shmail.icebreaker.com
- Icebreaker New Zealand Limited -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 01:a4:6e:63:0a:8f:83:22:09:24:57:aa:b1:a9:3b:8b was issued on by DigiCert Inc.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Icebreaker New Zealand Limited
Organization:
Icebreaker New Zealand Limited
Locality:
Wellington
Country: NZ
Country: NZ
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:a4:6e:63:0a:8f:83:22:09:24:57:aa:b1:a9:3b:8bSerial Number (int): 2183003592497463948174509341783178123
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: d6:d0:52:39:8b:2b:75:9a:b7:14:bb:55:c7:44:63:ac:74:72:7b:c3
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 0e:11:b2:90:03:92:cd:dc:34:f4:be:48:d5:b0:63:6c:7c:20:19:f1
Fingerprint (sha256): 24:96:ed:bd:bb:46:04:db:72:1f:3f:8e:98:12:ac:f5:1c:f4:67:f2:30:af:d2:47:63:e2:f0:ac:d0:bc:75:35
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate shmail.icebreaker.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for shmail.icebreaker.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
shmail.icebreaker.com
autodiscover.icebreaker.com
lyncauto.icebreaker.com
nhmail.icebreaker.com
mail.icebreaker.com
autodiscover.icebreaker.com
lyncauto.icebreaker.com
nhmail.icebreaker.com
mail.icebreaker.com
Other certificates including the domain name icebreaker.com
(limited to 100 certificates)
ithelpdesk.endologix.com
link.icebreaker.com
ssl417474.cloudflaressl.com
helpdesk.enableinjections.com
sipca.icebreaker.com
helpdesk.dpsgroupglobal.com
icebreaker.com
*.icebreaker.com
secure.icebreaker.com
nhmail.icebreaker.com
sales.icebreaker.com
southernchronicles.icebreaker.com
ithelpdesk.endologix.com
preferences.icebreaker.com
ssl417476.cloudflaressl.com
support.unpri.org
southernchronicles.icebreaker.com
mail.icebreaker.com
ssl417476.cloudflaressl.com
ssl417476.cloudflaressl.com
ithelpdesk.endologix.com
shmail.icebreaker.com
ssl417474.cloudflaressl.com
southernchronicles.icebreaker.com
southernchronicles.icebreaker.com
ithelpdesk.endologix.com
southernchronicles.icebreaker.com
sipca.icebreaker.com
ICEBREAKER.COM
secure.icebreaker.com
sts.icebreaker.com
helpdesk.dpsgroupglobal.com
*.icebreaker.com
link3.icebreaker.com
*.icebreaker.com
secure.icebreaker.com
helpdesk.dpsgroupglobal.com
www.icebreaker.com
ssl417475.cloudflaressl.com
*.icebreaker.com
shmail.icebreaker.com
support.unpri.org
southernchronicles.icebreaker.com
ithelpdesk.endologix.com
link.icebreaker.com
*.icebreaker.com
link3.icebreaker.com
mail.icebreaker.com
support.unpri.org
*.icebreaker.com
ithelpdesk.endologix.com
ssl417474.cloudflaressl.com
ithelpdesk.endologix.com
image.icebreaker.com
ssl417475.cloudflaressl.com
helpdesk.dpsgroupglobal.com
www.icebreaker.com
southernchronicles.icebreaker.com
ssl417474.cloudflaressl.com
*.icebreaker.com
southernchronicles.icebreaker.com
tbancs.icebreaker.com
ssl417476.cloudflaressl.com
*.icebreaker.com
preferences.icebreaker.com
*.icebreaker.com
*.icebreaker.com
ssl417474.cloudflaressl.com
support.unpri.org
sts.icebreaker.com
southernchronicles.icebreaker.com
helpdesk.dpsgroupglobal.com
ithelpdesk.endologix.com
secure.icebreaker.com
preferences.icebreaker.com
helpdesk.dpsgroupglobal.com
southernchronicles.icebreaker.com
servicedesk.acdlabs.com
southernchronicles.icebreaker.com
*.icebreaker.com
sts.icebreaker.com
ssl417476.cloudflaressl.com
