design.sgmarkets.com
- Microsoft Corporation -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 02:d7:6e:76:2b:b0:1d:e2:ea:83:7d:3c:e7:95:72:fd was issued on by DigiCert Inc.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Microsoft Corporation
Organization:
Microsoft Corporation
State / Province:
Washington
Locality: Redmond
Country: US
Locality: Redmond
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 02:d7:6e:76:2b:b0:1d:e2:ea:83:7d:3c:e7:95:72:fdSerial Number (int): 3777040243655165553940805562515419901
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: a5:30:df:70:e5:25:04:17:94:13:83:98:4e:16:04:6a:c4:f2:3f:88
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): f4:ad:31:da:db:20:af:90:24:7a:18:af:a7:b7:b0:2e:72:b8:81:9d
Fingerprint (sha256): 1c:ef:ef:3a:1e:47:e0:c7:41:da:8f:12:54:66:3a:ef:29:db:cb:b8:26:c9:44:20:4f:b9:60:cf:7f:bc:8d:ba
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate design.sgmarkets.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for design.sgmarkets.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
design.sgmarkets.com
Other certificates including the domain name sgmarkets.com
(limited to 100 certificates)
rfp.sgmarkets.com
youtrack-api.sgmarkets.com
fic-uatrc.sgmarkets.com
shared.sgmarkets.com
nirvana-nycprimary.sgmarkets.com
*.sgmarkets.com
riskworkflows.sgmarkets.com
volhub.sgmarkets.com
shared.sgmarkets.com
ic.sgmarkets.com
sp-docapi.sgmarkets.com
sgmarkets.com
custody.sgmarkets.com
sgmarkets.com
Stratlab.sgmarkets.com
cty.sgmarkets.com
myhedge-staging.sgmarkets.com
crossborder-uat.sgmarkets.com
eqdflow-uat.sgmarkets.com
lab.sgmarkets.com
gbds-uat.sgmarkets.com
nirvana-hkprimary.sgmarkets.com
1dfinancing.sgmarkets.com
tradematch-api.sgmarkets.com
Mybilling-h.sgmarkets.com
valuation.sgmarkets.com
myoprisk-h.sgmarkets.com
ushronboard-dev.sgmarkets.com
www.warrants.com
api-z-dev.sgmarkets.com
dt.sgmarkets.com
cty.sgmarkets.com
SSO.sgmarkets.com
riskworkflows.sgmarkets.com
riskworkflows-beta.sgmarkets.com
sso-cert.sgmarkets.com
emars.sgmarkets.com
www.societegenerale.fi
techweek.sgmarkets.com
eqd-uatrc.sgmarkets.com
design.sgmarkets.com
myoprisk.sgmarkets.com
myhedge.sgmarkets.com
riskworkflows-beta.sgmarkets.com
sp-preview.sgmarkets.com
t.sgmarkets.com
billing-v2-h.sgmarkets.com
ic.sgmarkets.com
fic-devint.sgmarkets.com
lisa-preview.sgmarkets.com
sso-uat.sgmarkets.com
cty.sgmarkets.com
kyc.sgmarkets.com
selfcare-hom.sgmarkets.com
finestrat.sgmarkets.com
sgmarkets.com
cty.sgmarkets.com
www.warrants.com
t-monitoring-web-shared.sgmarkets.com
dview.sgmarkets.com
cprofit-datacollect.sgmarkets.com
listedstructuredproducts.com
ic.sgmarkets.com
riskworkflows.sgmarkets.com
Stratlab.sgmarkets.com
crossassetfinancing.sgmarkets.com
cty.sgmarkets.com
cprofit-correction-uat.sgmarkets.com
securitiesservices-api.sgmarkets.com
analytics.sgmarkets.com
analytics.sgmarkets.com
static.sgmarkets.com
advisoryfinancing.sgmarkets.com
listedstructuredproducts.com
www.warrants.com
securitieslending.sgmarkets.com
t-apigateway-kong-test.sgmarkets.com
confirmation.sgmarkets.com
t-helpcenter-widget.sgmarkets.com
design.sgmarkets.com
smartcash-uat.sgmarkets.com
www.warrants.com
tradematch-api.sgmarkets.com
nirvana-parprimary.sgmarkets.com
api-z.sgmarkets.com
developer.sgmarkets.com
api-z-dev.sgmarkets.com
