*.ncsbe.gov
- N.C. State board of Elections -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0b:13:8d:50:46:db:d3:99:e9:d1:3a:db:fb:51:48:4e was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
N.C. State board of Elections
Organization:
N.C. State board of Elections
State / Province:
North Carolina
Locality: Raleigh
Country: US
Locality: Raleigh
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:13:8d:50:46:db:d3:99:e9:d1:3a:db:fb:51:48:4eSerial Number (int): 14723027773883057054078540909441534030
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: ef:24:f1:e7:e7:a9:04:ba:66:e2:20:cc:b2:1d:9d:ff:1a:71:8f:61
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 5e:20:6e:29:bf:43:c5:38:36:a3:6e:c0:aa:bd:78:36:b1:82:76:3d
Fingerprint (sha256): 1b:8b:00:d7:2e:91:d3:29:f8:b6:dd:58:74:23:40:4c:81:25:25:30:89:61:27:6c:6f:ab:3a:01:a2:51:00:ad
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g1.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g1.crl
Check the revocation status for certificate *.ncsbe.gov
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.ncsbe.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.ncsbe.gov
ncsbe.gov
ncsbe.gov
Other certificates including the domain name ncsbe.gov
(limited to 100 certificates)
sni.cloudflaressl.com
ssl819922.cloudflaressl.com
files.nc.gov
ssl.connect.clarityelections.com
*.ncsbe.gov
*.ncsbe.gov
ssl.connect.clarityelections.com
ssl819923.cloudflaressl.com
files.nc.gov
www.ncsbe.gov
files.nc.gov
sni253218.cloudflaressl.com
files.nc.gov
ssl819923.cloudflaressl.com
files.nc.gov
sslvpn.ncsbe.gov
files.nc.gov
*.ncsbe.gov
www.ncsbe.gov
votebymail.ncsbe.gov
files.nc.gov
ssl819923.cloudflaressl.com
www.ncsbe.gov
www.ncsbe.gov
ncsbe.gov
ssl819924.cloudflaressl.com
files.nc.gov
sni.cloudflaressl.com
ncsbe.gov
ncsbe.gov
ncsbe.gov
ncsbe.gov
ssl819922.cloudflaressl.com
files.nc.gov
*.ncsbe.gov
ssl.connect.clarityelections.com
ssl.connect.clarityelections.com
ncsbe.gov
www.ncsbe.gov
www.ncsbe.gov
ssl.connect.clarityelections.com
ncsbe.gov
www.ncsbe.gov
files.nc.gov
sslvpnedc.ncsbe.gov
ssl819924.cloudflaressl.com
ssl819924.cloudflaressl.com
www.ncsbe.gov
files.nc.gov
votebymail.ncsbe.gov
ncsbe.gov
files.nc.gov
files.nc.gov
ssl819923.cloudflaressl.com
files.nc.gov
ssl819924.cloudflaressl.com
*.ncsbe.gov
ncsbe.gov
www.ncsbe.gov
www.ncsbe.gov
files.nc.gov
ssl819922.cloudflaressl.com
files.nc.gov
files.nc.gov
ncsbe.gov
ssl.connect.clarityelections.com
ncsbe.gov
*.ncsbe.gov
ssl819922.cloudflaressl.com
files.nc.gov
ssl.connect.clarityelections.com
*.ncsbe.gov
*.ncsbe.gov
ssl.connect.clarityelections.com
ssl819923.cloudflaressl.com
files.nc.gov
www.ncsbe.gov
files.nc.gov
sni253218.cloudflaressl.com
files.nc.gov
ssl819923.cloudflaressl.com
files.nc.gov
sslvpn.ncsbe.gov
files.nc.gov
*.ncsbe.gov
www.ncsbe.gov
votebymail.ncsbe.gov
files.nc.gov
ssl819923.cloudflaressl.com
www.ncsbe.gov
www.ncsbe.gov
ncsbe.gov
ssl819924.cloudflaressl.com
files.nc.gov
sni.cloudflaressl.com
ncsbe.gov
ncsbe.gov
ncsbe.gov
ncsbe.gov
ssl819922.cloudflaressl.com
files.nc.gov
*.ncsbe.gov
ssl.connect.clarityelections.com
ssl.connect.clarityelections.com
ncsbe.gov
www.ncsbe.gov
www.ncsbe.gov
ssl.connect.clarityelections.com
ncsbe.gov
www.ncsbe.gov
files.nc.gov
sslvpnedc.ncsbe.gov
ssl819924.cloudflaressl.com
ssl819924.cloudflaressl.com
www.ncsbe.gov
files.nc.gov
votebymail.ncsbe.gov
ncsbe.gov
files.nc.gov
files.nc.gov
ssl819923.cloudflaressl.com
files.nc.gov
ssl819924.cloudflaressl.com
*.ncsbe.gov
ncsbe.gov
www.ncsbe.gov
www.ncsbe.gov
files.nc.gov
ssl819922.cloudflaressl.com
files.nc.gov
files.nc.gov