ssl417476.cloudflaressl.com
as2.icebreaker.com
secure.icebreaker.com
*.icebreaker.com
ithelpdesk.endologix.com
preferences.icebreaker.com
secure.icebreaker.com
ithelpdesk.endologix.com
ssl417475.cloudflaressl.com
ithelpdesk.endologix.com
southernchronicles.icebreaker.com
support.unpri.org
servicedesk.smcm.edu
helpdesk.icebreaker.com
ithelpdesk.endologix.com
tbancs.icebreaker.com
helpdesk.enableinjections.com
*.icebreaker.com
link.icebreaker.com
ssl417474.cloudflaressl.com
helpdesk.enableinjections.com
sipca.icebreaker.com
helpdesk.dpsgroupglobal.com
icebreaker.com
*.icebreaker.com
secure.icebreaker.com
nhmail.icebreaker.com
sales.icebreaker.com
southernchronicles.icebreaker.com
ithelpdesk.endologix.com
preferences.icebreaker.com
ssl417476.cloudflaressl.com
support.unpri.org
southernchronicles.icebreaker.com
mail.icebreaker.com
ssl417476.cloudflaressl.com
ssl417476.cloudflaressl.com
ithelpdesk.endologix.com
shmail.icebreaker.com
ssl417474.cloudflaressl.com
southernchronicles.icebreaker.com
southernchronicles.icebreaker.com
ithelpdesk.endologix.com
southernchronicles.icebreaker.com
sipca.icebreaker.com
ICEBREAKER.COM
secure.icebreaker.com
sts.icebreaker.com
helpdesk.dpsgroupglobal.com
*.icebreaker.com
link3.icebreaker.com
*.icebreaker.com
secure.icebreaker.com
helpdesk.dpsgroupglobal.com
www.icebreaker.com
ssl417475.cloudflaressl.com
*.icebreaker.com
shmail.icebreaker.com
support.unpri.org
southernchronicles.icebreaker.com
ithelpdesk.endologix.com
link.icebreaker.com
*.icebreaker.com
link3.icebreaker.com
mail.icebreaker.com
support.unpri.org
*.icebreaker.com
ithelpdesk.endologix.com
ssl417474.cloudflaressl.com
ithelpdesk.endologix.com
image.icebreaker.com
ssl417475.cloudflaressl.com
helpdesk.dpsgroupglobal.com
www.icebreaker.com
southernchronicles.icebreaker.com
ssl417474.cloudflaressl.com
*.icebreaker.com
southernchronicles.icebreaker.com
tbancs.icebreaker.com
ssl417476.cloudflaressl.com
*.icebreaker.com
preferences.icebreaker.com
*.icebreaker.com
*.icebreaker.com
ssl417474.cloudflaressl.com
support.unpri.org
sts.icebreaker.com
southernchronicles.icebreaker.com
helpdesk.dpsgroupglobal.com
ithelpdesk.endologix.com
secure.icebreaker.com
preferences.icebreaker.com
helpdesk.dpsgroupglobal.com
southernchronicles.icebreaker.com
servicedesk.acdlabs.com
southernchronicles.icebreaker.com
*.icebreaker.com
sts.icebreaker.com
ssl417476.cloudflaressl.com
ssl417476.cloudflaressl.com
as2.icebreaker.com
secure.icebreaker.com
*.icebreaker.com
ithelpdesk.endologix.com
preferences.icebreaker.com
secure.icebreaker.com
ithelpdesk.endologix.com
ssl417475.cloudflaressl.com
ithelpdesk.endologix.com
southernchronicles.icebreaker.com
support.unpri.org
servicedesk.smcm.edu
helpdesk.icebreaker.com
ithelpdesk.endologix.com
tbancs.icebreaker.com
helpdesk.enableinjections.com
*.icebreaker.com
Certificate
The complete raw certificate details for shmail.icebreaker.