rancher-staging.jasper.com
- Cisco Systems, Inc. -
Issued by HydrantID SSL ICA G2
About this certificate
This digital certificate with serial number 6e:f1:33:4f:cc:ed:81:18:d3:69:9b:91:59:be:2d:c4:c4:ea:16:d7 was issued on by HydrantID (Avalanche Cloud Corporation).
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)
Cisco Systems, Inc.
Organization:
Cisco Systems, Inc.
State / Province:
CA
Locality: San Jose
Country: US
Locality: San Jose
Country: US
HydrantID (Avalanche Cloud Corporation)
Organization:
HydrantID (Avalanche Cloud Corporation)
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 6e:f1:33:4f:cc:ed:81:18:d3:69:9b:91:59:be:2d:c4:c4:ea:16:d7Serial Number (int): 633367934264753438262812898646534628259750614743
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 51:d8:23:55:7d:78:98:92:f5:f8:2e:86:a5:a4:63:10:cf:8a:49:78
AuthorityKeyId: 98:6a:b6:2d:2e:bf:a7:aa:9f:f6:f7:d6:09:af:d5:8b:57:f9:8a:b7
Fingerprint (sha1): 87:c3:c9:c0:83:13:3b:d0:93:f8:88:53:f3:b7:6f:44:0a:d5:3f:ea
Fingerprint (sha256): 19:92:df:7a:03:ee:39:4a:9a:a2:da:d0:92:a9:3d:a5:1a:46:96:ae:eb:a6:b1:1c:96:35:91:12:91:ea:17:1c
Issuing Certificate URL: http://trust.quovadisglobal.com/hydsslg2.crt
Revocation information
OCSP Server: http://ocsp.quovadisglobal.comCRL Distribution Point: http://crl.quovadisglobal.com/hydsslg2.crl
Check the revocation status for certificate rancher-staging.jasper.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rancher-staging.jasper.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
IPSEC End System
IPSEC Tunnel
IPSEC User
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rancher-staging.jasper.com
neer-staging.jasper.com
neer-staging.jasper.com
Other certificates including the domain name jasper.com
(limited to 100 certificates)
cc6.status.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
bp890869.saagie.com
arkiv.status.geoikt.no
bare-metal-servers.status-ovhcloud.com
cc20.status.jasper.com
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc6.status.jasper.com
cc3.status.jasper.com
*.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
cc19.status.jasper.com
*.jasper.com
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
cc20.status.jasper.com
bare-metal-servers.status-ovhcloud.com
*.jasper.com
cc3.status.jasper.com
api.line-status.info
cc20.status.jasper.com
api.line-status.info
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
api.line-status.info
bb2status.mambu.com
cc20.status.jasper.com
cc6.status.jasper.com
atl-ntct-nsa-01.i.jasper.com
bp890869.saagie.com
cc6.status.jasper.com
cc7.status.jasper.com
api.line-status.info
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
cc20.status.jasper.com
cc19.status.jasper.com
cc6.status.jasper.com
cc3.status.jasper.com
cc3.status.jasper.com
cc19.status.jasper.com
api.line-status.info
cc20.status.jasper.com
cc6.status.jasper.com
cc6.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
rancher-staging.i.jasper.com
cc19.status.jasper.com
cc3.status.jasper.com
api.line-status.info
ATT-NTCT-DGM-01.i.jasper.com
atl-ntct-dgm-01.i.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
bp890869.saagie.com
cc19.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
rancher-staging.i.jasper.com
cc3.status.jasper.com
bp890869.saagie.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
api.line-status.info
cc3.status.jasper.com
cc20.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
cc3.status.jasper.com
arkiv.status.geoikt.no
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
bp890869.saagie.com