emars.sgmarkets.com
1dfinancing-api.sgmarkets.com
stratlab.sgmarkets.com
sso.sgmarkets.com
creditportfolio-demo.sgmarkets.com
test.sgmarkets.com
Api.sgmarkets.com
advisoryfinancing.sgmarkets.com
www.warrants.com
analytics-webwizard.sgmarkets.com
sso-cert.sgmarkets.com
valuation.sgmarkets.com
www.warrants.com
youtrack-api.sgmarkets.com
fic-uatrc.sgmarkets.com
shared.sgmarkets.com
nirvana-nycprimary.sgmarkets.com
*.sgmarkets.com
riskworkflows.sgmarkets.com
volhub.sgmarkets.com
shared.sgmarkets.com
ic.sgmarkets.com
sp-docapi.sgmarkets.com
sgmarkets.com
custody.sgmarkets.com
sgmarkets.com
Stratlab.sgmarkets.com
cty.sgmarkets.com
myhedge-staging.sgmarkets.com
crossborder-uat.sgmarkets.com
eqdflow-uat.sgmarkets.com
lab.sgmarkets.com
gbds-uat.sgmarkets.com
nirvana-hkprimary.sgmarkets.com
1dfinancing.sgmarkets.com
tradematch-api.sgmarkets.com
Mybilling-h.sgmarkets.com
valuation.sgmarkets.com
myoprisk-h.sgmarkets.com
ushronboard-dev.sgmarkets.com
www.warrants.com
api-z-dev.sgmarkets.com
dt.sgmarkets.com
cty.sgmarkets.com
SSO.sgmarkets.com
riskworkflows.sgmarkets.com
riskworkflows-beta.sgmarkets.com
sso-cert.sgmarkets.com
emars.sgmarkets.com
www.societegenerale.fi
techweek.sgmarkets.com
eqd-uatrc.sgmarkets.com
design.sgmarkets.com
myoprisk.sgmarkets.com
myhedge.sgmarkets.com
riskworkflows-beta.sgmarkets.com
sp-preview.sgmarkets.com
t.sgmarkets.com
billing-v2-h.sgmarkets.com
ic.sgmarkets.com
fic-devint.sgmarkets.com
lisa-preview.sgmarkets.com
sso-uat.sgmarkets.com
cty.sgmarkets.com
kyc.sgmarkets.com
selfcare-hom.sgmarkets.com
finestrat.sgmarkets.com
sgmarkets.com
cty.sgmarkets.com
www.warrants.com
t-monitoring-web-shared.sgmarkets.com
dview.sgmarkets.com
cprofit-datacollect.sgmarkets.com
listedstructuredproducts.com
ic.sgmarkets.com
riskworkflows.sgmarkets.com
Stratlab.sgmarkets.com
crossassetfinancing.sgmarkets.com
cty.sgmarkets.com
cprofit-correction-uat.sgmarkets.com
securitiesservices-api.sgmarkets.com
analytics.sgmarkets.com
analytics.sgmarkets.com
static.sgmarkets.com
advisoryfinancing.sgmarkets.com
listedstructuredproducts.com
www.warrants.com
securitieslending.sgmarkets.com
t-apigateway-kong-test.sgmarkets.com
confirmation.sgmarkets.com
t-helpcenter-widget.sgmarkets.com
design.sgmarkets.com
smartcash-uat.sgmarkets.com
www.warrants.com
tradematch-api.sgmarkets.com
nirvana-parprimary.sgmarkets.com
api-z.sgmarkets.com
developer.sgmarkets.com
api-z-dev.sgmarkets.com
emars.sgmarkets.com
1dfinancing-api.sgmarkets.com
stratlab.sgmarkets.com
sso.sgmarkets.com
creditportfolio-demo.sgmarkets.com
test.sgmarkets.com
Api.sgmarkets.com
advisoryfinancing.sgmarkets.com
www.warrants.com
analytics-webwizard.sgmarkets.com
sso-cert.sgmarkets.com
valuation.sgmarkets.com
www.warrants.com
Certificate
The complete raw certificate details for design.sgmarkets.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGxDCCBaygAwIBAgIQAtdudiuwHeLqg30855Vy/TANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzEyMDcwMDAwMDBa Fw0yNDEyMDcyMzU5NTlaMHMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y YXRpb24xHTAbBgNVBAMTFGRlc2lnbi5zZ21hcmtldHMuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye2BegoznPSql3N6lIuc2ME3sHMecxU++ulM FWgCpknFpVjnFUyk06PS8JCAtUfDrPNw0ovDNDpUZh1DAMimYiysj/zmXHqhWObg 1EJELYaUopdl5+kOWpSf1DGbG5azG+98V6TVtmUhmyriJ7fdiC31q+9SLVlsVQh/ UOdlHG997SsJ+lXzF7+hn7qLkCkMM6BafGKQsd/cGQC2qloUCKilNkjWwQ24BxEp 97dIgMOCqzywIr2+m6upeJsMoGU7Z2cDuE0b1s3f4IXJOYIqVBs4TL2ZZqkcPNQ0 9vsfpPzBope6fCiCMtFk6HPun3b6NWmi8ZuQY2dIphOEQp79rQIDAQABo4IDdjCC A3IwHwYDVR0jBBgwFoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0OBBYEFKUw 33DlJQQXlBODmE4WBGrE8j+IMB8GA1UdEQQYMBaCFGRlc2lnbi5zZ21hcmtldHMu Y29tMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93 d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMIGPBgNVHR8EgYcwgYQwQKA+oDyGOmh0dHA6Ly9j cmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5j cmwwQKA+oDyGOmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JT QVNIQTI1NjIwMjBDQTEtNC5jcmwwfwYIKwYBBQUHAQEEczBxMCQGCCsGAQUFBzAB hhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSQYIKwYBBQUHMAKGPWh0dHA6Ly9j YWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEt MS5jcnQwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYA 7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGMROBfFQAABAMARzBF AiA6Ee4JOljkS+bWz30uq/utYIFm16DXAocO20nmqZcV3wIhAKSQOXPd9hsyKBOo JuO4aPkFEtJbTzBaNQqNAC/vWqo8AHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB 2bu/qznYhHMAAAGMROBe7AAABAMARzBFAiBgE0HBwqfKdlMTmZe0wcVVl8AyhqIO WxJot+7d8WkfRgIhAPs24OzEqNgQ+9vFHJa8uBYw2V7Tyz7v7mGnbDLT91FTAHUA 2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGMROBffAAABAMARjBE AiAciAx28gibtO17OgazsETanbJ2RWQLA5I68rzPYr+SlwIgcOHnEvCl9hDMcsFs CsAg8dNSqBc+f4A4y7H+soeVC5gwDQYJKoZIhvcNAQELBQADggEBACICboeS6x5P j6fREMe0s/BPWK9q/uZ2bCkX/hJs7Yxelqko9Kd99V/EXB3gHUQ4+Xy/bq4M3KEX U9I0KRvRjFuY2YGF0c/qhvIxTK+oLPC/hDEG/HUj+2ovP7oirnO9YMclzc1szEKA gWHGir8JqVxeaVA6330kFMWH4z4IjR6kaaEGJo8fLGj9CVi+IIkVJiH0vMb/KTaL bOMKk7LWqK7kmvQqq/b4hClFlBV1kJPdLIrn2ne8og5cGk4iSFlpcR0wIjq72b8s NIsROVW2S0eqGBbAINmK5hOxESboF6DI8xws5syAou5RFiA2Q7L8QB/Q5z/tJl3/ ErayRpW2+Lk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye2BegoznPSql3N6lIuc 2ME3sHMecxU++ulMFWgCpknFpVjnFUyk06PS8JCAtUfDrPNw0ovDNDpUZh1DAMim Yiysj/zmXHqhWObg1EJELYaUopdl5+kOWpSf1DGbG5azG+98V6TVtmUhmyriJ7fd iC31q+9SLVlsVQh/UOdlHG997SsJ+lXzF7+hn7qLkCkMM6BafGKQsd/cGQC2qloU CKilNkjWwQ24BxEp97dIgMOCqzywIr2+m6upeJsMoGU7Z2cDuE0b1s3f4IXJOYIq VBs4TL2ZZqkcPNQ09vsfpPzBope6fCiCMtFk6HPun3b6NWmi8ZuQY2dIphOEQp79 rQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3777040243655165553940805562515419901 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'design.sgmarkets.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25491017757655540865134876711417141551682534303602671396785249429480862616092972869017102960295663802103311546305829358737697926475844211509165918613137444886850837008052502753135383075657386544259892092736272210543314136076096601762834704085015670028324136938934895726739742443319232776851696116586916025391336924997955376547435850033263305923552910259101990483065248007407315845167887689444522696630716126441932319772021175192855012998145975259748193963764009064891408279374076500479603996106752452430505548996045695488354615447986712911158662533478235891758936263933032633439984365650417279993656660128544495435181 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a530df70e5250417941383984e16046ac4f23f88 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design.sgmarkets.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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