*.hearst.com
- The Hearst Corporation -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 02:78:77:4a:19:e7:8a:29:0f:90:17:67:3e:24:48:cf was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
The Hearst Corporation
Organization:
The Hearst Corporation
Organization unit: Hearst Service Center
Organization unit: Hearst Service Center
State / Province:
North Carolina
Locality: Charlotte
Country: US
Locality: Charlotte
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:78:77:4a:19:e7:8a:29:0f:90:17:67:3e:24:48:cfSerial Number (int): 3283951092237911219449876455237109967
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: af:30:5b:12:2a:5a:ee:3c:a0:81:05:a8:f7:8d:af:9a:5c:1f:76:3e
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): fa:a7:74:37:34:30:19:2a:34:fa:d9:f4:3a:4c:19:80:6b:14:96:f6
Fingerprint (sha256): 1f:e9:3f:97:c1:4f:34:a0:5c:22:84:b8:1c:b2:57:b1:d4:44:bf:44:aa:64:ca:fb:0e:0e:f3:79:fb:74:a3:b8
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl
Check the revocation status for certificate *.hearst.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.hearst.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.hearst.com
hearst.com
hearst.com
Other certificates including the domain name hearst.com
(limited to 100 certificates)
*.hearst.com
link.lifestyle.hearst.com
mediaplatforms.hearst.com
link.newsletter.hearst.com
sfc.hearst.com
*.hearst.com
link.newsletter.hearst.com
script.flowershop.media
link.updates.hearst.com
link.updates.hearst.com
*.hearst.com
www.annual2018.hearst.com
cosmopolitan.com
link.updates.hearst.com
www.levelupventures.hearst.com
lightuptheholidays.etg.hearst.com
www.annual2018.hearst.com
annual2018.hearst.com
htsexpecluster.hearst.com
connect.hearst.com
*.hearst.com
www.audienceselect.hearst.com
levelupventures.hearst.com
*.hearst.com
www.mediaplatforms.hearst.com
preferences.hearstmags.com
secure.hdmtools.com
link.newsletter.hearst.com
link.newsletter.hearst.com
www.audienceselect.hearst.com
sni18b61gl.wpc.edgecastcdn.net
HVC001STREXC02.companynet.org
link.updates.hearst.com
*.hearst.com
webmail2.hearst.com
*.hearst.com
*.hearst.com
link.newsletters.hearst.com
link.newsletter.hearst.com
rcltlyncfepool.hearstsc.com
ud.hearst.com
link.lifestyle.hearst.com
link.ventures.hearst.com
*.hearst.com
sfc.hearst.com
*.hearst.com
annual2018.hearst.com
*.hearst.com
mediaplatforms.hearst.com
placelegal.hearst.com
*.hearst.com
link.newsletters.hearst.com
www.annual2018.hearst.com
www.levelupventures.hearst.com
mediaplatforms.hearst.com
link.updates.hearst.com
mediaplatforms.hearst.com
cms.hearst.com
cosmopolitan.com
go.hearsthealth.hearst.com
go.hearsthealth.hearst.com
cwa.hearstsc.com
*.hearst.com
www.levelupventures.hearst.com
*.hearst.com
link.lifestyle.hearst.com
www.annual2018.hearst.com
cdn.ccomm.hearst.com
htsnjimppub.companynet.org
www.levelupventures.hearst.com
*.hearst.com
*.hearst.com
*.hearst.com
link.lifestyle.hearst.com
link.lifestyle.hearst.com
link.lifestyle.hearst.com
link.lifestyle.hearst.com
*.hearst.com
cdn.ccomm.hearst.com
RVZIFEPOOL.resource.hearstcorp.com
*.hearst.com
annual2018.hearst.com
cdn.ccomm.hearst.com
