data-airflow.braintree.tools

- PayPal, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0f:45:59:a6:dd:20:2e:28:e9:20:b3:30:10:7c:6a:dd was issued on by DigiCert Inc.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

PayPal, Inc.

Organization: PayPal, Inc.
State / Province: California
Locality: San Jose
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:45:59:a6:dd:20:2e:28:e9:20:b3:30:10:7c:6a:dd
Serial Number (int): 20298506774777434346745008887519013597
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0e:f8:83:45:ed:a8:92:5e:cd:f3:47:5e:53:d2:10:ae:34:31:43:cb
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): c8:48:60:fa:62:f4:e1:02:7d:93:de:02:ca:b3:17:53:23:2c:36:b7
Fingerprint (sha256): 18:54:9a:bd:e6:b4:b4:b1:27:a7:dc:92:15:46:01:58:b5:ed:d5:ca:4b:59:4f:8c:f1:1b:54:60:fa:21:7f:1e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate data-airflow.braintree.tools

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for data-airflow.braintree.tools

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

data-airflow.braintree.tools
data-airflow-webserver-prod.production.braintree-api.com
origin-data-airflow-webserver-prod.production.braintree-api.com
data-airflow-webserver-prod-ap-northeast-1.production.braintree-api.com
data-airflow-webserver-prod-ap-northeast-2.production.braintree-api.com
data-airflow-webserver-prod-ap-south-1.production.braintree-api.com
data-airflow-webserver-prod-ap-southeast-1.production.braintree-api.com
data-airflow-webserver-prod-ap-southeast-2.production.braintree-api.com
data-airflow-webserver-prod-ca-central-1.production.braintree-api.com
data-airflow-webserver-prod-eu-central-1.production.braintree-api.com
data-airflow-webserver-prod-eu-west-1.production.braintree-api.com
data-airflow-webserver-prod-eu-west-2.production.braintree-api.com
data-airflow-webserver-prod-sa-east-1.production.braintree-api.com
data-airflow-webserver-prod-us-east-1.production.braintree-api.com
data-airflow-webserver-prod-us-east-2.production.braintree-api.com
data-airflow-webserver-prod-us-west-1.production.braintree-api.com
data-airflow-webserver-prod-us-west-2.production.braintree-api.com
data-airflow-webserver-dataprod.data-production.braintree-api.com
origin-data-airflow-webserver-dataprod.data-production.braintree-api.com
data-airflow-webserver-dataprod-ap-northeast-1.data-production.braintree-api.com
data-airflow-webserver-dataprod-ap-northeast-2.data-production.braintree-api.com
data-airflow-webserver-dataprod-ap-south-1.data-production.braintree-api.com
data-airflow-webserver-dataprod-ap-southeast-1.data-production.braintree-api.com
data-airflow-webserver-dataprod-ap-southeast-2.data-production.braintree-api.com
data-airflow-webserver-dataprod-ca-central-1.data-production.braintree-api.com
data-airflow-webserver-dataprod-eu-central-1.data-production.braintree-api.com
data-airflow-webserver-dataprod-eu-west-1.data-production.braintree-api.com
data-airflow-webserver-dataprod-eu-west-2.data-production.braintree-api.com
data-airflow-webserver-dataprod-sa-east-1.data-production.braintree-api.com
data-airflow-webserver-dataprod-us-east-1.data-production.braintree-api.com
data-airflow-webserver-dataprod-us-east-2.data-production.braintree-api.com
data-airflow-webserver-dataprod-us-west-1.data-production.braintree-api.com
data-airflow-webserver-dataprod-us-west-2.data-production.braintree-api.com

