www.verisigndns.com
- Verisign, Inc -
Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 0f:d9:db:d0:6d:86:aa:89:4e:9e:b7:05:c4:75:95:81 was issued on by DigiCert Inc.
With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Verisign, Inc
Organization:
Verisign, Inc
State / Province:
Virginia
Locality: Reston
Country: US
Locality: Reston
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:d9:db:d0:6d:86:aa:89:4e:9e:b7:05:c4:75:95:81Serial Number (int): 21069606716133465837279452867803321729
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 1a:2f:44:27:ef:22:60:6a:d8:ba:28:32:5e:52:04:ea:49:83:ad:a8
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17
Fingerprint (sha1): a9:d1:5d:de:1b:85:2a:01:12:4a:37:24:66:e9:8a:7b:3e:a2:02:3b
Fingerprint (sha256): 1a:8e:a0:59:bb:3d:ec:f0:ed:74:29:84:4f:5f:e4:a7:93:60:89:5f:0c:91:c2:95:7b:1e:a9:36:6a:ad:20:c1
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
Check the revocation status for certificate www.verisigndns.com
28
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.verisigndns.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.verisigndns.com
dnssec.com
dnssecsigningservice.com
nic.tv
www.dnssec.org
www.dnssecsigningservice.net
www.verisigndnssec.com
tipstogetonline.com
dnssec.org
dnssecsigningservice.net
registrarprograms.verisigninc.com
www.dnssecforum.com
www.nic.cc
www.verisigndnssec.net
www.tipstogetonline.com
dnssecforum.com
nic.cc
verisigndns.com
www.dnssecforum.net
www.nic.name
verisigndnssec.com
cap.verisigninc.com
dnssecforum.net
nic.name
www.dnssec.com
www.dnssecsigningservice.com
www.nic.tv
verisigndnssec.net
dnssec.com
dnssecsigningservice.com
nic.tv
www.dnssec.org
www.dnssecsigningservice.net
www.verisigndnssec.com
tipstogetonline.com
dnssec.org
dnssecsigningservice.net
registrarprograms.verisigninc.com
www.dnssecforum.com
www.nic.cc
www.verisigndnssec.net
www.tipstogetonline.com
dnssecforum.com
nic.cc
verisigndns.com
www.dnssecforum.net
www.nic.name
verisigndnssec.com
cap.verisigninc.com
dnssecforum.net
nic.name
www.dnssec.com
www.dnssecsigningservice.com
www.nic.tv
verisigndnssec.net
Other certificates including the domain name verisigndns.com
(limited to 100 certificates)
www.verisigndns.com
qa.verisigndns.com
verisigndns.com
www.verisigndns.com
www.verisigndns.com
ote.verisigndns.com
mdns.verisign.com
www.verisigndns.com
mdns.verisign.com
ote.verisigndns.com
rdap.verisign.com
download.verisigndns.com
qa.verisigndns.com
mdns.verisign.com
ote.verisigndns.com
download.verisigndns.com
mdns.verisign.com
mdns.verisign.com
WWW.DNS-TOOL.COM
www.verisigndns.com
rdap.verisign.com
rdap.verisign.com
qa3-mdns.verisign.com
qa.verisigndns.com
mdns.verisign.com
www.verisigndns.com
rdap.verisign.com
rdap.verisign.com
qa2-mdns.verisign.com
verisigndns.com
qa1-mdns.verisign.com
verisigndns.com
WWW.DNS-TOOL.COM
ote.verisigndns.com
www.verisigndns.com
www.verisigndns.com
mdns.verisign.com
mdns.verisign.com
qa.verisigndns.com
verisigndns.com
www.verisigndns.com
www.verisigndns.com
ote.verisigndns.com
mdns.verisign.com
www.verisigndns.com
mdns.verisign.com
ote.verisigndns.com
rdap.verisign.com
download.verisigndns.com
qa.verisigndns.com
mdns.verisign.com
ote.verisigndns.com
download.verisigndns.com
mdns.verisign.com
mdns.verisign.com
WWW.DNS-TOOL.COM
www.verisigndns.com
rdap.verisign.com
rdap.verisign.com
qa3-mdns.verisign.com
qa.verisigndns.com
mdns.verisign.com
www.verisigndns.com
rdap.verisign.com
rdap.verisign.com
qa2-mdns.verisign.com
verisigndns.com
qa1-mdns.verisign.com
verisigndns.com
WWW.DNS-TOOL.COM
ote.verisigndns.com
www.verisigndns.com
www.verisigndns.com
mdns.verisign.com
mdns.verisign.com
Certificate
The complete raw certificate details for www.verisigndns.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHdDCCBlygAwIBAgIQD9nb0G2GqolOnrcFxHWVgTANBgkqhkiG9w0BAQsFADBZ MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjMw NTA5MDAwMDAwWhcNMjQwNTA4MjM1OTU5WjBnMQswCQYDVQQGEwJVUzERMA8GA1UE CBMIVmlyZ2luaWExDzANBgNVBAcTBlJlc3RvbjEWMBQGA1UEChMNVmVyaXNpZ24s IEluYzEcMBoGA1UEAxMTd3d3LnZlcmlzaWduZG5zLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAOF1dXahTKQk0zfwl8fyRnx0CFdH8Cc1RYal2iw5 iIuFLfEl2sbxO0fj391H4+1j9yeKqrfakuxvvv4LY0cRA8wZtmbqEia1edAEFuxz VqVjtDH7QKUEACvbxOFx23AZGWaFqMspgAd0Pk1wKQERsuLOE/mXOWJhVXxAWGHU sAHWOM4cdsUQAgztXcijymRlvH8UxUxQ4TjuEzP8LEGgSWKHPvJqabBbUeQu0sVA 9FjnD5GUBAFhRId/dYAWZTyLQtHPtP8D9NzRbSswT2ytpIRCRnRdse8/EAJ5zaOp Cn1OVtEGo/W6krth2pOGSz/Jss6MYhEQo0ugPd4iggkCT/sCAwEAAaOCBCgwggQk MB8GA1UdIwQYMBaAFHSFgMBmx9833s+9KTeqAx2+7c0XMB0GA1UdDgQWBBQaL0Qn 7yJgati6KDJeUgTqSYOtqDCCAiUGA1UdEQSCAhwwggIYghN3d3cudmVyaXNpZ25k bnMuY29tggpkbnNzZWMuY29tghhkbnNzZWNzaWduaW5nc2VydmljZS5jb22CBm5p Yy50doIOd3d3LmRuc3NlYy5vcmeCHHd3dy5kbnNzZWNzaWduaW5nc2VydmljZS5u ZXSCFnd3dy52ZXJpc2lnbmRuc3NlYy5jb22CE3RpcHN0b2dldG9ubGluZS5jb22C CmRuc3NlYy5vcmeCGGRuc3NlY3NpZ25pbmdzZXJ2aWNlLm5ldIIhcmVnaXN0cmFy