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgIQAaRuYwqPgyIJJFeqsak7izANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xNzExMjIwMDAwMDBaFw0yMDExMjUxMjAwMDBa MGsxCzAJBgNVBAYTAk5aMRMwEQYDVQQHEwpXZWxsaW5ndG9uMScwJQYDVQQKEx5J Y2VicmVha2VyIE5ldyBaZWFsYW5kIExpbWl0ZWQxHjAcBgNVBAMTFXNobWFpbC5p Y2VicmVha2VyLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJEW Nr2RQOUjUZidJGm3DP0R7KnuBuiTZQA5FZN1AFA+rJl/Dr1avSdjaVnul/jgWnwQ 4UyNqx3Ngm9fnflLMi02vi9KjfFFoJzauSv92BN23TQF641ai8VHPjzCt0HYkuPA hWeZh9iC8C0l1NTYbVYv4wpmcbYNt/bjUrtZe5T0DmeJBAxS0qhCtKwacTVnp7v3 yZcyOAFnIbzkBTIy8TKCwm+0C8EWEhrtt4iPqudUVoce/MKGb4V4RCWJU3eKnXea /wymW+7ffnfUe0lcwT1no71ZZIXmq75sYamWqbQa53H1R21ypgpH/C/qmpLU8VSy 5NkwSxMk52TbYoHVMCcCAwEAAaOCAlEwggJNMB8GA1UdIwQYMBaAFFFo/5CvAgd1 PMzZZWRiohK4WXI7MB0GA1UdDgQWBBTW0FI5iyt1mrcUu1XHRGOsdHJ7wzCBggYD VR0RBHsweYIVc2htYWlsLmljZWJyZWFrZXIuY29tghthdXRvZGlzY292ZXIuaWNl YnJlYWtlci5jb22CF2x5bmNhdXRvLmljZWJyZWFrZXIuY29tghVuaG1haWwuaWNl YnJlYWtlci5jb22CE21haWwuaWNlYnJlYWtlci5jb20wDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAw hi5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYuY3Js MDSgMqAwhi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXIt ZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0 dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMIGDBggrBgEFBQcB AQR3MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBNBggr BgEFBQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hB MkhpZ2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADANBgkqhkiG 9w0BAQsFAAOCAQEAF2pi3V2Gq3QfjfQhcmOWcPEm3sL+uVbAEwEoVhts0Hn4fghn RqAtsvYQqqMngN4oXUoMCfMo6WtXhuSU0ISs3LymMkUK+K2H8x5r9J+jko65hgWy mEt3GgLMw+W3Np1ETDY8NN/pXIk9q12oc9m9Qko9vq+ibdLKnwDx1DyUQI3E8Oov 0smYxhyEesc7pQmZ2tCirMrxACLjQ4ygcl0w4etv4D+aNiaGN2G5tNoKlf33UrKO Wn3YQ3FRt0R7FA+Ho15Dhm89hcB90kyFpNOXvCqJL18GuyFb3hFfHzRrArGS7yjv 2D9MbV/JekHPfg06AWGmSp8nCumHkiMJGMOBmA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRY2vZFA5SNRmJ0kabcM /RHsqe4G6JNlADkVk3UAUD6smX8OvVq9J2NpWe6X+OBafBDhTI2rHc2Cb1+d+Usy LTa+L0qN8UWgnNq5K/3YE3bdNAXrjVqLxUc+PMK3QdiS48CFZ5mH2ILwLSXU1Nht Vi/jCmZxtg239uNSu1l7lPQOZ4kEDFLSqEK0rBpxNWenu/fJlzI4AWchvOQFMjLx MoLCb7QLwRYSGu23iI+q51RWhx78woZvhXhEJYlTd4qdd5r/DKZb7t9+d9R7SVzB PWejvVlkhearvmxhqZaptBrncfVHbXKmCkf8L+qaktTxVLLk2TBLEyTnZNtigdUw JwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2183003592497463948174509341783178123 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-25 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wellington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Icebreaker New Zealand Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shmail.icebreaker.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18315508267948437744937213279468254526522220710873464412678301030046287469228257431384345394455057586719356192322547814543136467619132987553899968988035929107200548390411697323658334544244635916510796551743563490392304911543517264135578214072011376001517273319401112405877527346825514099848124271435319160671301974449582782717472658535820122041808223049583865142173199392990301261311683701707887732393429164160033057651652571459238681557854360581502887446804606220094439726261100500002333967163993056898071846540936718472794615727165315192440573784857881478605231512293257777880572148426233949387374138464939233587239 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d6d052398b2b759ab714bb55c74463ac74727bc3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shmail.icebreaker.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.icebreaker.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncauto.icebreaker.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhmail.icebreaker.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.icebreaker.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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