*.teslamotors.com
- Tesla Motors, Inc. -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 01:af:55:c7:ce:a1:e1:2d:d2:7c:9e:8b:e6:d6:70:53 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Tesla Motors, Inc.
Organization:
Tesla Motors, Inc.
Organization unit: Traffic Engineering
Organization unit: Traffic Engineering
State / Province:
California
Locality: Palo Alto
Country: US
Locality: Palo Alto
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:af:55:c7:ce:a1:e1:2d:d2:7c:9e:8b:e6:d6:70:53Serial Number (int): 2239619781198773896370200959822229587
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 90:b1:16:78:78:3f:de:ae:15:eb:f3:e4:38:af:d6:78:96:2c:8f:ae
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): cd:9b:cb:d4:79:f0:ed:c8:2b:86:b8:87:f6:fd:0e:d5:c3:02:20:2f
Fingerprint (sha256): 17:12:be:30:00:ca:97:55:3e:d4:4a:40:41:1c:38:15:9c:ac:7e:23:5a:23:22:a0:08:36:60:8a:51:3a:e7:3c
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate *.teslamotors.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.teslamotors.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.teslamotors.com
teslamotors.com
teslamotors.com
Other certificates including the domain name teslamotors.com
(limited to 100 certificates)
vehicle-files.teslamotors.com
*.teslamotors.com
toolbox.teslamotors.com
vehicle-files.teslamotors.com
shop.eu.teslamotors.com
sp.teslamotors.com
akamaisecure.qualtrics.com
VUS-W10TAX-002.teslamotors.com
vehicle-files.teslamotors.com
bitlocker.teslamotors.com
*.teslamotors.com
vehicle-files.teslamotors.com
*.teslamotors.com
*.teslamotors.com
imail.teslamotors.com
vehicle-files.teslamotors.com
test01.clearpass.teslamotors.com
test-ap.clearpass.teslamotors.com
*.teslamotors.com
ilt.teslamotors.com
vpn.teslamotors.com
vehicle-files.teslamotors.com
cnvpn.teslamotors.com
vehicle-files.teslamotors.com
www.teslamotors.com
test01.clearpass.teslamotors.com
plcvpn.teslamotors.com
*.teslamotors.com
vehicle-files.teslamotors.com
streaming.vn.teslamotors.com
akamaisecure.qualtrics.com
*.teslamotors.com
jss-retail.teslamotors.com
*.teslamotors.com
testcert1.teslamotors.com
*.artifactory.teslamotors.com
vehicle-files.teslamotors.com
vehicle-files.teslamotors.com
shop.eu.teslamotors.com
xmail.teslamotors.com
*.artifactory.teslamotors.com
*.teslamotors.com
*.teslamotors.com
testcert3.teslamotors.com
signaling.dev.teslamotors.com
*.teslamotors.com
www.teslamotors.com
www.teslamotors.com
vehicle-files.teslamotors.com
neovi3.teslamotors.com
*.teslamotors.com
*.testcert2.teslamotors.com
jss-retail.teslamotors.com
*.teslamotors.com
cnvpn.teslamotors.com
sso-dec.teslamotors.com
akamaisecure.qualtrics.com
fleet-api.teslamotors.com
vehicle-files.teslamotors.com
vehicle-files.teslamotors.com
*.testcert2.teslamotors.com
vehicle-files.teslamotors.com
neovi-vpn.teslamotors.com
test-ap.clearpass.teslamotors.com
shop.eu.teslamotors.com
sjc02p1purfs103.teslamotors.com
vehicle-files.teslamotors.com
ukmail.teslamotors.com
*.dev.teslamotors.com
*.teslamotors.com
eumobility.teslamotors.com
*.teslamotors.com
vehicle-files.teslamotors.com
*.teslamotors.com
vehicle-files.teslamotors.com
*.teslamotors.com
epc.teslamotors.com
owner-api.teslamotors.com
vehicle-files.teslamotors.com
securemail.teslamotors.com
*.teslamotors.com
vpn.teslamotors.com
vehicle-files.teslamotors.com
*.teslamotors.com
cn.auth.teslamotors.com
owner-api.teslamotors.com
suppliers.teslamotors.com
*.teslamotors.com
us.auth.teslamotors.com
*.teslamotors.com
