mail.salisburymgt.com
- Salisbury House Management, Inc -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0a:42:9b:19:14:cb:67:50:c7:e5:00:ed:b2:c3:37:06 was issued on by DigiCert Inc.
With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DNSNames must have a valid TLD. (BRs: 3.2.2.4)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Salisbury House Management, Inc
Organization:
Salisbury House Management, Inc
Organization unit: Info Services
Organization unit: Info Services
State / Province:
Maryland
Locality: Baltimore
Country: US
Locality: Baltimore
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:42:9b:19:14:cb:67:50:c7:e5:00:ed:b2:c3:37:06Serial Number (int): 13638117311140686249745087594382964486
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: ef:6a:0d:4c:b7:f5:a9:ef:94:04:87:72:33:64:3e:ec:e8:99:f4:44
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): f4:95:1e:d6:c7:59:51:52:44:44:ad:b2:2c:97:8d:71:c3:61:b0:1a
Fingerprint (sha256): 1d:0d:a4:44:0e:fe:d5:fc:b1:60:ca:62:2b:60:09:e2:77:ba:c0:eb:a3:bc:7d:1b:2d:fb:43:dc:a6:f4:5f:5f
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g3.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g3.crl
Check the revocation status for certificate mail.salisburymgt.com
14
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.salisburymgt.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.salisburymgt.com
autodiscover.salisburymgt.com
mail.pahrtners.com
mail.salisb.com
mail.grhorizons.com
autodiscover.salisbury.internal
sbhexch01.salisbury.internal
mail.newstory.com
autodiscover.newstory.com
autodiscover.sbhmgmt.com
autodiscover.salisb.com
autodiscover.pahrtners.com
autodiscover.grhorizons.com
securemail.salisburymgt.com
autodiscover.salisburymgt.com
mail.pahrtners.com
mail.salisb.com
mail.grhorizons.com
autodiscover.salisbury.internal
sbhexch01.salisbury.internal
mail.newstory.com
autodiscover.newstory.com
autodiscover.sbhmgmt.com
autodiscover.salisb.com
autodiscover.pahrtners.com
autodiscover.grhorizons.com
securemail.salisburymgt.com
Other certificates including the domain name salisburymgt.com
(limited to 100 certificates)
salisburymgt.com
mail.salisburymgt.com
mail.salisburymgt.com
salisburymgt.com
salisburymgt.com
mail.salisburymgt.com
mail.salisburymgt.com
salisburymgt.com
cpcalendars.salisburymgt.com
salisburymgt.com
salisburymgt.com
salisburymgt.com
salisburymgt.com
salisburymgt.com
mail.salisburymgt.com
salisburymgt.com
salisburymgt.com
salisburymgt.com
mail.salisburymgt.com
mail.salisburymgt.com
salisburymgt.com
salisburymgt.com
mail.salisburymgt.com
mail.salisburymgt.com
salisburymgt.com
cpcalendars.salisburymgt.com
salisburymgt.com
salisburymgt.com
salisburymgt.com
salisburymgt.com
salisburymgt.com
mail.salisburymgt.com
salisburymgt.com
salisburymgt.com
salisburymgt.com
Certificate
The complete raw certificate details for mail.salisburymgt.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIQCkKbGRTLZ1DH5QDtssM3BjANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTQxMTA3MDAwMDAwWhcN MTUxMDIwMTIwMDAwWjCBljELMAkGA1UEBhMCVVMxEjAQBgNVBAcTCUJhbHRpbW9y ZTERMA8GA1UECBMITWFyeWxhbmQxKDAmBgNVBAoTH1NhbGlzYnVyeSBIb3VzZSBN YW5hZ2VtZW50LCBJbmMxFjAUBgNVBAsTDUluZm8gU2VydmljZXMxHjAcBgNVBAMT FW1haWwuc2FsaXNidXJ5bWd0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAJhLPM/xVe4Ox9yEkFfF5mMlppRuP3lFxTxHNpr7Efm+kRGvL8DHyq0s DtWiA84cHbvCbyqv8vNWf8dyVI9OQbO0eJenKBH0OzgiiIXEELP3l3A9hDa8ba/a iaErvKIAO9nW0qT8Il3Y0wqlWpXU9dWckt2lnOysDuIWujDz8yOozVDlPz8JSz+r zPCxFrs2qiQ8/1HbjCH4l72BwgRNj+u+jFXS3WF1gJRcCndIeDKCR7kf6iJ9JXsu S8C+dsVgno5Z6pA3pq3zzFEsukK/c26/4oz2L9qfj1RIm37SJWJb3qxB7ikqtcxM PX8QkmtG1y6k5tR4kvUSimD6A7eGnBsCAwEAAaOCAycwggMjMB8GA1UdIwQYMBaA FA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBTvag1Mt/Wp75QEh3IzZD7s 6Jn0RDCCAXMGA1UdEQSCAWowggFmghVtYWlsLnNhbGlzYnVyeW1ndC5jb22CHWF1 