statuspage.io
statuspage.io
fp.affirm.com
prospective2.shared.global.fastly.net
image.comms.caredeliveryorganization.com
appstatus.dancecapsules.merce.broadleafclients.com
image.comms.caredeliveryorganization.com
statuspage.io
prospective2.shared.global.fastly.net
prospective2.shared.global.fastly.net
statuspage.io
statuspage.io
statuspage.io
au.affirm.com
statuspage.io
leapfrog-ssl-40.gcs-web.com
m.affirm.com
appstatus.dancecapsules.merce.broadleafclients.com
leapfrog-ssl-40.gcs-web.com
san-4-s11.tlsprovisioning.exacttarget.com
leapfrog-ssl-40.gcs-web.com
prospective2.shared.global.fastly.net
phabricator.team.affirm.com
appstatus.dancecapsules.merce.broadleafclients.com
statuspage.io
statuspage.io
statuspage.io
click.e.affirm.com
statuspage.io
prospective2.shared.global.fastly.net
prospective2.shared.global.fastly.net
statuspage.io
statuspage.io
mhdocs.affirm.com
static-ip-mtls.affirm.com
static-ip-mtls.sandbox.affirm.com
freelancer.plusplus.app
mi.affirm.com
affirm.plusplus.app
appstatus.dancecapsules.merce.broadleafclients.com
*.affirm.com
image.comms.caredeliveryorganization.com
lp.affirm.com
hello.affirm.com
lp.affirm.com
statuspage.io
status.affirm.com
statuspage.io
appstatus.dancecapsules.merce.broadleafclients.com
prospective2.shared.global.fastly.net
appstatus.dancecapsules.merce.broadleafclients.com
okta.affirm.com
statuspage.io
m.affirm.com
prospective2.shared.global.fastly.net
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.global-sandbox.affirm.com
statuspage.io
global-stage.affirm.com
global.affirm.com
statuspage.io
au.affirm.com
appstatus.dancecapsules.merce.broadleafclients.com
cloud.e.affirm.com
sales-demo.affirm.com
appstatus.dancecapsules.merce.broadleafclients.com
appstatus.dancecapsules.merce.broadleafclients.com
status.affirm.com
cdn1.affirm.com
prospective2.shared.global.fastly.net
cdn1.au.affirm.com
prospective2.shared.global.fastly.net
cwl.status.cloudsigma.com
prospective2.shared.global.fastly.net
prospective2.shared.global.fastly.net
mailer.shop.affirm.com
education.team.affirm.com
hello.affirm.com
image.comms.caredeliveryorganization.com
demo.affirm.com
fp.affirm.com
prospective2.shared.global.fastly.net
leapfrog-ssl-40.gcs-web.com
cdn1.affirm.com
statuspage.io
prospective2.shared.global.fastly.net
statuspage.io
statuspage.io
appstatus.dancecapsules.merce.broadleafclients.com
lp.affirm.com
appstatus.dancecapsules.merce.broadleafclients.com
statuspage.io
twittertest.plusplus.app
prospective2.shared.global.fastly.net
leapfrog-ssl-40.gcs-web.com
statuspage.io
statuspage.io
statuspage.io
fp.affirm.com
prospective2.shared.global.fastly.net
image.comms.caredeliveryorganization.com
appstatus.dancecapsules.merce.broadleafclients.com
image.comms.caredeliveryorganization.com
statuspage.io
prospective2.shared.global.fastly.net
prospective2.shared.global.fastly.net
statuspage.io
statuspage.io
statuspage.io
au.affirm.com
statuspage.io
leapfrog-ssl-40.gcs-web.com
m.affirm.com
appstatus.dancecapsules.merce.broadleafclients.com
leapfrog-ssl-40.gcs-web.com
san-4-s11.tlsprovisioning.exacttarget.com
leapfrog-ssl-40.gcs-web.com
prospective2.shared.global.fastly.net
phabricator.team.affirm.com
appstatus.dancecapsules.merce.broadleafclients.com
statuspage.io
statuspage.io
statuspage.io
click.e.affirm.com
statuspage.io
prospective2.shared.global.fastly.net
prospective2.shared.global.fastly.net
statuspage.io
statuspage.io
mhdocs.affirm.com
static-ip-mtls.affirm.com
static-ip-mtls.sandbox.affirm.com
freelancer.plusplus.app
mi.affirm.com
affirm.plusplus.app
appstatus.dancecapsules.merce.broadleafclients.com
*.affirm.com
image.comms.caredeliveryorganization.com
lp.affirm.com
hello.affirm.com
lp.affirm.com
statuspage.io
status.affirm.com
statuspage.io
appstatus.dancecapsules.merce.broadleafclients.com
prospective2.shared.global.fastly.net
appstatus.dancecapsules.merce.broadleafclients.com
okta.affirm.com
statuspage.io
m.affirm.com
prospective2.shared.global.fastly.net
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.global-sandbox.affirm.com
statuspage.io
global-stage.affirm.com
global.affirm.com
statuspage.io
Certificate
