www.staplespreferred.ca
- Staples, Inc. -
Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 0c:eb:68:7c:01:c8:ed:22:15:e7:02:cb:20:30:1e:28 was issued on by DigiCert Inc.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Staples, Inc.
Organization:
Staples, Inc.
State / Province:
Massachusetts
Locality: Framingham
Country: US
Locality: Framingham
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0c:eb:68:7c:01:c8:ed:22:15:e7:02:cb:20:30:1e:28Serial Number (int): 17173044906617996513420546255879151144
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 42:b4:c4:71:9b:a7:e9:a9:0b:a9:ae:bc:03:6b:21:55:d2:0c:b4:db
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17
Fingerprint (sha1): 5b:50:7c:59:80:24:cc:32:31:81:c1:63:ef:ad:0b:58:5d:d2:0b:17
Fingerprint (sha256): 1f:0b:d3:d2:36:b0:62:b6:df:36:b0:6a:2a:c3:10:58:75:d1:d6:b8:17:32:a3:1a:ba:c2:f2:cf:1e:b8:f8:17
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
Check the revocation status for certificate www.staplespreferred.ca
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.staplespreferred.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.staplespreferred.ca
bureauengrosprivilege.ca
bureauengrosprivilege.com
creative.staplespreferred.ca
new.staplespreferred.ca
staplespreferred.ca
staplespreferred.com
thor-creative.staples.com
thor-perf.staples.com
www.BureauEnGrosPrivilege.ca
www.BureauEnGrosPrivilege.com
www.staplespreferred.com
bureauengrosprivilege.ca
bureauengrosprivilege.com
creative.staplespreferred.ca
new.staplespreferred.ca
staplespreferred.ca
staplespreferred.com
thor-creative.staples.com
thor-perf.staples.com
www.BureauEnGrosPrivilege.ca
www.BureauEnGrosPrivilege.com
www.staplespreferred.com
Other certificates including the domain name staplespreferred.ca
(limited to 100 certificates)
www.staplespreferred.ca
weeklyad.staplespreferred.ca
smetrics.staplespreferred.ca
weeklyad.staplespreferred.ca
powdps.staplespreferred.ca
powdps.staplespreferred.ca
www.staplespreferred.ca
smetrics.staplespreferred.ca
powdps.staplespreferred.ca
www.staplespreferred.ca
powdps.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
smetrics.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
powdps.staplespreferred.ca
weeklyad.staplespreferred.ca
www.staplespreferred.ca
powdps.staplespreferred.ca
smetrics.staplespreferred.ca
weeklyad.staplespreferred.ca
powdps.staplespreferred.ca
smetrics.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
weeklyad.staplespreferred.ca
www.staplespreferred.ca
powdps.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
weeklyad.staplespreferred.ca
www.staplespreferred.ca
smetrics.staplespreferred.ca
smetrics.staplespreferred.ca
weeklyad.staplespreferred.ca
www.staplespreferred.ca
powdps.staplespreferred.ca
smetrics.staplespreferred.ca
www.staplespreferred.ca
weeklyad.staplespreferred.ca
powdps.staplespreferred.ca
weeklyad.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
weeklyad.staplespreferred.ca
weeklyad.staplespreferred.ca
smetrics.staplespreferred.ca
weeklyad.staplespreferred.ca
powdps.staplespreferred.ca
powdps.staplespreferred.ca
www.staplespreferred.ca
smetrics.staplespreferred.ca
powdps.staplespreferred.ca
www.staplespreferred.ca
powdps.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
smetrics.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
powdps.staplespreferred.ca
weeklyad.staplespreferred.ca
www.staplespreferred.ca
powdps.staplespreferred.ca
smetrics.staplespreferred.ca
weeklyad.staplespreferred.ca
powdps.staplespreferred.ca
smetrics.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
weeklyad.staplespreferred.ca
www.staplespreferred.ca
powdps.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
weeklyad.staplespreferred.ca
www.staplespreferred.ca
smetrics.staplespreferred.ca
smetrics.staplespreferred.ca
weeklyad.staplespreferred.ca
www.staplespreferred.ca
powdps.staplespreferred.ca
smetrics.staplespreferred.ca
www.staplespreferred.ca
weeklyad.staplespreferred.ca
powdps.staplespreferred.ca
weeklyad.staplespreferred.ca
www.staplespreferred.ca
www.staplespreferred.ca
weeklyad.staplespreferred.ca
Certificate