*.hearst.com
www.mediaplatforms.hearst.com
link.newsletter.hearst.com
sfc.hearst.com
*.hearst.com
cdn.ccomm.hearst.com
*.hearst.com
www.annual2018.hearst.com
remotemail.hearst.com
link.updates.hearst.com
www.levelupventures.hearst.com
*.hearst.com
HVC001STREXE02.companynet.org
cosmopolitan.com
*.hearst.com
link.updates.hearst.com
*.hearst.com
link.lifestyle.hearst.com
mediaplatforms.hearst.com
link.newsletter.hearst.com
sfc.hearst.com
*.hearst.com
link.newsletter.hearst.com
script.flowershop.media
link.updates.hearst.com
link.updates.hearst.com
*.hearst.com
www.annual2018.hearst.com
cosmopolitan.com
link.updates.hearst.com
www.levelupventures.hearst.com
lightuptheholidays.etg.hearst.com
www.annual2018.hearst.com
annual2018.hearst.com
htsexpecluster.hearst.com
connect.hearst.com
*.hearst.com
www.audienceselect.hearst.com
levelupventures.hearst.com
*.hearst.com
www.mediaplatforms.hearst.com
preferences.hearstmags.com
secure.hdmtools.com
link.newsletter.hearst.com
link.newsletter.hearst.com
www.audienceselect.hearst.com
sni18b61gl.wpc.edgecastcdn.net
HVC001STREXC02.companynet.org
link.updates.hearst.com
*.hearst.com
webmail2.hearst.com
*.hearst.com
*.hearst.com
link.newsletters.hearst.com
link.newsletter.hearst.com
rcltlyncfepool.hearstsc.com
ud.hearst.com
link.lifestyle.hearst.com
link.ventures.hearst.com
*.hearst.com
sfc.hearst.com
*.hearst.com
annual2018.hearst.com
*.hearst.com
mediaplatforms.hearst.com
placelegal.hearst.com
*.hearst.com
link.newsletters.hearst.com
www.annual2018.hearst.com
www.levelupventures.hearst.com
mediaplatforms.hearst.com
link.updates.hearst.com
mediaplatforms.hearst.com
cms.hearst.com
cosmopolitan.com
go.hearsthealth.hearst.com
go.hearsthealth.hearst.com
cwa.hearstsc.com
*.hearst.com
www.levelupventures.hearst.com
*.hearst.com
link.lifestyle.hearst.com
www.annual2018.hearst.com
cdn.ccomm.hearst.com
htsnjimppub.companynet.org
www.levelupventures.hearst.com
*.hearst.com
*.hearst.com
*.hearst.com
link.lifestyle.hearst.com
link.lifestyle.hearst.com
link.lifestyle.hearst.com
link.lifestyle.hearst.com
*.hearst.com
cdn.ccomm.hearst.com
RVZIFEPOOL.resource.hearstcorp.com
*.hearst.com
annual2018.hearst.com
cdn.ccomm.hearst.com
*.hearst.com
www.mediaplatforms.hearst.com
link.newsletter.hearst.com
sfc.hearst.com
*.hearst.com
cdn.ccomm.hearst.com
*.hearst.com
www.annual2018.hearst.com
remotemail.hearst.com
link.updates.hearst.com
www.levelupventures.hearst.com
*.hearst.com
HVC001STREXE02.companynet.org
cosmopolitan.com
*.hearst.com
link.updates.hearst.com
*.hearst.com
Certificate
The complete raw certificate details for *.hearst.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgIQAnh3ShnniikPkBdnPiRIzzANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xMzEwMjIxMjAwMDFaFw0xNjA0MTMxMjAwMDBa MIGSMQswCQYDVQQGEwJVUzEXMBUGA1UECBMOTm9ydGggQ2Fyb2xpbmExEjAQBgNV BAcTCUNoYXJsb3R0ZTEfMB0GA1UEChMWVGhlIEhlYXJzdCBDb3Jwb3JhdGlvbjEe MBwGA1UECxMVSGVhcnN0IFNlcnZpY2UgQ2VudGVyMRUwEwYDVQQDDAwqLmhlYXJz dC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2q3DusBaujzJU N7n8Q/+rkb5RY39syNGZA01esYD9VGlOQfPXkdLL53UORdBiMdnj3XtGKUbzzyRL cQtcLhR5rpLQvrigy7p6cV3awqbfxb4SX/UTfCZuk6EdHCG93A++DBxvGT5qs34N