id.randstad.com
- Randstad Nederland B.V. -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 03:ec:af:3d:eb:31:19:85:b8:81:26:2a:31:9b:4b:ef was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Randstad Nederland B.V.
Organization:
Randstad Nederland B.V.
Organization unit: Randstad Nederland IT
Organization unit: Randstad Nederland IT
State / Province:
Noord Holland
Locality: Diemen
Country: NL
Locality: Diemen
Country: NL
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ec:af:3d:eb:31:19:85:b8:81:26:2a:31:9b:4b:efSerial Number (int): 5216620373355854550544593351715015663
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: a1:b4:13:94:dc:a0:8c:c5:01:15:4b:60:33:dc:b4:1f:e2:2b:6b:cb
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 65:4c:99:58:2a:41:05:ff:01:68:b7:9d:c4:f9:22:51:68:96:f4:7b
Fingerprint (sha256): 1e:ae:25:9d:99:7a:86:e9:59:79:8e:4a:be:54:13:7c:63:2e:cf:68:84:af:d1:5b:f6:1a:33:f1:ce:90:5a:98
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl
Check the revocation status for certificate id.randstad.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for id.randstad.com
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
id.randstad.com
Other certificates including the domain name randstad.com
(limited to 100 certificates)
brandportal.randstad.com
brandportal.randstad.com
*.us.randstad.com
cloud.rsmsg.randstad.com
www.workplace.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
prism.us.randstad.com
*.us.randstad.com
chat.randstad.com
www.marcom.randstad.com
akamai-san78.exacttarget.com
san-19-s50.tlsprovisioning.exacttarget.com
chat.randstad.com
*.us.randstad.com
*.us.randstad.com
truepotential.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
kwx.id.lv
www.hidrolig.com
brandportal.randstad.com
qa.chat.randstad.com
onestopshop.tst.randstad.com
www.workplace.randstad.com
*.us.randstad.com
global-parser-dev.randstad.com
allbirds-tool.randstad.com
www.workplace.randstad.com
secure0095.hubspot.com
contentlibrary.randstad.com
www.templates.randstad.com
kwx.id.lv
brandportal.randstad.com
prismext.us.randstad.com
global-parser.randstad.com
www.workplace.randstad.com
reports.softech.cloud
secure0095.hubspot.com
san-19-s50.tlsprovisioning.exacttarget.com
view.rsmsg.randstad.com
*.us.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
relevate-interview-anz.randstad.com
workforce360.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
www.backoffice.toption.randstad.com
www.workplace.randstad.com
*.us.randstad.com
*.us.randstad.com
qa.eu-chat.randstad.com
www.backoffice.toption.randstad.com
www.iam.randstad.com
akamai-san78.exacttarget.com
*.us.randstad.com
oa.us.randstad.com
*.us.randstad.com
www.marcom.randstad.com
workaniser.randstad.com
f.runlevel.pl
id.randstad.com
warsaw-reporting-acc.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
1000dred.com
qa.eu-chat.randstad.com
brandportalrandstad.bynder.com
gtk.randstad.com
warsaw-reporting.randstad.com
sms.saler.ca
click.email.randstad.com
colab.pagow.app
www.japaan.jp
test.randstad.com
relevate-interview-eu-qa.randstad.com
connect.dev.randstad.com
saascake.com
www.careers.us.randstad.com
infocenter.randstad.com
relevate-interview-eu.randstad.com
discord.kkkepic.com.br
workforceinsights.randstad.com
www.reg.randstad.com
*.us.randstad.com
edi.us.randstad.com
secure0095.hubspot.com
digitalsupport.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
www.selfservice.us.randstad.com
secure0095.hubspot.com
auth.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
prismextqa.int.us.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
cloud.airlive.com