The complete raw certificate details for www.staplespreferred.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIETCCBvmgAwIBAgIQDOtofAHI7SIV5wLLIDAeKDANBgkqhkiG9w0BAQsFADBZ MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjQw NDI0MDAwMDAwWhcNMjUwNTE2MjM1OTU5WjB0MQswCQYDVQQGEwJVUzEWMBQGA1UE CBMNTWFzc2FjaHVzZXR0czETMBEGA1UEBxMKRnJhbWluZ2hhbTEWMBQGA1UEChMN U3RhcGxlcywgSW5jLjEgMB4GA1UEAxMXd3d3LnN0YXBsZXNwcmVmZXJyZWQuY2Ew ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXVtl0FHN9doig34Gfu8Df 0TkvOCcHgtEsE+maZCGWZrQ9HzoTpJS3utvDEWcxYSMYMp19oDy9nTJQ05W/A+LF dUCCiGQmG0cd+N6o093ItWxD2IhOdE5evVZ5xsZRjqAoYSOiDbewkMAUN0f8eEo+ V3dIfgb+uBBsSCmTqY68F3c+pvaUbbjI0On9+ZQ+u9j00VuLmUizLeNr7shp7euX dE0GBnzI6bHXHN7orpHEvDspNvJn9vvi9YZwNbk7pJiGxWd6BF0VjeQuzJBLFsLe PmynK+jbdMW3rOsGuKQVISwjHSMQiMgK9Pia1u2OYKXvNG4gL1OFJR23YfNwe3gr AgMBAAGjggS4MIIEtDAfBgNVHSMEGDAWgBR0hYDAZsffN97PvSk3qgMdvu3NFzAd BgNVHQ4EFgQUQrTEcZun6akLqa68A2shVdIMtNswggFGBgNVHREEggE9MIIBOYIX d3d3LnN0YXBsZXNwcmVmZXJyZWQuY2GCGGJ1cmVhdWVuZ3Jvc3ByaXZpbGVnZS5j YYIZYnVyZWF1ZW5ncm9zcHJpdmlsZWdlLmNvbYIcY3JlYXRpdmUuc3RhcGxlc3By ZWZlcnJlZC5jYYIXbmV3LnN0YXBsZXNwcmVmZXJyZWQuY2GCE3N0YXBsZXNwcmVm ZXJyZWQuY2GCFHN0YXBsZXNwcmVmZXJyZWQuY29tghl0aG9yLWNyZWF0aXZlLnN0 YXBsZXMuY29tghV0aG9yLXBlcmYuc3RhcGxlcy5jb22CHHd3dy5CdXJlYXVFbkdy b3NQcml2aWxlZ2UuY2GCHXd3dy5CdXJlYXVFbkdyb3NQcml2aWxlZ2UuY29tghh3 d3cuc3RhcGxlc3ByZWZlcnJlZC5jb20wPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAn BggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1UdHwSB lzCBlDBIoEagRIZCaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xv YmFsRzJUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3JsMEigRqBEhkJodHRwOi8vY3Js NC5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBD QTEtMS5jcmwwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0cDovL29j c3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0cy5kaWdp Y2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5j cnQwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHUAzxFW 7tUufK/zh1vZaS6b6RpxZ0qwF+ysAdJbd87MOwgAAAGPEZDEngAABAMARjBEAiAb HWNlLL+lwlxBXlC58BT0ydMtkgkqbEQCIeW86PZ72AIgNWYJBs6TJRCN7dJ4ErrR onBZ3nsUU3Sa1DyyiRc5ticAdgB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kO jC55uAAAAY8RkMShAAAEAwBHMEUCIB6MAqATlQQ+UMdqqt7rYJA0+6LNY1z/uW+1 ipHpioxxAiEAp7SsY1m9WIgCDMa46w5nkrisXAolBy2zWfHVxy8CsZUAdgDm0jFj QHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAY8RkMS4AAAEAwBHMEUCIQDN XsdVXuLrOlJi00/859K4By9Uj67PIbaLOS3LzOsGXgIgemigwuYSv28CEgla0LSD lEwbigULtS4HqjndLCkZ8AMwDQYJKoZIhvcNAQELBQADggEBAC1SZ2JuZIwGd8Yu CQ/8X3j8TJ8NwcSe59dCu5ipBnzMxlOJw/nx680fxaXEwzDHz69i1Dx6xdB+HNEr oPcHDhZgkMGg8VAdQghLhszLV1HxNYMUR0rObLa3TIocMaBKowlflGvVQHSCQN5Z HL26lRB5rntNvCRUkdhNX9dbJjFM0llGT8peyvfs2HA6F18pJKa5qrWDhkKGW/Ry pqD1spoUndUDDJ1RjwJFMEWUF3sW+Yb6a0hbPQHJu/B3yn8+pRsKLHqAEHyc6mPN xHpQgBFZV/Ca8up6h7IdYpzStv58fZqHQ4gABWR+NmdxVJQ8UxTUXwqHy3mA5L/s SfxM3AM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11bZdBRzfXaIoN+Bn7vA 39E5LzgnB4LRLBPpmmQhlma0PR86E6SUt7rbwxFnMWEjGDKdfaA8vZ0yUNOVvwPi xXVAgohkJhtHHfjeqNPdyLVsQ9iITnROXr1WecbGUY6gKGEjog23sJDAFDdH/HhK Pld3SH4G/rgQbEgpk6mOvBd3Pqb2lG24yNDp/fmUPrvY9NFbi5lIsy3ja+7Iae3r l3RNBgZ8yOmx1xze6K6RxLw7KTbyZ/b74vWGcDW5O6SYhsVnegRdFY3kLsyQSxbC 3j5spyvo23TFt6zrBrikFSEsIx0jEIjICvT4mtbtjmCl7zRuIC9ThSUdt2HzcHt4 KwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17173044906617996513420546255879151144 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Framingham' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Staples, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.staplespreferred.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27184062616583160807296951061722208197260826414345254444738432403381366521941757214488616216262586993556172212077532552941983892367057784503311707965031664863281239369239125981408085123231820791701686366390966604913239881970786295954691139443969490077720190245544372179812873553740104578115547461281376930885228226468137529314479332914773682646759592489812948432045753774349411392009738186721892524489280138153031678133503557487081644691253893957720817949955385822506912769028715871638171488548986067158885486650096681913321205726710645659421319082090072913435968397971769121834309023398573009323136145687245670283307 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 42b4c4719ba7e9a90ba9aebc036b2155d20cb4db . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (317 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staplespreferred.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bureauengrosprivilege.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bureauengrosprivilege.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creative.staplespreferred.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.staplespreferred.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staplespreferred.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staplespreferred.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thor-creative.staples.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thor-perf.staples.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BureauEnGrosPrivilege.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.BureauEnGrosPrivilege.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staplespreferred.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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