*.qualityhosting.de
- QualityHosting Aktiengesellschaft -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 09:44:3c:67:a2:47:6d:49:b8:27:ce:90:ee:85:20:ef was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
QualityHosting Aktiengesellschaft
Organization:
QualityHosting Aktiengesellschaft
Locality:
Gelnhausen
Country: DE
Country: DE
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:44:3c:67:a2:47:6d:49:b8:27:ce:90:ee:85:20:efSerial Number (int): 12317353303744490626405838188901114095
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: b6:94:88:66:ad:93:52:aa:09:bb:11:60:59:ea:e1:fc:d6:1a:0e:fe
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 32:2e:79:02:45:33:37:17:82:33:90:66:08:62:ff:1e:a4:f6:6c:8a
Fingerprint (sha256): 22:d4:cc:33:78:6e:50:0d:36:6c:5f:d8:5b:3f:ef:3f:0a:ac:4b:0d:56:5c:8b:24:5f:59:82:24:e0:a4:38:bd
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g1.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g1.crl
Check the revocation status for certificate *.qualityhosting.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.qualityhosting.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.qualityhosting.de
qualityhosting.de
qualityhosting.de
Other certificates including the domain name qualityhosting.de
(limited to 100 certificates)
feedback.qualityhosting.de
survey.gradwell.com
san-11-s50.tlsprovisioning.exacttarget.com
prod.24.slot.cdn.salesforce-communities.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
survey.westernwindowsystems.com
prod.24.slot.cdn.salesforce-communities.com
supportsurvey.control4.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
surveys.myarg.com
prod.24.slot.cdn.salesforce-communities.com
QualityHosting AG
prod.24.slot.cdn.salesforce-communities.com
prod.24.slot.cdn.salesforce-communities.com
surveys.fredmangroup.com
certificates.getfeedback.com
surrogate.omegafamilysurrogates.com
feedback.blackboardinsurance.com
*.qualityhosting.de
cody-test.getgetfeedbackback.com
survey.faq.rakuten.net
prod.24.slot.cdn.salesforce-communities.com
san-11-s50.tlsprovisioning.exacttarget.com
prod.24.slot.cdn.salesforce-communities.com
feedback.spotcap.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
surveys.elkay.com
certificates.getfeedback.com
eval.bts.com
survey.boomtownroi.com
prod.24.slot.cdn.salesforce-communities.com
*.qualityhosting.de
prod.24.slot.cdn.salesforce-communities.com
qualityhosting.de
prod.24.slot.cdn.salesforce-communities.com
feedback.wufoo.com
feedback.blackboardinsurance.com
monitoring.qualityhosting.de
surrogate.omegafamilysurrogates.com
prod.24.slot.cdn.salesforce-communities.com
prod.24.slot.cdn.salesforce-communities.com
certificates.getfeedback.com
prod.24.slot.cdn.salesforce-communities.com
feedback.smilebooth.com
feedback.blackboardinsurance.com
*.internal.qualityhosting.de
forms.comfortkeepers.com
qualityhosting.de
vpn.qualityhosting.de
enquete.pietervanforeest.nl
info.qualityhosting.de
supportsurvey.control4.com
feedback.liftago.com
feedback.nanotempertech.com
customdomain.getfeedback.com
surveys.crimsoneducation.org
survey.faq.rakuten.net
prod.24.slot.cdn.salesforce-communities.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
survey.faq.rakuten.net
info.qualityhosting.de
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
prod.24.slot.cdn.salesforce-communities.com
san-11-s50.tlsprovisioning.exacttarget.com
feedback.icelandair.com
survey.westernwindowsystems.com
san-11-s50.tlsprovisioning.exacttarget.com
vpn.qualityhosting.de
san-11-s50.tlsprovisioning.exacttarget.com
survey.adstream.com
wissen.qualityhosting.de
san-11-s50.tlsprovisioning.exacttarget.com
surveys.fredmangroup.com
san-11-s50.tlsprovisioning.exacttarget.com
feedback.auditorservice.com