dG9kaXNjb3Zlci5zYWxpc2J1cnltZ3QuY29tghJtYWlsLnBhaHJ0bmVycy5jb22C D21haWwuc2FsaXNiLmNvbYITbWFpbC5ncmhvcml6b25zLmNvbYIfYXV0b2Rpc2Nv dmVyLnNhbGlzYnVyeS5pbnRlcm5hbIIcc2JoZXhjaDAxLnNhbGlzYnVyeS5pbnRl cm5hbIIRbWFpbC5uZXdzdG9yeS5jb22CGWF1dG9kaXNjb3Zlci5uZXdzdG9yeS5j b22CGGF1dG9kaXNjb3Zlci5zYmhtZ210LmNvbYIXYXV0b2Rpc2NvdmVyLnNhbGlz Yi5jb22CGmF1dG9kaXNjb3Zlci5wYWhydG5lcnMuY29tghthdXRvZGlzY292ZXIu Z3Job3Jpem9ucy5jb22CG3NlY3VyZW1haWwuc2FsaXNidXJ5bWd0LmNvbTAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1Ud HwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTIt ZzMuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc3NjYS1zaGEy LWczLmNybDBCBgNVHSAEOzA5MDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxo dHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHwGCCsGAQUFBwEBBHAwbjAkBggr BgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpo dHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2Vy dmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBAKBmFR7C 0h7moofZPFckLoXeAkgQo5+FKLGFRF7y1xigZnLtQLyzElafXKwlJjxeZlompOal oCLQcYDpSuqVABVuQofp3aIbinnL2egnfsWBkUwhTuIx3JUkALUXhBgjwvBtT+s/ 7Enz5PUaRZULNfidzM5zjoFKTNZ0g8BM2PI279YF9ScjJeJEzLgcV0Lh/HxUadq1 TyMtMsvSSWRSAo/w8ln65wD2JcNsA5w8kyQJ7uJSCZUtD+mEAeDm8isf5dehZsYQ ycLhxWGESyaQohmahzIcc0mJV/epsG38NJzrgEfCcw95SyESu2LN40dhXl1tpQVg yoWFSPWwmg08hk0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEs8z/FV7g7H3ISQV8Xm YyWmlG4/eUXFPEc2mvsR+b6REa8vwMfKrSwO1aIDzhwdu8JvKq/y81Z/x3JUj05B s7R4l6coEfQ7OCKIhcQQs/eXcD2ENrxtr9qJoSu8ogA72dbSpPwiXdjTCqValdT1 1ZyS3aWc7KwO4ha6MPPzI6jNUOU/PwlLP6vM8LEWuzaqJDz/UduMIfiXvYHCBE2P 676MVdLdYXWAlFwKd0h4MoJHuR/qIn0ley5LwL52xWCejlnqkDemrfPMUSy6Qr9z br/ijPYv2p+PVEibftIlYlverEHuKSq1zEw9fxCSa0bXLqTm1HiS9RKKYPoDt4ac GwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13638117311140686249745087594382964486 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-20 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baltimore' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salisbury House Management, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Info Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.salisburymgt.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19225323372510923846236777634485442999253591679967256316747051843717254312075846624897357196234960192764271097617097756813369439987745268528340830547190849961960978446744278351816499798462861416206692819209453454615452037591305528470468711847677034125992116695628815526205924659490733375499191173235611694650092340240708389733528629970809532328867202450373746126739489298364091625621278273200203965692170761904740228867529841748773651437923010315517835254669261525955604498255878834547701833513777284267704679800714437349401000485776404152370222114019601978368661874154221313190101369705242819983861073222381666212891 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ef6a0d4cb7f5a9ef9404877233643eece899f444 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.salisburymgt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.salisburymgt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pahrtners.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.salisb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.grhorizons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.salisbury.internal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbhexch01.salisbury.internal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.newstory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sbhmgmt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.salisb.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pahrtners.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.grhorizons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.salisburymgt.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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