vehicle-files.teslamotors.com
sjc18-rpi-wlc-lab.teslamotors.com
mytadmin.teslamotors.com
sjc02p1purfs01.teslamotors.com
vehicle-files.teslamotors.com
sjc04p2autdb2.teslamotors.com
*.teslamotors.com
tel.vn.teslamotors.com
origin-www45.teslamotors.com
test01.clearpass.teslamotors.com
*.teslamotors.com
toolbox.teslamotors.com
vehicle-files.teslamotors.com
shop.eu.teslamotors.com
sp.teslamotors.com
akamaisecure.qualtrics.com
VUS-W10TAX-002.teslamotors.com
vehicle-files.teslamotors.com
bitlocker.teslamotors.com
*.teslamotors.com
vehicle-files.teslamotors.com
*.teslamotors.com
*.teslamotors.com
imail.teslamotors.com
vehicle-files.teslamotors.com
test01.clearpass.teslamotors.com
test-ap.clearpass.teslamotors.com
*.teslamotors.com
ilt.teslamotors.com
vpn.teslamotors.com
vehicle-files.teslamotors.com
cnvpn.teslamotors.com
vehicle-files.teslamotors.com
www.teslamotors.com
test01.clearpass.teslamotors.com
plcvpn.teslamotors.com
*.teslamotors.com
vehicle-files.teslamotors.com
streaming.vn.teslamotors.com
akamaisecure.qualtrics.com
*.teslamotors.com
jss-retail.teslamotors.com
*.teslamotors.com
testcert1.teslamotors.com
*.artifactory.teslamotors.com
vehicle-files.teslamotors.com
vehicle-files.teslamotors.com
shop.eu.teslamotors.com
xmail.teslamotors.com
*.artifactory.teslamotors.com
*.teslamotors.com
*.teslamotors.com
testcert3.teslamotors.com
signaling.dev.teslamotors.com
*.teslamotors.com
www.teslamotors.com
www.teslamotors.com
vehicle-files.teslamotors.com
neovi3.teslamotors.com
*.teslamotors.com
*.testcert2.teslamotors.com
jss-retail.teslamotors.com
*.teslamotors.com
cnvpn.teslamotors.com
sso-dec.teslamotors.com
akamaisecure.qualtrics.com
fleet-api.teslamotors.com
vehicle-files.teslamotors.com
vehicle-files.teslamotors.com
*.testcert2.teslamotors.com
vehicle-files.teslamotors.com
neovi-vpn.teslamotors.com
test-ap.clearpass.teslamotors.com
shop.eu.teslamotors.com
sjc02p1purfs103.teslamotors.com
vehicle-files.teslamotors.com
ukmail.teslamotors.com
*.dev.teslamotors.com
*.teslamotors.com
eumobility.teslamotors.com
*.teslamotors.com
vehicle-files.teslamotors.com
*.teslamotors.com
vehicle-files.teslamotors.com
*.teslamotors.com
epc.teslamotors.com
owner-api.teslamotors.com
vehicle-files.teslamotors.com
securemail.teslamotors.com
*.teslamotors.com
vpn.teslamotors.com
vehicle-files.teslamotors.com
*.teslamotors.com
cn.auth.teslamotors.com
owner-api.teslamotors.com
suppliers.teslamotors.com
*.teslamotors.com
us.auth.teslamotors.com
*.teslamotors.com
vehicle-files.teslamotors.com
sjc18-rpi-wlc-lab.teslamotors.com
mytadmin.teslamotors.com
sjc02p1purfs01.teslamotors.com
vehicle-files.teslamotors.com
sjc04p2autdb2.teslamotors.com
*.teslamotors.com
tel.vn.teslamotors.com
origin-www45.teslamotors.com
test01.clearpass.teslamotors.com
Certificate
The complete raw certificate details for *.teslamotors.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgIQAa9Vx86h4S3SfJ6L5tZwUzANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xOTAxMTcwMDAwMDBaFw0yMTAyMDMxMjAwMDBa MIGNMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTESMBAGA1UEBxMJ UGFsbyBBbHRvMRswGQYDVQQKExJUZXNsYSBNb3RvcnMsIEluYy4xHDAaBgNVBAsT E1RyYWZmaWMgRW5naW5lZXJpbmcxGjAYBgNVBAMMESoudGVzbGFtb3RvcnMuY29t MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxzHtj2bZZl3gANKHM8z aBCJL7gfF520jmhsWfndHXVLehLgjtYN1MP7ZGHXgERKJ6Jsfj/fcpBqaZslW5kr cA0KQedPGtoDW9RGg0N50USIrjsWG6TBvx3N0NZtfLbs673nmLyf5yvlGuCr1B+p if3vIof+aLD7XhoJky0fxhr26iIpzLPJ0eKn6Rf8zHfcUJJh4gvOwoWF6YvkEDTa /FrnT9ivNDyFqu7MdS98d4UC7fpnk7ouWBeuCfOoPFbSUJQboL+FNFjR/W79aj0h xx2k4PauVQuOGPFhXbp1cpecJswylw4NgcRr/Yk3w0MIXYZtP3mzNjOc1ZfZ4C9U jQIDAQABo4ICEDCCAgwwHwYDVR0jBBgwFoAUUWj/kK8CB3U8zNllZGKiErhZcjsw HQYDVR0OBBYEFJCxFnh4P96uFevz5Div1niWLI+uMC0GA1UdEQQmMCSCESoudGVz bGFtb3RvcnMuY29tgg90ZXNsYW1vdG9ycy5jb20wDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5o dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYuY3JsMDSg MqAwhi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYu Y3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBz Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMIGDBggrBgEFBQcBAQR3 MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBNBggrBgEF BQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkhp Z2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5 AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmyWjoALLC1IQOJuTAKUpR4f /vdNib8iE88S7DXvxNcdXRvdhKrfI36HRF91xPiR7j22GMKl3hsX4FgvJWnx/AB4 zSPFf8QOI57NiGiOieBT2a51zgbBeFz9DlDw4igRHkkd/0JqiEDe7wBZy7Ufa4d/ 4RxkUFR0nWMcVvoGG2tvYKsOmRnkI61Yg8EkKG3TtD6Ij9Y40L+89bWeNTJHHVaF SgTGpe2wsDeQkl3to9UyEniu/xiP7PWIiCzLIAA0sa7iRdJ2dJZFJEEUxGR8+1YT RlRnXX3QB7wL9frBxF1SqX74W6wZg8zAJZxNVAAmEOkes/g2Q3L0uyJjw92rjw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxzHtj2bZZl3gANKHM8z aBCJL7gfF520jmhsWfndHXVLehLgjtYN1MP7ZGHXgERKJ6Jsfj/fcpBqaZslW5kr cA0KQedPGtoDW9RGg0N50USIrjsWG6TBvx3N0NZtfLbs673nmLyf5yvlGuCr1B+p if3vIof+aLD7XhoJky0fxhr26iIpzLPJ0eKn6Rf8zHfcUJJh4gvOwoWF6YvkEDTa /FrnT9ivNDyFqu7MdS98d4UC7fpnk7ouWBeuCfOoPFbSUJQboL+FNFjR/W79aj0h xx2k4PauVQuOGPFhXbp1cpecJswylw4NgcRr/Yk3w0MIXYZtP3mzNjOc1ZfZ4C9U jQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2239619781198773896370200959822229587 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-03 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Palo Alto' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tesla Motors, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Traffic Engineering' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.teslamotors.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23620755036997994422020925748228803349146085111623368444691143505309819941606961910544321900276932676541628126022243087858614644535682372902461496904877018101515791268887851245490092975360893265001042798537682545412769346178319386515412795194499627771248813908471996319988841511367470423790999233344346669045430056998077417351263115074257521212142019266468163486645515921924991239490529350907694063247590429925617482994830437949961234011818015815399265529290674722493808524342902035112515039719823079462079875965432019226437825557965031009605011241030431717087140759279593175230287580179595656127549422003059327718541 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 90b11678783fdeae15ebf3e438afd678962c8fae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teslamotors.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teslamotors.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00766c968e800b2c2d4840e26e4c0294a51e1ffef74d89bf2213cf12ec35efc4d71d5d1bdd84aadf237e87445f75c4f891ee3db618c2a5de1b17e0582f2569f1fc0078cd23c57fc40e239ecd88688e89e053d9ae75ce06c1785cfd0e50f0e228111e491dff426a8840deef0059cbb51f6b877fe11c645054749d631c56fa061b6b6f60ab0e9919e423ad5883c124286dd3b43e888fd638d0bfbcf5b59e3532471d56854a04c6a5edb0b03790925deda3d5321278aeff188fecf588882ccb200034b1aee245d276749645244114c4647cfb56134654675d7dd007bc0bf5fac1c45d52a97ef85bac1983ccc0259c4d54002610e91eb3f8364372f4bb2263c3ddab8f