mychart.montefiore.org
- Montefiore Medical Center -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0e:2e:17:fd:99:34:a8:d8:4f:ae:ba:8e:e3:17:28:bb was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Montefiore Medical Center
Organization:
Montefiore Medical Center
Organization unit: Epic Prod
Organization unit: Epic Prod
State / Province:
New York
Locality: Bronx
Country: US
Locality: Bronx
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:2e:17:fd:99:34:a8:d8:4f:ae:ba:8e:e3:17:28:bbSerial Number (int): 18848524184042292381956193579905263803
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: a4:48:b4:61:a8:0c:bf:53:e7:7d:ca:b5:e6:cc:4c:ab:b3:47:0d:50
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 5b:91:af:d8:45:cd:de:a0:1c:ce:31:ce:76:17:0d:92:8c:89:fe:72
Fingerprint (sha256): 18:65:d1:08:0a:ed:d8:8c:50:0a:a6:eb:e0:14:ca:09:1f:80:87:f4:51:fe:84:1f:21:9e:26:df:e5:66:70:6e
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate mychart.montefiore.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mychart.montefiore.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mychart.montefiore.org
Other certificates including the domain name montefiore.org
(limited to 100 certificates)
Montefiore.org
vetlredcapdb04.montefiore.org
cewepic.montefiore.org
secureaccess.montefiore.org
es2013.montefiore.org
mail.montefiore.org
mychart.montefiore.org
testeyecarepacs.montefiore.org
epicecp8.montefiore.org
aspera.einsteinmed.org
jhltreksdev.montefiore.org
epfmobile.montefiore.org
soapapps.montefiore.org
mobile.montefiore.org
shares.einsteinmed.org
montefiore.org
xendirectordr.montefiore.org
welcomeweb.montefiore.org
vpn.montefiore.org
magicweb.montefiore.org
mail.montefiore.org
odcepivupecp04.montefiore.org
CPNremote.montefiore.org
epicdrrptsvc.montefiore.org
careers.montefiore.org
ybcccwc.montefiore.org
vetlredcapfe10.montefiore.org
verification.montefiore.org
timecapture.montefiore.org
secureaccess.montefiore.org
timecapture.montefiore.org
odcepivutecp02.montefiore.org
pacswebtest.montefiore.org
xendirectordr.montefiore.org
portal.montefiore.org
print.einsteinmed.org
ps360mobile.montefiore.org
ttxt.montefiore.org
carelink.montefiore.org
whsepicsro.montefiore.org
mail.montefiore.org
www.montefiore.org
www.montefiore.org
clg.montefiore.org
clg.montefiore.org
mychart.montefiore.org
portal.montefiore.org
ctmsstg.montefiore.org
mail.montefiore.org
www.einsteinmed.org
YBCCCP8.MONTEFIORE.ORG
cewepic.montefiore.org
clg.montefiore.org
vpn.montefiore.org
nsauth.montefiore.org
rifc2010.montefiore.org
YNKSV1APXCL02P.montefiore.org
printers.montefiore.org
timecapture.montefiore.org
odcepivupdbasvc.montefiore.org
secureaccess.montefiore.org
mobilepacs.montefiore.org
radiology.montefiore.org
citrixpoc.montefiore.org
odcepivupprdsvc.montefiore.org
ecp10.montefiore.org
mobilepacs.montefiore.org
servicedesk.montefiore.org
mmcnsauth.montefiore.org
mail.montefiore.org
gwn.montefiore.org
medstaffmeeting.montefiore.org
careers.montefiore.org
crma.montefiore.org
mail.montefiore.org
sapfmqas.montefiore.org
remote.montefiore.org
gwwa02.montefiore.org
hhavpn.montefiore.org
mmcnsauth.montefiore.org
amis.montefiore.org
ykepisc.montefiore.org
bahnhhtraining.montefiore.org
portfolio.montefiore.org
ctxnslab1.montefiore.org
portal.montefiore.org
portal.montefiore.org
testeyecarepacs.montefiore.org
carelink.montefiore.org
npce.montefiore.org
Bahnhh.montefiore.org
gwn.montefiore.org
odcepivuprptsvc.montefiore.org
pay.montefiore.org
nsauth.montefiore.org
bahnhhtraining.montefiore.org
cmoremote.montefiore.org
secureaccess.montefiore.org
hc.montefiore.org
npsnf.montefiore.org