san-11-s50.tlsprovisioning.exacttarget.com
info.qualityhosting.de
san-11-s50.tlsprovisioning.exacttarget.com
prod.24.slot.cdn.salesforce-communities.com
surveys.elkay.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
survey.faq.rakuten.net
prod.24.slot.cdn.salesforce-communities.com
customdomain.getfeedback.com
prod.24.slot.cdn.salesforce-communities.com
customerfeedback.surveymonkey.com
prod.24.slot.cdn.salesforce-communities.com
feedback.nextdc.com
feedback.inap.com
prod.24.slot.cdn.salesforce-communities.com
feedback.auditorservice.com
jobs.qualityhosting.de
survey.gradwell.com
feedback.nextdc.com
survey.gradwell.com
san-11-s50.tlsprovisioning.exacttarget.com
prod.24.slot.cdn.salesforce-communities.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
survey.westernwindowsystems.com
prod.24.slot.cdn.salesforce-communities.com
supportsurvey.control4.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
surveys.myarg.com
prod.24.slot.cdn.salesforce-communities.com
QualityHosting AG
prod.24.slot.cdn.salesforce-communities.com
prod.24.slot.cdn.salesforce-communities.com
surveys.fredmangroup.com
certificates.getfeedback.com
surrogate.omegafamilysurrogates.com
feedback.blackboardinsurance.com
*.qualityhosting.de
cody-test.getgetfeedbackback.com
survey.faq.rakuten.net
prod.24.slot.cdn.salesforce-communities.com
san-11-s50.tlsprovisioning.exacttarget.com
prod.24.slot.cdn.salesforce-communities.com
feedback.spotcap.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
surveys.elkay.com
certificates.getfeedback.com
eval.bts.com
survey.boomtownroi.com
prod.24.slot.cdn.salesforce-communities.com
*.qualityhosting.de
prod.24.slot.cdn.salesforce-communities.com
qualityhosting.de
prod.24.slot.cdn.salesforce-communities.com
feedback.wufoo.com
feedback.blackboardinsurance.com
monitoring.qualityhosting.de
surrogate.omegafamilysurrogates.com
prod.24.slot.cdn.salesforce-communities.com
prod.24.slot.cdn.salesforce-communities.com
certificates.getfeedback.com
prod.24.slot.cdn.salesforce-communities.com
feedback.smilebooth.com
feedback.blackboardinsurance.com
*.internal.qualityhosting.de
forms.comfortkeepers.com
qualityhosting.de
vpn.qualityhosting.de
enquete.pietervanforeest.nl
info.qualityhosting.de
supportsurvey.control4.com
feedback.liftago.com
feedback.nanotempertech.com
customdomain.getfeedback.com
surveys.crimsoneducation.org
survey.faq.rakuten.net
prod.24.slot.cdn.salesforce-communities.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
survey.faq.rakuten.net
info.qualityhosting.de
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
prod.24.slot.cdn.salesforce-communities.com
san-11-s50.tlsprovisioning.exacttarget.com
feedback.icelandair.com
survey.westernwindowsystems.com
san-11-s50.tlsprovisioning.exacttarget.com
vpn.qualityhosting.de
san-11-s50.tlsprovisioning.exacttarget.com
survey.adstream.com
wissen.qualityhosting.de
san-11-s50.tlsprovisioning.exacttarget.com
surveys.fredmangroup.com
san-11-s50.tlsprovisioning.exacttarget.com
feedback.auditorservice.com
san-11-s50.tlsprovisioning.exacttarget.com
info.qualityhosting.de
san-11-s50.tlsprovisioning.exacttarget.com
prod.24.slot.cdn.salesforce-communities.com
surveys.elkay.com
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
survey.faq.rakuten.net
prod.24.slot.cdn.salesforce-communities.com
customdomain.getfeedback.com
prod.24.slot.cdn.salesforce-communities.com
customerfeedback.surveymonkey.com
prod.24.slot.cdn.salesforce-communities.com
feedback.nextdc.com
feedback.inap.com
prod.24.slot.cdn.salesforce-communities.com
feedback.auditorservice.com
jobs.qualityhosting.de
survey.gradwell.com
feedback.nextdc.com
Certificate