ncsbe.gov
ssl.connect.clarityelections.com
ncsbe.gov
*.ncsbe.gov
Certificate
The complete raw certificate details for *.ncsbe.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIQCxONUEbb05np0Trb+1FITjANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTcwNjMwMDAwMDAwWhcN MTcxMTE0MTIwMDAwWjB2MQswCQYDVQQGEwJVUzEXMBUGA1UECBMOTm9ydGggQ2Fy b2xpbmExEDAOBgNVBAcTB1JhbGVpZ2gxJjAkBgNVBAoTHU4uQy4gU3RhdGUgYm9h cmQgb2YgRWxlY3Rpb25zMRQwEgYDVQQDDAsqLm5jc2JlLmdvdjCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBALRR6mFfRpKDF/QJP/wcgl1FBj9CZBETS/Lr u1ULQ5M/l3AOaBbZBWPLeP423pvr4CCUALw96CcWUFnbn1jChz5TCYMhqWMvHVCb 4BJAXDZH789xXBC4NmbjbG7nIFts9THsDKLVf3fuJw4U7luHmR7LDmz3Bs25d1eZ R6l/RbbyIortaxR7eaOfh9ueeDxA+bCAOn1DWXb4PqSxm2U8FcKQn87A/J8LVC8n Zy5h4h4HPqSTZ13uEV81FevjVjBG+tuP6t9v4kXETsmPxycj+9W8MWwKIWkulAzu EFhU/QAhSi2OI1aJnUwH5VDe0OiwbptSp7/PHucR0ZKFeVoVF4MCAwEAAaOCAd0w ggHZMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBTv JPHn56kEumbiIMyyHZ3/GnGPYTAhBgNVHREEGjAYggsqLm5jc2JlLmdvdoIJbmNz YmUuZ292MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29t L3NzY2Etc2hhMi1nMS5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNv bS9zc2NhLXNoYTItZzEuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYI KwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQIC MHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNl cnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20v RGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwDQYJ KoZIhvcNAQELBQADggEBAEJPmWUOr80QnMCsYZXTaetpi8RYeITkghRbTXY6srMN XIreBtykWFDj0cmVEbmjp0sD20ygemKi4nftwC3elEEy1ZrByQzVwn+mPYgzS97X 8tmj8fDVfABDoKVFe09DMefmBPxQqilJMtjP++sJtihg3nlrBvdUmnQsYMv1Qyf4 pPcjFKTJWJLntFAceDBHyw5iBUHg1FeYhNdlpx3tYx69gEWoV4risRBq3LP1iBPG GUTekcFxzqEH+0u+JeJPV96ct4yKNBriGJ1x4sYXBUuBa2jJe3RYoCpBRJVxDpbR vpJvONeqHvm91YrWetNbt2GryiG5JFB2Q/FXFAuGY10= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFHqYV9GkoMX9Ak//ByC XUUGP0JkERNL8uu7VQtDkz+XcA5oFtkFY8t4/jbem+vgIJQAvD3oJxZQWdufWMKH PlMJgyGpYy8dUJvgEkBcNkfvz3FcELg2ZuNsbucgW2z1MewMotV/d+4nDhTuW4eZ HssObPcGzbl3V5lHqX9FtvIiiu1rFHt5o5+H2554PED5sIA6fUNZdvg+pLGbZTwV wpCfzsD8nwtULydnLmHiHgc+pJNnXe4RXzUV6+NWMEb624/q32/iRcROyY/HJyP7 1bwxbAohaS6UDO4QWFT9ACFKLY4jVomdTAflUN7Q6LBum1Knv88e5xHRkoV5WhUX gwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14723027773883057054078540909441534030 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-14 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Raleigh' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'N.C. State board of Elections' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ncsbe.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22763288956255437754850164219066284033393710896621740369010502759681991834399047650892309522111602190851742631669820325749147240680075396263196258988898980295583057538234507870820159855923246122612845465531345342961131013444775333669012420717017819260742267849239242942648142866739216102121495510298075683884756466598128614751576455337571294653079700584951177490971967268032284569825863972763123403550137561076105044448485344322434353759269377252417842540640893302194933100212465881620214238959017765743668363250433876790072796740867525265947882368967885821080421576614067423731458469047526986714841961863298915047299 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ef24f1e7e7a904ba66e220ccb21d9dff1a718f61 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncsbe.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncsbe.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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