npv.netflixstudios.com
- Netflix, Inc. -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0e:49:d6:0c:a7:f8:12:c0:48:c8:5e:bc:91:db:1f:27 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Netflix, Inc.
Organization:
Netflix, Inc.
Organization unit: Operations
Organization unit: Operations
State / Province:
CA
Locality: Los Gatos
Country: US
Locality: Los Gatos
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:49:d6:0c:a7:f8:12:c0:48:c8:5e:bc:91:db:1f:27Serial Number (int): 18992571050038895059223955158540689191
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 0d:05:6c:ed:a5:b5:0e:30:36:34:82:84:14:a0:93:53:15:4a:67:08
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): a7:38:3d:f6:35:6c:fa:dc:b7:e6:87:ed:3d:b8:4c:37:54:84:6b:e9
Fingerprint (sha256): 1e:db:c5:8d:d9:22:2a:c6:e4:fc:dc:5a:e8:0a:c8:99:44:65:6e:8f:6f:3b:e0:68:4e:e3:50:24:de:b8:9a:de
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate npv.netflixstudios.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for npv.netflixstudios.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
npv.netflixstudios.com
Other certificates including the domain name netflixstudios.com
(limited to 100 certificates)
productionfinance-test.test.netflixstudios.com
gravity-api-uat2.test.finance.netflixstudios.com
mbgitaprod2-api.test.finance.netflixstudios.com
collectionscrudapi.test.netflix.net
npfp.netflixstudios.com
gravity-dev2.test.netflixstudios.com
newprequel.prod.netflixstudios.com
gravity-costcategorysvc-api-dr.prod.finance.netflixstudios.com
barb-uat.test.netflixstudios.com
*.originstory.prod.netflixstudios.com
ctech-flix6-02.prod.prodtech.netflixstudios.com
aryasamajthaltej.com
originstoryol-beta-alb.test.netflixstudios.com
finapp-dev2.test.netflixstudios.com
prodiclewta.test.netflixstudios.com
valuations.prod.netflixstudios.com
appmap.netflixstudios.com
admin.np3.netflixstudios.com
la4s1f1-ad01.nah.la4.netflixstudios.com
finapp-dev1.test.netflixstudios.com
mbjwhitney.test.finance.netflixstudios.com
npfp.prod.netflixstudios.com
np3.netflixstudios.com
SAN-originstoryol-dev-alb.test.netflixstudios.com
orionapi.itp.netflix.net
originstoryworkflowapi.prod.netflixstudios.com
partnerhelp.netflixstudios.com
mbgita5.test.finance.netflixstudios.com
originstoryworkflowapi.prod.netflixstudios.com
prodicle-assets.prod.netflixstudios.com
minerva-beta.itp.netflix.net
finapp-dev2.test.netflixstudios.com
*.prodicledistribution-sre.test.netflixstudios.com
oldprequel.prod.netflixstudios.com
creative-technology-tools.netflixstudios.com
gravity-int-api.prod.finance.netflixstudios.com
help.netflixstudios.com
prequel-beta.test.netflixstudios.com
hubble-staging.prod.netflixstudios.com
sidekiq.prodiclemove.prod.netflixstudios.com
prequel-beta.test.netflixstudios.com
mbdeletetest-int.test.finance.netflixstudios.com
gravity-batch-api-dev.test.finance.netflixstudios.com
gravity-calcservice-api.prod.finance.netflixstudios.com
pse-p4d-svr.prod.prodtech.netflixstudios.com
Ism.netflixstudios.com
sidekiq.prodiclecalendar.prod.netflixstudios.com
events.prodiclemessaging-dev.test.netflixstudios.com
partnerhelp.netflixstudios.com
orionapi-test.test.netflixstudios.com
npv.netflixstudios.com
*.test.netflixstudios.com
*.test.netflixstudios.com
*.originstory.test.netflixstudios.com
norwaysavings.wallit.app
prequel-beta.test.netflixstudios.com
originstoryol-prod-alb.prod.netflixstudios.com
gravity-api.prod.finance.netflixstudios.com
mbaniruddha4fxupdate-int.test.finance.netflixstudios.com
originstoryworkflowproxy-dev.test.netflixstudios.com
*.crossfire.test.finance.netflixstudios.com
ptap.netflixstudios.com
hubble-adhoc.test.netflixstudios.com
turbo.test.netflixstudios.com
gravity-costcategorysvc-api-dev4.test.finance.netflixstudios.com
prodiclewtb.prod.netflixstudios.com
mbgita4.test.finance.netflixstudios.com
finapp-dev-4.test.netflixstudios.com
releasehub.netflixstudios.com
watson-beta.itp.netflix.net
gravity-api-dev3.test.finance.netflixstudios.com
sherlock-test.netflix.com
sgactionpost.staging.netflixstudios.com
nptap.netflixstudios.com
originstory.prod.netflixstudios.com
mbgitaprod2.test.finance.netflixstudios.com