The complete raw certificate details for *.qualityhosting.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIQCUQ8Z6JHbUm4J86Q7oUg7zANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xNzEwMjQwMDAwMDBaFw0yMTAxMjExMjAwMDBa MGwxCzAJBgNVBAYTAkRFMRMwEQYDVQQHEwpHZWxuaGF1c2VuMSowKAYDVQQKEyFR dWFsaXR5SG9zdGluZyBBa3RpZW5nZXNlbGxzY2hhZnQxHDAaBgNVBAMMEyoucXVh bGl0eWhvc3RpbmcuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP IADh6CP30brGgl/vnfySW3G11P8O1Sb9YQQha7yRneXTEyBajMYp9ivW5wk7vC3H 50L2gjPeIGs7ndLN0MpBgi4IWUa0sSJpxh/YmGPStqT6rKBEre/CEP4ESdoTSjtK wv0Jd833M98ykrnGuLWxd7QAqKomGuYbiN2uZoTWk5JZSp2zFZOP72eSYYveeSjJ WnsTO7lM1fehSEhjdp9Fp031QqFD09bU9Ckrng7yGD8kfwgxXdn7SxrJw8J2jqNy q65MKUCL6BRGo91XdOjrWi414Izm9EOL/Iv5COUyNKKI2AmM3W8c0oOYQpSpCIq4 Y6HxZ1VOfmfVyKNML8HfAgMBAAGjggH/MIIB+zAfBgNVHSMEGDAWgBRRaP+QrwIH dTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQUtpSIZq2TUqoJuxFgWerh/NYaDv4wMQYD VR0RBCowKIITKi5xdWFsaXR5aG9zdGluZy5kZYIRcXVhbGl0eWhvc3RpbmcuZGUw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1 BgNVHR8EbjBsMDSgMqAwhi5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1o YS1zZXJ2ZXItZzEuY3JsMDSgMqAwhi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20v c2hhMi1oYS1zZXJ2ZXItZzEuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCow KAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EM AQICMIGDBggrBgEFBQcBAQR3MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRp Z2ljZXJ0LmNvbTBNBggrBgEFBQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNlcnQu Y29tL0RpZ2lDZXJ0U0hBMkhpZ2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwDAYDVR0T AQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAQEAUQkK+vtoKtUI739u5vhmh584nYPR 9Qam+/HXeiHUO5V/ZfOBn/mWfsF9w+oJge39bMD4RwroPb671/8bWS4enKk/FLk+ zPAVQZFU29svZYJs6CbmD7258c6oJpHMBehGlgx2o+K36gMI5CV179wMztPSzp3Z n30DOzYi+rrzFwWPoUfyRAMOmRsEqygJ0SA59MQHhM8YH7cczt0nXOXhOy+7Gr/g e1urFdBujVLvYQ4pnmilYzB45WpMTwpRlDAnBV9GbZq/CqQPg9Bs28LDCziycATa 7t9EU0/zN9yxYfcdPMNwEK8FQzrAu73x4PU0xC9gocO+0vQgp/O2z4+fcg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyAA4egj99G6xoJf7538 kltxtdT/DtUm/WEEIWu8kZ3l0xMgWozGKfYr1ucJO7wtx+dC9oIz3iBrO53SzdDK QYIuCFlGtLEiacYf2Jhj0rak+qygRK3vwhD+BEnaE0o7SsL9CXfN9zPfMpK5xri1 sXe0AKiqJhrmG4jdrmaE1pOSWUqdsxWTj+9nkmGL3nkoyVp7Ezu5TNX3oUhIY3af RadN9UKhQ9PW1PQpK54O8hg/JH8IMV3Z+0saycPCdo6jcquuTClAi+gURqPdV3To 61ouNeCM5vRDi/yL+QjlMjSiiNgJjN1vHNKDmEKUqQiKuGOh8WdVTn5n1cijTC/B 3wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12317353303744490626405838188901114095 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-21 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gelnhausen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QualityHosting Aktiengesellschaft' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.qualityhosting.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26147110615905597587856622571403646604471426213525872099842951841301862146384169744271547339098119969803098537609979317429995445081223963877387981434063504165387307821418170524672882455915440667443166170065356777158550390280016450176643397048053716061740592692531831832523948661883129086688511845316696800663868432025969919660104299739707034833926227022201101423088150789524325493207093356076917776019458804832427455260440337237191770588468168766456028779478410789735897265557167954205907438383500353476321563094774663981647136362698759844134610491913842921105801724325417480132102301515842740089188241022091806097887 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b6948866ad9352aa09bb116059eae1fcd61a0efe . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualityhosting.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualityhosting.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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