vetlredcapdb04.montefiore.org
cewepic.montefiore.org
secureaccess.montefiore.org
es2013.montefiore.org
mail.montefiore.org
mychart.montefiore.org
testeyecarepacs.montefiore.org
epicecp8.montefiore.org
aspera.einsteinmed.org
jhltreksdev.montefiore.org
epfmobile.montefiore.org
soapapps.montefiore.org
mobile.montefiore.org
shares.einsteinmed.org
montefiore.org
xendirectordr.montefiore.org
welcomeweb.montefiore.org
vpn.montefiore.org
magicweb.montefiore.org
mail.montefiore.org
odcepivupecp04.montefiore.org
CPNremote.montefiore.org
epicdrrptsvc.montefiore.org
careers.montefiore.org
ybcccwc.montefiore.org
vetlredcapfe10.montefiore.org
verification.montefiore.org
timecapture.montefiore.org
secureaccess.montefiore.org
timecapture.montefiore.org
odcepivutecp02.montefiore.org
pacswebtest.montefiore.org
xendirectordr.montefiore.org
portal.montefiore.org
print.einsteinmed.org
ps360mobile.montefiore.org
ttxt.montefiore.org
carelink.montefiore.org
whsepicsro.montefiore.org
mail.montefiore.org
www.montefiore.org
www.montefiore.org
clg.montefiore.org
clg.montefiore.org
mychart.montefiore.org
portal.montefiore.org
ctmsstg.montefiore.org
mail.montefiore.org
www.einsteinmed.org
YBCCCP8.MONTEFIORE.ORG
cewepic.montefiore.org
clg.montefiore.org
vpn.montefiore.org
nsauth.montefiore.org
rifc2010.montefiore.org
YNKSV1APXCL02P.montefiore.org
printers.montefiore.org
timecapture.montefiore.org
odcepivupdbasvc.montefiore.org
secureaccess.montefiore.org
mobilepacs.montefiore.org
radiology.montefiore.org
citrixpoc.montefiore.org
odcepivupprdsvc.montefiore.org
ecp10.montefiore.org
mobilepacs.montefiore.org
servicedesk.montefiore.org
mmcnsauth.montefiore.org
mail.montefiore.org
gwn.montefiore.org
medstaffmeeting.montefiore.org
careers.montefiore.org
crma.montefiore.org
mail.montefiore.org
sapfmqas.montefiore.org
remote.montefiore.org
gwwa02.montefiore.org
hhavpn.montefiore.org
mmcnsauth.montefiore.org
amis.montefiore.org
ykepisc.montefiore.org
bahnhhtraining.montefiore.org
portfolio.montefiore.org
ctxnslab1.montefiore.org
portal.montefiore.org
portal.montefiore.org
testeyecarepacs.montefiore.org
carelink.montefiore.org
npce.montefiore.org
Bahnhh.montefiore.org
gwn.montefiore.org
odcepivuprptsvc.montefiore.org
pay.montefiore.org
nsauth.montefiore.org
bahnhhtraining.montefiore.org
cmoremote.montefiore.org
secureaccess.montefiore.org
hc.montefiore.org
npsnf.montefiore.org
Certificate
The complete raw certificate details for mychart.montefiore.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGwDCCBaigAwIBAgIQDi4X/Zk0qNhPrrqO4xcouzANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwMjI4MDAwMDAwWhcN MjAwMjI5MTIwMDAwWjCBiTELMAkGA1UEBhMCVVMxETAPBgNVBAgTCE5ldyBZb3Jr MQ4wDAYDVQQHEwVCcm9ueDEiMCAGA1UEChMZTW9udGVmaW9yZSBNZWRpY2FsIENl bnRlcjESMBAGA1UECxMJRXBpYyBQcm9kMR8wHQYDVQQDExZteWNoYXJ0Lm1vbnRl ZmlvcmUub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqndn6/yo +Q3JsDuFs+DIV0OLSXk6naVT6CoK7N/WsbHtzeqcltkPucXBneBJHnRuZmXYjPbf hxd2GxGubEGjrunTnyc0jI2kogW2pAj5WC3ET7Yoo0b7R70Yti4PkKM/t7F3Xdun gGXRu9rkVFtkKUR0/+uZkh/YdgKpt5Q8KqyT+DvFA9k61y2cGTXECYX47WKyZKpe pIBxP/d+vhzMapnoDMVZ64PQiAXFkknHeNHYMF9zEgRFZg0DslvHORAuIMveXdQf NnzlJ2LkhCAnFVZHprDT1beUGpLAfyMJx8NDBTtg46mCWJm02gPsiNG19+8kJhQw lM+GXYJzLfcTcQIDAQABo4IDXTCCA1kwHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeN Rji0LOHG2eIwHQYDVR0OBBYEFKRItGGoDL9T533KtebMTKuzRw1QMCEGA1UdEQQa MBiCFm15Y2hhcnQubW9udGVmaW9yZS5vcmcwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRw Oi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0 cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUw QzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNl cnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzAB hhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9j YWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5j cnQwCQYDVR0TBAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcApLkJkLQY WBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFh3owOMwAABAMASDBGAiEA6oSi pelK761vunCIVj7n9zf3UGJu/ofhq8LbEl42yqYCIQDid05NPo/OopwFfCd3tswC GSBcr2GtUv3bbYA2RL0UwgB1AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9e oIMPAAABYd6MDqcAAAQDAEYwRAIgZDANvHszY/aMgxTwkdTb673/ClYaq/XJcrz3 7tFjyloCIBhd8BzuFSz7n2MUEl4iikhpEu/VSjdNrXpFKiBGxlg/AHcAu9nfvB+K cbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFh3owO3gAABAMASDBGAiEAhArW trPTQmen55DkHDeaJkiUg3/tiNsmKOuv5ig7OKUCIQCLCta901fkaB1EXDuzNkXY D9bkXlaCFdL/n9ZUeNYEXTANBgkqhkiG9w0BAQsFAAOCAQEAt3Y6ccpyDolgNJ2r 2AJwbMdwtQbqrNftMVkLBfhEQP0Txj2Wlkckjc9tQZuzeYJsQXX8fAqvMuPxemcK y4my1yZU3UlNqoufqkT/JwWiTQpL7jtuNGMdQlJu+lKWDvzLk2dVTCRXnRXKbcKB Ruu0Vnt5+LA9Fv5sV9TU6E+yZixtGOjFUrczqq7hptw3CuroFNTqbUxApNaJrHhm vl6/Nl7bSOk9QBOQ5ZBA1hYC/g7Ph120YDRS/ErigFfqv5VzIunaPp5TgTQqjQcU K9nRyf1yTPmGcjg5QdV7FU0sfuY1S9fywBBXWJuHiF1wupe+YuVXuPoKq6iXoIcO 2w9zjg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqndn6/yo+Q3JsDuFs+DI V0OLSXk6naVT6CoK7N/WsbHtzeqcltkPucXBneBJHnRuZmXYjPbfhxd2GxGubEGj runTnyc0jI2kogW2pAj5WC3ET7Yoo0b7R70Yti4PkKM/t7F3XdungGXRu9rkVFtk KUR0/+uZkh/YdgKpt5Q8KqyT+DvFA9k61y2cGTXECYX47WKyZKpepIBxP/d+vhzM apnoDMVZ64PQiAXFkknHeNHYMF9zEgRFZg0DslvHORAuIMveXdQfNnzlJ2LkhCAn FVZHprDT1beUGpLAfyMJx8NDBTtg46mCWJm02gPsiNG19+8kJhQwlM+GXYJzLfcT cQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18848524184042292381956193579905263803 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bronx' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montefiore Medical Center' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Epic Prod' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mychart.montefiore.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21519393110059454119641069175815857122717901042809645449284474024672366372130794275606171002293079367174972430081457725637998251573842897864771428737785232257998361918055178012087148093382941392985012846633308950549834342888781178567965816453237121856891226175667892556344269071018728041906588838442076133315135390186199221782873972640941723278567362271963293330710568842228660745395616789516086317417710297372247410965243470557158337975243003269316272232606731477878401332033858077116261594348065096113810528306266859496556296789793910367858706136525033546635278725690364153216251770985665521331172852009362630579057 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a448b461a80cbf53e77dcab5e6cc4cabb3470d50 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mychart.montefiore.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 0169007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000161de8c0e330000040300483046022100ea84a2a5e94aefad6fba7088563ee7f737f750626efe87e1abc2db125e36caa6022100e2774e4d3e8fcea29c057c2777b6cc0219205caf61ad52fddb6d803644bd14c20075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000161de8c0ea70000040300463044022064300dbc7b3363f68c8314f091d4dbebbdff0a561aabf5c972bcf7eed163ca5a0220185df01cee152cfb9f6314125e228a486912efd54a374dad7a452a2046c6583f007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000161de8c0ede0000040300483046022100840ad6b6b3d34267a7e790e41c379a264894837fed88db2628ebafe6283b38a50221008b0ad6bdd357e4681d445c3bb33645d80fd6e45e568215d2ff9fd65478d6045d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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