Other certificates including the domain name braintree.tools

(limited to 100 certificates)
briskqa.braintree.tools
prodconf.braintree.tools
jira.braintree.tools
graphite.qwt.braintree.tools
graphite.qwt.braintree.tools
tugboat.braintree.tools
disputin.sandbox.braintree.tools
puppetdb.braintree.tools
*.cpair.dev.braintree.tools
brisk.braintree.tools
tugboat.sand.braintree.tools
environmentalist.braintree.tools
brisk.sandbox.braintree.tools
tugboat.braintree.tools
disputes-panel.braintree.tools
graphite.qa.braintree.tools
buildtree.braintree.tools
disputes-panel.braintree.tools
jira.braintree.tools
data-airflow.sand.braintree.tools
*.qa2.braintree.tools
artifactory-dev.braintree.tools
artifactory-dev.braintree.tools
graphite.qa.braintree.tools
funding.chi.braintree.tools
brainiac.braintree.tools
tugboat.braintree.tools
jira.braintree.tools
bazaar.braintree.tools
bazaar.braintree.tools
*.us-west-2.cpair.dev.braintree.tools
data-airflow.braintree.tools
*.us-west-1.cpair.dev.braintree.tools
k8s-dashboard-qa-us-west-2.braintree.tools
*.braintree.tools
k8s-dashboard-blue-qwt.braintree.tools
k8s-dashboard.sandbox.braintree-api.com
k8s-dashboard-blue-sand.braintree.tools
puppetdb.braintree.tools
k8s-dashboard-blue-stc.braintree.tools
prodconf.braintree.tools
k8s-dashboard.data-production.braintree-api.com
funding.chi.braintree.tools
data-airflow.sand.braintree.tools
disputin.braintree.tools
ops-panel.braintree.tools
*.cpair.dev.braintree.tools
puppetdb.braintree.tools
brisk.braintree.tools
disputes-panel.braintree.tools
briskqa-http-prod-us-west-2.production.braintree-api.com
event-sink-prod.braintree.tools
graphite.qwt.braintree.tools
graphite.sand.braintree.tools
ghost.braintree.tools
graphite.qa.braintree.tools
bazaar.sandbox.braintree.tools
artifactory-dev.braintree.tools
graphite.sand.braintree.tools
prodconf.braintree.tools
prodconf-dev.braintree.tools
briskqa.braintree.tools
dockerhub.braintree.tools
*.stc.braintree.tools
ghost.braintree.tools
ghost.braintree.tools
graphite.qwt.braintree.tools
brisk.braintree.tools
c3.chi.braintreepayments.com
k8s-dashboard.dev.braintree-api.com
snippets.braintree.tools
disputin.sandbox.braintree.tools
data-airflow-flower.braintree.tools
jenkins.jenkins-sand.braintree-api.com
*.cpair.dev.braintree.tools
data-airflow.braintree.tools
knowledge.braintree.tools
tugboat.braintree.tools
graphite.qa.braintree.tools
*.us-east-2.cpair.dev.braintree.tools
disputes-panel.braintree.tools
graphite.sand.braintree.tools
nabstatements.sandbox.braintree.tools
jenkins.jenkins-prod.braintree-api.com
nabstatements.braintree.tools
knowledge.braintree.tools
ghost.braintree.tools
reporting-taskworker-flower.braintree.tools
tugboat.braintree.tools
*.us-east-1.cpair.dev.braintree.tools
data-airflow.sand.braintree.tools
*.qa.braintree.tools
prodconf-dev.braintree.tools
graphite.qwt.braintree.tools
k8s-dashboard.production.braintree-api.com
k8s-dashboard-prod-us-west-2.braintree.tools
grafana.braintree.tools
jenkins.jenkins-prod.braintree-api.com
ops-panel.braintree.tools
disputes-panel.sandbox.braintree.tools

Certificate

The complete raw certificate details for data-airflow.braintree.tools in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxJNMrMVGL01wDhktnEi
UIHh7eOWAmIxelqbql3gDH2HmqOx13IvIRShtBhBvmN2o54gSy9PkmDH/GZh1h/l
YJm0LbwvjinbBAd/lDtYODNYrSThQC4atUZC91PK6SPoasuKXmx7lz7uWAY+TviH
PUAncmWhCDySQSQe/etRCOkeNdPEl06T7CZJJ37y7hx3+wFagWvtpRtVyZaGYdSh
/APaXUfnhBJRxA9eAAJ7wIrPSF/bD7anTmtOVMu2ndYja5VJH6BB54zIAnTDMf3c
CQBTCSVl4S6gBGMHCOHBwM+WRbzrubem/2D1lvi6R+6TV2uKU0/jUaUjU/hBpqZN
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20298506774777434346745008887519013597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PayPal, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'data-airflow.braintree.tools'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24120541081580570862177244962769270494673957677801922229401318847009648794139028126353602528462337152546984961586100661264126736489734396326894545518009099472396818356508392339033484098443646622437742673941723795637954885809268702192149874545639718248882704013748929611752790195557066612623190557016214264074300850463849380670075772273622732325497950398054188086848680521358021778029675473289495905544195321045345373192295727689423413882999987829800205075463423501256851332983410748778721830389232621203829966760780255689161122934761763157492726595617941959836673191093943352942027180407986820855231915132779409853701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ef88345eda8925ecdf3475e53d210ae343143cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2382 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow.braintree.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-prod.production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-data-airflow-webserver-prod.production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-prod-ap-northeast-1.production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-prod-ap-northeast-2.production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-prod-ap-south-1.production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-prod-ap-southeast-1.production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-prod-ap-southeast-2.production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-prod-ca-central-1.production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-prod-eu-central-1.production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-prod-eu-west-1.production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-prod-eu-west-2.production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-prod-sa-east-1.production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-prod-us-east-1.production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-prod-us-east-2.production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-prod-us-west-1.production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-prod-us-west-2.production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-dataprod.data-production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-data-airflow-webserver-dataprod.data-production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-dataprod-ap-northeast-1.data-production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-dataprod-ap-northeast-2.data-production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-dataprod-ap-south-1.data-production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-dataprod-ap-southeast-1.data-production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-dataprod-ap-southeast-2.data-production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-dataprod-ca-central-1.data-production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-dataprod-eu-central-1.data-production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-dataprod-eu-west-1.data-production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-dataprod-eu-west-2.data-production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-dataprod-sa-east-1.data-production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-dataprod-us-east-1.data-production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-dataprod-us-east-2.data-production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-dataprod-us-west-1.data-production.braintree-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-airflow-webserver-dataprod-us-west-2.data-production.braintree-api.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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