nomi.netflixstudios.com
gravity-batch-api.prod.finance.netflixstudios.com
*.originstory-dev.test.netflixstudios.com
productionfinance-test.test.netflixstudios.com
finapp-sandbox.test.netflixstudios.com
dr.gravity.prod.netflixstudios.com
originstory-stage.prod.netflixstudios.com
hubble-adhoc.test.netflixstudios.com
prequel-api.test.netflixstudios.com
npv.netflixstudios.com
npfp.test.netflixstudios.com
gravity-costcategorysvc-api.prod.finance.netflixstudios.com
meechum.prod.netflix.net
mb-api.test.finance.netflixstudios.com
gravity-api-dev1.test.finance.netflixstudios.com
siworkstation.int.stable.us-west-2.test.netflixstudios.com
ctech-flix6-04.prod.prodtech.netflixstudios.com
turbo.test.netflixstudios.com
oldprequel.prod.netflixstudios.com
orion-ldsa-api-uat2.test.netflixstudios.com
swordfish.prod.netflix.net
stash.netflixstudios.com
mbaniruddhad3344.test.finance.netflixstudios.com
npfp.test.netflixstudios.com
gravity-api-uat2.test.finance.netflixstudios.com
mbgitaprod2-api.test.finance.netflixstudios.com
collectionscrudapi.test.netflix.net
npfp.netflixstudios.com
gravity-dev2.test.netflixstudios.com
newprequel.prod.netflixstudios.com
gravity-costcategorysvc-api-dr.prod.finance.netflixstudios.com
barb-uat.test.netflixstudios.com
*.originstory.prod.netflixstudios.com
ctech-flix6-02.prod.prodtech.netflixstudios.com
aryasamajthaltej.com
originstoryol-beta-alb.test.netflixstudios.com
finapp-dev2.test.netflixstudios.com
prodiclewta.test.netflixstudios.com
valuations.prod.netflixstudios.com
appmap.netflixstudios.com
admin.np3.netflixstudios.com
la4s1f1-ad01.nah.la4.netflixstudios.com
finapp-dev1.test.netflixstudios.com
mbjwhitney.test.finance.netflixstudios.com
npfp.prod.netflixstudios.com
np3.netflixstudios.com
SAN-originstoryol-dev-alb.test.netflixstudios.com
orionapi.itp.netflix.net
originstoryworkflowapi.prod.netflixstudios.com
partnerhelp.netflixstudios.com
mbgita5.test.finance.netflixstudios.com
originstoryworkflowapi.prod.netflixstudios.com
prodicle-assets.prod.netflixstudios.com
minerva-beta.itp.netflix.net
finapp-dev2.test.netflixstudios.com
*.prodicledistribution-sre.test.netflixstudios.com
oldprequel.prod.netflixstudios.com
creative-technology-tools.netflixstudios.com
gravity-int-api.prod.finance.netflixstudios.com
help.netflixstudios.com
prequel-beta.test.netflixstudios.com
hubble-staging.prod.netflixstudios.com
sidekiq.prodiclemove.prod.netflixstudios.com
prequel-beta.test.netflixstudios.com
mbdeletetest-int.test.finance.netflixstudios.com
gravity-batch-api-dev.test.finance.netflixstudios.com
gravity-calcservice-api.prod.finance.netflixstudios.com
pse-p4d-svr.prod.prodtech.netflixstudios.com
Ism.netflixstudios.com
sidekiq.prodiclecalendar.prod.netflixstudios.com
events.prodiclemessaging-dev.test.netflixstudios.com
partnerhelp.netflixstudios.com
orionapi-test.test.netflixstudios.com
npv.netflixstudios.com
*.test.netflixstudios.com
*.test.netflixstudios.com
*.originstory.test.netflixstudios.com
norwaysavings.wallit.app
prequel-beta.test.netflixstudios.com
originstoryol-prod-alb.prod.netflixstudios.com
gravity-api.prod.finance.netflixstudios.com
mbaniruddha4fxupdate-int.test.finance.netflixstudios.com
originstoryworkflowproxy-dev.test.netflixstudios.com
*.crossfire.test.finance.netflixstudios.com
ptap.netflixstudios.com
hubble-adhoc.test.netflixstudios.com
turbo.test.netflixstudios.com
gravity-costcategorysvc-api-dev4.test.finance.netflixstudios.com
prodiclewtb.prod.netflixstudios.com
mbgita4.test.finance.netflixstudios.com
finapp-dev-4.test.netflixstudios.com
releasehub.netflixstudios.com
watson-beta.itp.netflix.net
gravity-api-dev3.test.finance.netflixstudios.com
sherlock-test.netflix.com
sgactionpost.staging.netflixstudios.com
nptap.netflixstudios.com
originstory.prod.netflixstudios.com
mbgitaprod2.test.finance.netflixstudios.com
nomi.netflixstudios.com
gravity-batch-api.prod.finance.netflixstudios.com
*.originstory-dev.test.netflixstudios.com
productionfinance-test.test.netflixstudios.com
finapp-sandbox.test.netflixstudios.com
dr.gravity.prod.netflixstudios.com
originstory-stage.prod.netflixstudios.com
hubble-adhoc.test.netflixstudios.com