cc19.status.jasper.com
rws-fnstaging.jasper.com
cc6.status.jasper.com
cc3.status.jasper.com
cc6.status.jasper.com
cc19.status.jasper.com
rancher-staging.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
bp890869.saagie.com
arkiv.status.geoikt.no
bare-metal-servers.status-ovhcloud.com
cc20.status.jasper.com
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc6.status.jasper.com
cc3.status.jasper.com
*.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
cc19.status.jasper.com
*.jasper.com
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
cc20.status.jasper.com
bare-metal-servers.status-ovhcloud.com
*.jasper.com
cc3.status.jasper.com
api.line-status.info
cc20.status.jasper.com
api.line-status.info
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
api.line-status.info
bb2status.mambu.com
cc20.status.jasper.com
cc6.status.jasper.com
atl-ntct-nsa-01.i.jasper.com
bp890869.saagie.com
cc6.status.jasper.com
cc7.status.jasper.com
api.line-status.info
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
cc20.status.jasper.com
cc19.status.jasper.com
cc6.status.jasper.com
cc3.status.jasper.com
cc3.status.jasper.com
cc19.status.jasper.com
api.line-status.info
cc20.status.jasper.com
cc6.status.jasper.com
cc6.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
rancher-staging.i.jasper.com
cc19.status.jasper.com
cc3.status.jasper.com
api.line-status.info
ATT-NTCT-DGM-01.i.jasper.com
atl-ntct-dgm-01.i.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
bp890869.saagie.com
cc19.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
rancher-staging.i.jasper.com
cc3.status.jasper.com
bp890869.saagie.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
api.line-status.info
cc3.status.jasper.com
cc20.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
cc3.status.jasper.com
arkiv.status.geoikt.no
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
bp890869.saagie.com
cc19.status.jasper.com
rws-fnstaging.jasper.com
cc6.status.jasper.com
cc3.status.jasper.com
cc6.status.jasper.com
cc19.status.jasper.com
rancher-staging.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
Certificate
The complete raw certificate details for rancher-staging.jasper.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYjCCBEqgAwIBAgIUbvEzT8ztgRjTaZuRWb4txMTqFtcwDQYJKoZIhvcNAQEL BQAwXjELMAkGA1UEBhMCVVMxMDAuBgNVBAoTJ0h5ZHJhbnRJRCAoQXZhbGFuY2hl IENsb3VkIENvcnBvcmF0aW9uKTEdMBsGA1UEAxMUSHlkcmFudElEIFNTTCBJQ0Eg RzIwHhcNMTkwMzE0MjAyNDQ3WhcNMTkwNDE0MjAzNDAwWjBwMQswCQYDVQQGEwJV UzELMAkGA1UECAwCQ0ExETAPBgNVBAcMCFNhbiBKb3NlMRwwGgYDVQQKDBNDaXNj byBTeXN0ZW1zLCBJbmMuMSMwIQYDVQQDDBpyYW5jaGVyLXN0YWdpbmcuamFzcGVy LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANdzjpk49AMltJ/R ZfVL7hTEKwm3mHTm62cWqH0Z1R3kFfCcBPBV8tC5QBIfpGk9j+wnuSj1BAZ38IHA h+VVgr4Jmdbzz/9CaYec93a51TiTXWhOaQnvMHThRp8o+sBv3gQfxH3ZThaqfX3T xPIM//bcJYNmTXCViWjZ5euCF+BeGysoEFRc7LVo2XhD58WLGgswM+eODgKt2q68 yYufmBhIXoiG7J5sZ7k8mQloer+xZvx/K0dp75sS3G1UqPvrMNfb31mNJjKofg8V zCqxJf4ZmBdiTy6b+I4m92IlXT0tYBD7P9+szI693xQaUkJxxtFdSWXDyNtGJRYO gCNh4m8CAwEAAaOCAgQwggIAMAkGA1UdEwQCMAAwHwYDVR0jBBgwFoAUmGq2LS6/ p6qf9vfWCa/Vi1f5ircwdAYIKwYBBQUHAQEEaDBmMDgGCCsGAQUFBzAChixodHRw Oi8vdHJ1c3QucXVvdmFkaXNnbG9iYWwuY29tL2h5ZHNzbGcyLmNydDAqBggrBgEF BQcwAYYeaHR0cDovL29jc3AucXVvdmFkaXNnbG9iYWwuY29tMD4GA1UdEQQ3MDWC GnJhbmNoZXItc3RhZ2luZy5qYXNwZXIuY29tghduZWVyLXN0YWdpbmcuamFzcGVy LmNvbTBeBgNVHSAEVzBVMAgGBmeBDAECAjBJBgwrBgEEAb5YAAOHBAAwOTA3Bggr BgEFBQcCARYraHR0cDovL3d3dy5oeWRyYW50aWQuY29tL3N1cHBvcnQvcmVwb3Np dG9yeTA7BgNVHSUENDAyBggrBgEFBQcDAgYIKwYBBQUHAwUGCCsGAQUFBwMGBggr