cHJvZ3JhbXMudmVyaXNpZ25pbmMuY29tghN3d3cuZG5zc2VjZm9ydW0uY29tggp3 d3cubmljLmNjghZ3d3cudmVyaXNpZ25kbnNzZWMubmV0ghd3d3cudGlwc3RvZ2V0 b25saW5lLmNvbYIPZG5zc2VjZm9ydW0uY29tggZuaWMuY2OCD3ZlcmlzaWduZG5z LmNvbYITd3d3LmRuc3NlY2ZvcnVtLm5ldIIMd3d3Lm5pYy5uYW1lghJ2ZXJpc2ln bmRuc3NlYy5jb22CE2NhcC52ZXJpc2lnbmluYy5jb22CD2Ruc3NlY2ZvcnVtLm5l dIIIbmljLm5hbWWCDnd3dy5kbnNzZWMuY29tghx3d3cuZG5zc2Vjc2lnbmluZ3Nl cnZpY2UuY29tggp3d3cubmljLnR2ghJ2ZXJpc2lnbmRuc3NlYy5uZXQwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0f BIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRH bG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcmwwSKBGoESGQmh0dHA6Ly9j cmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcyVExTUlNBU0hBMjU2MjAy MENBMS0xLmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhto dHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYcGCCsGAQUFBwEBBHsweTAkBggr BgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVo dHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JT QVNIQTI1NjIwMjBDQTEtMS5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/ BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvJzNH/ttnN6xvTj2r9Yz8b6NXYeE5IM 205bXNOB8Zpma0Rn/s3NioibmJPT+sRMBJ77Y/nm7FiEheqyoxQPzg4TsBL0p/qa NCSFygINaip9urUWa5HZdeKacMF6jbv79TFIDZ2b2VY1ahho71R7oK+fX839AITy rQkKUlQxQEtaBybZ2f8E6q8Ub+2fRd0PBDKzuLOojytnS3JNcmnl9zpqHeL7m+QK j2HqWoofmY2gcGelpM67w4yQmJ8nhZzo627+EmIqFIM/ZXR51/qZq2ys00y+xe1i ifJ3WGWTzeXNX1tfIFEsyzvB6PZvcqylA4M96B9AMnQowrBNTudbCw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XV1dqFMpCTTN/CXx/JG fHQIV0fwJzVFhqXaLDmIi4Ut8SXaxvE7R+Pf3Ufj7WP3J4qqt9qS7G++/gtjRxED zBm2ZuoSJrV50AQW7HNWpWO0MftApQQAK9vE4XHbcBkZZoWoyymAB3Q+TXApARGy 4s4T+Zc5YmFVfEBYYdSwAdY4zhx2xRACDO1dyKPKZGW8fxTFTFDhOO4TM/wsQaBJ Yoc+8mppsFtR5C7SxUD0WOcPkZQEAWFEh391gBZlPItC0c+0/wP03NFtKzBPbK2k hEJGdF2x7z8QAnnNo6kKfU5W0Qaj9bqSu2Hak4ZLP8myzoxiERCjS6A93iKCCQJP +wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21069606716133465837279452867803321729 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verisign, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.verisigndns.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28461539730807633072754130813380146934928619747469772566229186568359787042061976896356899336473818868170894226006119133609249384417357533557077678029701679642582118863144649393212228120373650657278553627900292797536535969636883128232423568994093487344321233998993951649910712230241092619086987180149594078480234320190018448321858307031642144997853156683146679307633601639749798242212598445804564848304540434664136838397299273167231732357520471188780555776269889850658663999677191130088447425856163580019922210807954050981530534057248318110292505787528147269341311664849333296514449775478678023528162943736486287265787 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1a2f4427ef22606ad8ba28325e5204ea4983ada8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (540 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisigndns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnssec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnssecsigningservice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nic.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dnssec.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dnssecsigningservice.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisigndnssec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tipstogetonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnssec.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnssecsigningservice.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registrarprograms.verisigninc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dnssecforum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nic.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisigndnssec.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tipstogetonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnssecforum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nic.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisigndns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dnssecforum.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nic.name' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisigndnssec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cap.verisigninc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnssecforum.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nic.name' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dnssec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dnssecsigningservice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nic.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisigndnssec.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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