prequel-api.test.netflixstudios.com
npv.netflixstudios.com
npfp.test.netflixstudios.com
gravity-costcategorysvc-api.prod.finance.netflixstudios.com
meechum.prod.netflix.net
mb-api.test.finance.netflixstudios.com
gravity-api-dev1.test.finance.netflixstudios.com
siworkstation.int.stable.us-west-2.test.netflixstudios.com
ctech-flix6-04.prod.prodtech.netflixstudios.com
turbo.test.netflixstudios.com
oldprequel.prod.netflixstudios.com
orion-ldsa-api-uat2.test.netflixstudios.com
swordfish.prod.netflix.net
stash.netflixstudios.com
mbaniruddhad3344.test.finance.netflixstudios.com
npfp.test.netflixstudios.com
Certificate
The complete raw certificate details for npv.netflixstudios.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIQDknWDKf4EsBIyF68kdsfJzANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwNDA2MDAwMDAwWhcN MTkwNDA2MTIwMDAwWjB8MQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExEjAQBgNV BAcTCUxvcyBHYXRvczEWMBQGA1UEChMNTmV0ZmxpeCwgSW5jLjETMBEGA1UECxMK T3BlcmF0aW9uczEfMB0GA1UEAxMWbnB2Lm5ldGZsaXhzdHVkaW9zLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMNrRFTPgaYFu7v3QLf9Z/lzROWl qViZeqKt+1u8injgQsit7mGCT1wWYfIVNVyqZizJW3FDNqJcuAEraDV7EFghwL4y TzIhBgSHvedfUjzt4ETiv0E7snbVmu6WugbRAV+lY3+yI2mKd5qw5wVMDpoB2XID Wn9n/+DE7mjrKMzWIuOqrF9K3wPl/H7W+KZzlcS60iHSFV3purt51mn7zoqkFJpn Knz1e30Vb2F7rjXMw/0G96zkhCC0wYzgx9u5FQ3hnFTBBqD5LPjCCbZzlPAhVd46 lObNO9dkpwSxCKR/Re6yhzlMClqWMZy1z7Cv+s1pmpAc1BdQWjU+QT643ccCAwEA AaOCAfIwggHuMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1Ud DgQWBBQNBWztpbUOMDY0goQUoJNTFUpnCDAhBgNVHREEGjAYghZucHYubmV0Zmxp eHN0dWRpb3MuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNl cnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2lj ZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEB MCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYG Z4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3Au ZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2Vy dC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQC MAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBADnrgyBS DHv863y7OE4g+UoXbaVe4otkomFWtECOZkUIkbtS/eyoy9DGw1BoZeULU3Hfn0mR wi66D+euwuxH1IpLiggTZPLCOJSMaDaKOizOSMalsTOEHpagQH3D6g3Wt8ChnU4j 3K8GS0Sn3/YiaMlNmzhx8U10lhjzc1xtcz7spQuPJBG565kUccYKYwqvLlCDPVSm 64wI/rN3SX05TeFLAGdjdIQlsTc+eWuSoet5WMppV1Xt5wfnOqjilnN4rkFrXIxl iLXKrnBxmb+ZZRf2J/FvkiTk9PMtIOvGS/QlBiVdoS6RitsNo8pT5LTOtixus0Jy iPBqo3safIpgbb8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2tEVM+BpgW7u/dAt/1n +XNE5aWpWJl6oq37W7yKeOBCyK3uYYJPXBZh8hU1XKpmLMlbcUM2oly4AStoNXsQ WCHAvjJPMiEGBIe9519SPO3gROK/QTuydtWa7pa6BtEBX6Vjf7IjaYp3mrDnBUwO mgHZcgNaf2f/4MTuaOsozNYi46qsX0rfA+X8ftb4pnOVxLrSIdIVXem6u3nWafvO iqQUmmcqfPV7fRVvYXuuNczD/Qb3rOSEILTBjODH27kVDeGcVMEGoPks+MIJtnOU 8CFV3jqU5s0712SnBLEIpH9F7rKHOUwKWpYxnLXPsK/6zWmakBzUF1BaNT5BPrjd xwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18992571050038895059223955158540689191 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-06 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Los Gatos' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Netflix, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Operations' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'npv.netflixstudios.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24669364757627338199936122458920925914137932734967989900292432634247686824535087949853908583410893315772555586407736190198129361691718730660958252039490151747972011786940052051114947320463366227994174873601807631806525279480691178304750752694870529532927656010845822733294016942699366614469058043638492707537453268449620896223064853596629126380602316034753261519334856330241904912734715659649146300307209650662450999438750567870763533365953830880312113965453550771394690216084464554733970244787060833607799148996173002641195888323125867570874667754391068227030629474584370701354701413677505156859167462836928725441991 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0d056ceda5b50e303634828414a09353154a6708 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npv.netflixstudios.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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