BgEFBQcDBwYIKwYBBQUHAwEwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5x dW92YWRpc2dsb2JhbC5jb20vaHlkc3NsZzIuY3JsMB0GA1UdDgQWBBRR2CNVfXiY kvX4LoalpGMQz4pJeDAOBgNVHQ8BAf8EBAMCBaAwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQELBQADggIBALHM5kx/E/54s9POSqNXZ+tmbYikrSB3gkme 4I2mSiD2evI3x+rz5dE/MaBPglTvutj6Clcw14MgnqNfNz7S95WvMGdb5BcMRAp6 pdkBcBdrS9MTmkTSNcpQelcjuGL6zZ+1KxaMvsYSdNjIUt2DrZRaliUGZ3jl4Xop lrtsBj1YmqtTBIEUxhdzGtztuKJEL/TXlc1ZHNUfJrAhmb/dZzoiSCXEZbjx8Spp f7s4N4n+nBwcCKO+BVOKIAeWee556ZrUQeGpJ+VhWLM8s/Byy3y2CW/xB1vpPZfQ 9nE/kcEmasVY04qYiuPipnqa+eCNcGXdYzrJ8xNuA6KAbk8XfD45yXYV4V24Zmb8 s+54fB4hZQcg7bZM4mN/EJhvUCd/zNByP8CKhzFcExt2K6vDi+0QkDidauhD0A5T 8yqVniMYrZuljbLjvfM6Jl2C4kb0hGoAo58/ND3+Zc2dfIbEFQ7Q3n2ES6PAw4sM pAnAZ1LwFwe917Ccrl4gkJRl9HdeTQTQKn1thn+mXLl1as+NEeUJoLRL7oT25Ndi If89ELDjbtAJPSBxGS3YnxS/pRvt2nmEuhLj5OE5Krhqh3ypzO9D01S/B2kpYWGP 6RwH9CaAMuTRs/9JVMReLQDnXTQF0ytbNBV68YXzvm4N1DtKHkLCuQb5V3M3bxNY fu7Gc0I7 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13OOmTj0AyW0n9Fl9Uvu FMQrCbeYdObrZxaofRnVHeQV8JwE8FXy0LlAEh+kaT2P7Ce5KPUEBnfwgcCH5VWC vgmZ1vPP/0Jph5z3drnVOJNdaE5pCe8wdOFGnyj6wG/eBB/EfdlOFqp9fdPE8gz/ 9twlg2ZNcJWJaNnl64IX4F4bKygQVFzstWjZeEPnxYsaCzAz544OAq3arrzJi5+Y GEheiIbsnmxnuTyZCWh6v7Fm/H8rR2nvmxLcbVSo++sw19vfWY0mMqh+DxXMKrEl /hmYF2JPLpv4jib3YiVdPS1gEPs/36zMjr3fFBpSQnHG0V1JZcPI20YlFg6AI2Hi bwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 633367934264753438262812898646534628259750614743 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID (Avalanche Cloud Corporation)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID SSL ICA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-14 20:24:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-14 20:34:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Jose' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cisco Systems, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'rancher-staging.jasper.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27198218860767844073848313713949897639927511636604437381572836635658261015789192585186848820881450061936592115363602376030399023962179321034145707776894149627502999591289785019594790160429696559974431910853498143845994897329843599910091014965830211356944578860308378092737454106667520112597837610494120170335893010231178612580734494609499437930408799317427545026048293612742592137136435315670454793026209309536225153843353157767134877931423869780602164177268738995324976187722364099879721706341980297659409416476119243369499804728002276041861849922474294622530407884914547675932745962348142365590006613499007922725487 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 986ab62d2ebfa7aa9ff6f7d609afd58b57f98ab7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/hydsslg2.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rancher-staging.jasper.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neer-staging.jasper.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.3.900.0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.hydrantid.com/support/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.5 (ipsecEndSystem) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.6 (ipsecTunnel) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.7 (ipsecUser) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/hydsslg2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 51d823557d789892f5f82e86a5a46310cf8a4978 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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