The complete raw certificate details for okta.affirm.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGszCCBZugAwIBAgIQC2awRkZsKGGOlKuK5hDArzANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjEwMjgwMDAwMDBa Fw0yMzEwMjgyMzU5NTlaMGsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9y bmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRUwEwYDVQQKEwxBZmZpcm0sIElu Yy4xGDAWBgNVBAMTD29rdGEuYWZmaXJtLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMuCVHgwxTBvDUNUtDKEOtKbAvU7Rs7dDLprJOpMgoAplgmE ZI6zBKGzb4Jfy+n9ealqLZ85t8wQcS3RC/yeJF8jKwvCna2dT8t1tixqwwI025Pu /llVolgIncNWK/bp/vih8hI3/bstXMWxPZGSZ+WrktFDBWJev12iwkzbQa2nvGqc 4Tyjr/Jc4V1BhL/jzYWtYsHPcGXTtFK+2wNvmgK4KpwX5Bqc9Eim2sq08fL+9BH1 WO2eD3eGu432v6XqM9ItbggeyfqB5gUwY21i7rjHCaJu1czEZI0hgNrZNiwIoI5T UvcmGlCxAOmb9ro1csb2cTq8iRAlkZnzgCLV+vkCAwEAAaOCA20wggNpMB8GA1Ud IwQYMBaAFLdrouqoqoSMeeq02g+YssWVdrn0MB0GA1UdDgQWBBSIbZz1rZEyRR/e i0maopH4bRNBezAaBgNVHREEEzARgg9va3RhLmFmZmlybS5jb20wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBjwYDVR0fBIGH MIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNS U0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2Vy dC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMD4GA1UdIAQ3 MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQu Y29tL0NQUzB/BggrBgEFBQcBAQRzMHEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw LmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0cDovL2NhY2VydHMuZGlnaWNl cnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS0xLmNydDAJBgNVHRME AjAAMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdQDoPtDaPvUGNTLnVyi8iWvJ A9PL0RFr7Otp4Xd9bQa9bgAAAYQfFld3AAAEAwBGMEQCIGLxTFOqbbj4iNaUzAYt F+svsviNjqIgxL3/5pWHSOMtAiAAt5V2k6pixs9CFSxUBmknWvbOfwWcgIm3jSyQ yOhvCwB1ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWaAAABhB8WV10A AAQDAEYwRAIgUmQWUclVCJnW7kkht2vMd74ZJLn9OdZ0Hni7P8Q1mL8CIDPFM1jU 65eW43n2vmnEa9WU4aAi23lwHD+HDRdCb8NHAHYAtz77JN+cTbp18jnFulj0bF38 Qs96nzXEnh0JgSXttJkAAAGEHxZXLgAABAMARzBFAiBgiq+NIB3YWQBbr4hN4sXw E2gim4ZRFzQ0vHFUOkPfQAIhANiEV7yC5r+5R67F/5NGysnA7xTQlDnp94ysZ1XI It5xMA0GCSqGSIb3DQEBCwUAA4IBAQBjab0R5YeBzspYlmXHNpVK1BOHoLTDW+Zz bNg8P66VDbwNBimT1IaWfQJperfBah6ZqK6RFjYcgwbG+YwVaRWjKjP1/DwPx01x OS169hLZBv35wHELgQYuFJCcA96vvOCk45/VjInZvEZocOu32BVa/klN6Pnhl+Dj pOrKdagiKNwtg7SJ9nQbyTSFFZieOBzaqxU6tOenhYd8XWW899AF+gSXsVG2q4Y/ 4hG8cE9265mxbcmUuvUGp2dV9ZLT/ldi5cWgxLWcfxGzhklS26tepBgYR+qnO9gZ ZQG8qpuRvEvzqgfYejrvkHBrlseYehn4Xwy/3fwRtUjFeZEAWiOS -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4JUeDDFMG8NQ1S0MoQ6 0psC9TtGzt0Mumsk6kyCgCmWCYRkjrMEobNvgl/L6f15qWotnzm3zBBxLdEL/J4k XyMrC8KdrZ1Py3W2LGrDAjTbk+7+WVWiWAidw1Yr9un++KHyEjf9uy1cxbE9kZJn 5auS0UMFYl6/XaLCTNtBrae8apzhPKOv8lzhXUGEv+PNha1iwc9wZdO0Ur7bA2+a ArgqnBfkGpz0SKbayrTx8v70EfVY7Z4Pd4a7jfa/peoz0i1uCB7J+oHmBTBjbWLu uMcJom7VzMRkjSGA2tk2LAigjlNS9yYaULEA6Zv2ujVyxvZxOryJECWRmfOAItX6 +QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15154697505060951082830284513197736111 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Affirm, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'okta.affirm.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25690644006178693914903098307569678126228148148698270032910632504657000041967191567782325080805009944563202229103422594139748177919824387114737655713893530626079892811444554648217955853221946196629255070062292150679776421988051775801608767588476121782626967330028544451502797378525262784347422184891291705102045001169140868365998755516977673691751784486109469249458673829626874000631405029520920748245406362305207856611150716428750687862387587267535315789433017517103757920098353182787451532863355084695497069439654663812855425562035520582459378896378261147595265585611878097789577479182364809237334301468021476424441 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 886d9cf5ad9132451fde8b499aa291f86d13417b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okta.affirm.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 006369bd11e58781ceca589665c736954ad41387a0b4c35be6736cd83c3fae950dbc0d062993d486967d02697ab7c16a1e99a8ae9116361c8306c6f98c156915a32a33f5fc3c0fc74d71392d7af612d906fdf9c0710b81062e14909c03deafbce0a4e39fd58c89d9bc466870ebb7d8155afe494de8f9e197e0e3a4eaca75a82228dc2d83b489f6741bc9348515989e381cdaab153ab4e7a785877c5d65bcf7d005fa0497b151b6ab863fe211bc704f76eb99b16dc994baf506a76755f592d3fe5762e5c5a0c4b59c7f11b3864952dbab5ea4181847eaa73bd8196501bcaa9b91bc4bf3aa07d87a3aef90706b96c7987a19f85f0cbfddfc11b548c57991005a2392