OmyFdu5u3eKGbS4aZ6ID/nhqlWR/nzZoz6CKyehHT4VnPmSSvWn+VLCGlu0EQaDs 97chwabAfw61OxDy2f3DPJiV01lBrCRRO5yQ8LkHIJ0kaaNqgopEYCnD9UM1MT/m ebghKp340LeykZLPufOimK8L0mD7L4aLed/qdpWF+8YTAg0zxHn1gP7KKLBTCzyX B263K8RtAgMBAAGjggHxMIIB7TAfBgNVHSMEGDAWgBRRaP+QrwIHdTzM2WVkYqIS uFlyOzAdBgNVHQ4EFgQUrzBbEipa7jyggQWo942vmlwfdj4wIwYDVR0RBBwwGoIM Ki5oZWFyc3QuY29tggpoZWFyc3QuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDov L2NybDMuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc1LmNybDA0oDKgMIYu aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc1LmNybDBM BgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3 dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjCBgwYIKwYBBQUHAQEEdzB1MCQG CCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTQYIKwYBBQUHMAKG QWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNz dXJhbmNlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQAD ggEBAChjHffXYKFPD2ntQ9i432bc7/VHELZTmO3VxUTlOMd7N2fWeujfSNnyF704 wM6OMZZMERF5s+RLgjLOK2wGvFmxYKuBQ6erLM6C3tBdSIn+oA6iC6VcHXdpm41E MM5jfivt0gs+YHAj+OGPZYrkI8OxZfAgIoZD3PIfRfMVHMEuSFgmHlANj+M0zkxq UcUxY9Ve0w7MOGp9vLMsnW1JHzb3PuRHwuIt5QgXlyRWFHPJjbp00LcDe50DZ0n1 N1maGtDzTvTIve2eB3MERbW0E/JZ7eEj0Y8dMYW9Jcw7wJXzKFNpnnAgw5LDTKQ7 u2xQtIGXz4xglf09XwapfMh0oYg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qtw7rAWro8yVDe5/EP/ q5G+UWN/bMjRmQNNXrGA/VRpTkHz15HSy+d1DkXQYjHZ4917RilG888kS3ELXC4U ea6S0L64oMu6enFd2sKm38W+El/1E3wmbpOhHRwhvdwPvgwcbxk+arN+DTpshXbu bt3ihm0uGmeiA/54apVkf582aM+gisnoR0+FZz5kkr1p/lSwhpbtBEGg7Pe3IcGm wH8OtTsQ8tn9wzyYldNZQawkUTuckPC5ByCdJGmjaoKKRGApw/VDNTE/5nm4ISqd +NC3spGSz7nzopivC9Jg+y+Gi3nf6naVhfvGEwINM8R59YD+yiiwUws8lwdutyvE bQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3283951092237911219449876455237109967 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-22 12:00:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-13 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charlotte' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Hearst Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hearst Service Center' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hearst.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31139163799691712606244011115311171497949484048721295706137627155275621840073882038767035374755778706006417553094778582149893234331353063363651883884213380719905047198580623629627237768771964159160293104261979950792537164352277973924407459867012771148764586865847840310052043787207373534868839590506841853345129605002514702067945011202204948612339274124578872233230274168837368476146566863662167388866457733149048508372236962740556085024787206477723707154667409953762468039978365514695735665598346336546785242952048153695631745898274198262213244514025914119620887430098454409317718470451950911798974136671547018691693 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) af305b122a5aee3ca08105a8f78daf9a5c1f763e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hearst.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearst.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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