www.careers.us.randstad.com
brandportal.randstad.com
www.iam.randstad.com
warsaw-fircosoft.randstad.com
touchingworklives.randstad.com
warsaw-fircosoft.randstad.com
infocenter.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
brandportal.randstad.com
*.us.randstad.com
cloud.rsmsg.randstad.com
www.workplace.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
prism.us.randstad.com
*.us.randstad.com
chat.randstad.com
www.marcom.randstad.com
akamai-san78.exacttarget.com
san-19-s50.tlsprovisioning.exacttarget.com
chat.randstad.com
*.us.randstad.com
*.us.randstad.com
truepotential.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
kwx.id.lv
www.hidrolig.com
brandportal.randstad.com
qa.chat.randstad.com
onestopshop.tst.randstad.com
www.workplace.randstad.com
*.us.randstad.com
global-parser-dev.randstad.com
allbirds-tool.randstad.com
www.workplace.randstad.com
secure0095.hubspot.com
contentlibrary.randstad.com
www.templates.randstad.com
kwx.id.lv
brandportal.randstad.com
prismext.us.randstad.com
global-parser.randstad.com
www.workplace.randstad.com
reports.softech.cloud
secure0095.hubspot.com
san-19-s50.tlsprovisioning.exacttarget.com
view.rsmsg.randstad.com
*.us.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
relevate-interview-anz.randstad.com
workforce360.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
www.backoffice.toption.randstad.com
www.workplace.randstad.com
*.us.randstad.com
*.us.randstad.com
qa.eu-chat.randstad.com
www.backoffice.toption.randstad.com
www.iam.randstad.com
akamai-san78.exacttarget.com
*.us.randstad.com
oa.us.randstad.com
*.us.randstad.com
www.marcom.randstad.com
workaniser.randstad.com
f.runlevel.pl
id.randstad.com
warsaw-reporting-acc.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
1000dred.com
qa.eu-chat.randstad.com
brandportalrandstad.bynder.com
gtk.randstad.com
warsaw-reporting.randstad.com
sms.saler.ca
click.email.randstad.com
colab.pagow.app
www.japaan.jp
test.randstad.com
relevate-interview-eu-qa.randstad.com
connect.dev.randstad.com
saascake.com
www.careers.us.randstad.com
infocenter.randstad.com
relevate-interview-eu.randstad.com
discord.kkkepic.com.br
workforceinsights.randstad.com
www.reg.randstad.com
*.us.randstad.com
edi.us.randstad.com
secure0095.hubspot.com
digitalsupport.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
www.selfservice.us.randstad.com
secure0095.hubspot.com
auth.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
prismextqa.int.us.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
cloud.airlive.com
www.careers.us.randstad.com
brandportal.randstad.com
www.iam.randstad.com
warsaw-fircosoft.randstad.com
touchingworklives.randstad.com
warsaw-fircosoft.randstad.com
infocenter.randstad.com
san-19-s50.tlsprovisioning.exacttarget.com
Certificate
The complete raw certificate details for id.randstad.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIQA+yvPesxGYW4gSYqMZtL7zANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xNzAzMDYwMDAwMDBaFw0xODA0MzAxMjAwMDBa MIGSMQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQgSG9sbGFuZDEPMA0GA1UE BxMGRGllbWVuMSAwHgYDVQQKExdSYW5kc3RhZCBOZWRlcmxhbmQgQi5WLjEeMBwG A1UECxMVUmFuZHN0YWQgTmVkZXJsYW5kIElUMRgwFgYDVQQDEw9pZC5yYW5kc3Rh ZC5jb20wggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQChEPZj6W7GGZOb PxrTiIOt/xcgQ0tby2THt5YsrhSCXav1qzjT8X05SE/nkLohOgom+5HneS9RMcRg z2fpvOsxKRZOIrmB04HOLWyyue/t83h7nFCK3z+k/HVLo75uipCq5AZggedTAaxs jHkCfWFnYLaaROu3JUJhSNXRE96gMX5UXxtI2pyDvxnL7q9SoD+L5zDmnX1ffIgS IZ8D3PQFKpaW14DiL/fw6Onym6m3OdRRXWodR0Ke+DsfKULR39h0RUogryzhvJXc AqZjpPHENv2IJt+kDLCQosvnA751CKCpu8cRRaDhpAAABOisztjlAt3FZNRK7VhC /Q/NKch1PZ73DFtCFDMGUc6N2D+LS720zAgeBO2/Qv3znef/ooZBKd27UgPK1gXf zh32bMl26ylMS3epvn9qVV3k0EqNMXZOvkNfgmTg6WU0+e8+j0jaMVoasStvNzxc GeFgzrTBM4Sz6pqAmi9jEyeVm6Tu6eNt6PqL/rH+lp9tS5NA4oMCAwEAAaOCAegw ggHkMB8GA1UdIwQYMBaAFFFo/5CvAgd1PMzZZWRiohK4WXI7MB0GA1UdDgQWBBSh tBOU3KCMxQEVS2Az3LQf4itryzAaBgNVHREEEzARgg9pZC5yYW5kc3RhZC5jb20w DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1 BgNVHR8EbjBsMDSgMqAwhi5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1o YS1zZXJ2ZXItZzUuY3JsMDSgMqAwhi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20v c2hhMi1oYS1zZXJ2ZXItZzUuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCow KAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EM AQICMIGDBggrBgEFBQcBAQR3MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRp Z2ljZXJ0LmNvbTBNBggrBgEFBQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNlcnQu Y29tL0RpZ2lDZXJ0U0hBMkhpZ2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwDAYDVR0T AQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAQEAi55RRS+bKNYTrC6+tUdtwsfHlKHC gv3NVkt+WalwBlg21hLqhtmmNMGmAk8LBZyLfrAl31ADYzpmlYCrhsCNCbA0yp5U vszYphqLoZf4eQ3BLhsm+w3YOedrAgvXZVvhK9p5cAkDLUGdwrIbAd/GGekycWY2 JMzUJKt0g4kH9a4Acj0V1sxJFRGO+TRU4BcQEiLjfk1ujIpTpMWgQnUSWlRjRTlU KSnzh5/9ptN5TCbLDLog1ga/jWhPakUlff1dQnax8ilkc9yTQvTD5XYchZBrYlcD Q6YRP/KM5lyvmU/dG5HFIA/QeAojdypx9EviZM6P5Q3JnlhC0J0u1/v4Xw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAoRD2Y+luxhmTmz8a04iD rf8XIENLW8tkx7eWLK4Ugl2r9as40/F9OUhP55C6IToKJvuR53kvUTHEYM9n6bzr MSkWTiK5gdOBzi1ssrnv7fN4e5xQit8/pPx1S6O+boqQquQGYIHnUwGsbIx5An1h Z2C2mkTrtyVCYUjV0RPeoDF+VF8bSNqcg78Zy+6vUqA/i+cw5p19X3yIEiGfA9z0 BSqWlteA4i/38Ojp8puptznUUV1qHUdCnvg7HylC0d/YdEVKIK8s4byV3AKmY6Tx xDb9iCbfpAywkKLL5wO+dQigqbvHEUWg4aQAAATorM7Y5QLdxWTUSu1YQv0PzSnI dT2e9wxbQhQzBlHOjdg/i0u9tMwIHgTtv0L9853n/6KGQSndu1IDytYF384d9mzJ duspTEt3qb5/alVd5NBKjTF2Tr5DX4Jk4OllNPnvPo9I2jFaGrErbzc8XBnhYM60 wTOEs+qagJovYxMnlZuk7unjbej6i/6x/pafbUuTQOKDAgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5216620373355854550544593351715015663 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-30 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Diemen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Randstad Nederland B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Randstad Nederland IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'id.randstad.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3655201201267943401833749884580299444645817346581896704864672099636894166228712902262885550928134690470063111871510992220323747539412661700025353155289430440172056579369899005681977383649713678315517687261422658115174591208156705077868553107940807598569055314132363277914395415814731831402687155374690988196210909085773413353804619009051920875279156568382285476513056552846951666075015015172567704430015606049094038675552960324743818365292079208090578061489368362432747376665124998191212242847672107872808615678724399616839355966867518923831578608117527151523114619410707522846982281374663334891642174660657089285713081426896359920600822265265761158061309196297528414058911444716875002997810452345475749663122619882942822044937040546517554722557028218539972033843351018681305940290754083532869522517907108129687729472372407607027742271931625717273442832006349288505393433167960321338567153892835432389325387907558535627596419 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a1b41394dca08cc501154b6033dcb41fe22b6bcb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.randstad.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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