is-team.carefusion.com
- Becton, Dickinson and Company -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 03:4e:cd:de:35:df:2d:5b:e5:59:4c:64:b2:c2:1d:fb was issued on by DigiCert Inc.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Becton, Dickinson and Company
Organization:
Becton, Dickinson and Company
Organization unit: IT
Organization unit: IT
State / Province:
New Jersey
Locality: Franklin Lakes
Country: US
Locality: Franklin Lakes
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4e:cd:de:35:df:2d:5b:e5:59:4c:64:b2:c2:1d:fbSerial Number (int): 4396858641613801112833769940759748091
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 84:b4:e8:41:17:a1:f4:fc:4a:29:cb:b3:fa:09:22:e3:1b:07:c1:8d
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 8f:43:b8:ed:6f:db:38:bd:db:e5:24:fb:84:52:17:22:cb:61:4a:b0
Fingerprint (sha256): 25:c7:69:20:28:76:ee:7f:2d:aa:ef:8a:ec:29:49:8d:14:ea:e1:dd:01:67:99:33:cf:42:89:b3:5f:f0:9e:34
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate is-team.carefusion.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for is-team.carefusion.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
is-team.carefusion.com
is-team13.carefusion.com
is-team13-qa.carefusion.com
is-team13.carefusion.com
is-team13-qa.carefusion.com
Other certificates including the domain name carefusion.com
(limited to 100 certificates)
mail.carefusion.com
*.carefusion.com
rss-dev.bd.com
rss-dev.bd.com
api.carefusion.com
secmodregional03.carefusion.com
*.carefusion.com
access.carefusion.com
callback-gms-tx-stg.carefusion.com
media.carefusion.com
datafusion.carefusion.com
updates01.carefusion.com
pwv.carefusion.com
*.carefusion.com
support.carefusion.com
mysite.carefusion.com
github-rd.carefusion.com
rsscp-dev.bd.com
mft.bd.com
secmodregional02.carefusion.com
scom.carefusion.com
im.carefusion.com
*.carefusion.com
home.carefusion.com
cp-qa.carefusion.com
pb1.ocsweb.carefusion.com
mft.bd.com
cp.carefusion.com
sslchi.carefusion.com
is-team.carefusion.com
aria.bd.com
aria.bd.com
cfnowa.carefusion.com
pages.carefusion.com
service.carefusion.com
sslapac.carefusion.com
remoteaccess.carefusion.com
collaboration.carefusion.com
sslemea.carefusion.com
*.carefusion.com
secmodcloud01.carefusion.com
cp.carefusion.com
sslemea.carefusion.com
remoteaccess.carefusion.com
storefronteur01.carefusion.com
home.carefusion.com
sslchi.carefusion.com
rowaapi.carefusion.com
update-emea.carefusion.com
callback-gms-tx.carefusion.com
eftqa01.carefusion.com
remoteaccess.carefusion.com
access.carefusion.com
pages.carefusion.com
*.CareFusion.com
api.carefusion.com
052dCH1L40SE01.052d.mgd.msft.net
cp.carefusion.com
carefusion.com
update-emea.carefusion.com
sf.carefusion.com
rss.bd.com
secmodcloud01.carefusion.com
sn2052dl50se01.052d.dedicated.lync.com
ipsurgtool.carefusion.com
qa-remoteaccess.carefusion.com
*.052dspoapp.com
www.carefusion.com
rss.carefusion.com
mysite.carefusion.com
go.carefusion.com
pages.carefusion.com
ariaapi-qa.bd.com
rss-staging.bd.com
aria.bd.com
sharepoint.carefusion.com
secmodcloud01.carefusion.com
sslemea.carefusion.com
datafusion.carefusion.com
sheffield.carefusion.com
easylobby.carefusion.com
cfnowa.carefusion.com
rowaapi.carefusion.com
github-rd.carefusion.com
qa-remoteaccess.carefusion.com
sheffield.carefusion.com
das-qa.carefusion.com
das.carefusion.com
remoteaccess.carefusion.com
ariaapi-qa.bd.com
cfnowa.carefusion.com
secmodcloud01.carefusion.com
mail.carefusion.com
rsscp-qa.carefusion.com
updates01.carefusion.com
bartender.carefusion.com
ioservices-staging.bd.com
bartender.carefusion.com
update-emea.carefusion.com
rss.carefusion.com
*.carefusion.com
rss-dev.bd.com
rss-dev.bd.com
api.carefusion.com
secmodregional03.carefusion.com
*.carefusion.com
access.carefusion.com
callback-gms-tx-stg.carefusion.com
media.carefusion.com
datafusion.carefusion.com
updates01.carefusion.com
pwv.carefusion.com
*.carefusion.com
support.carefusion.com
mysite.carefusion.com
github-rd.carefusion.com
rsscp-dev.bd.com
mft.bd.com
secmodregional02.carefusion.com
scom.carefusion.com
im.carefusion.com
*.carefusion.com
home.carefusion.com
cp-qa.carefusion.com
pb1.ocsweb.carefusion.com
mft.bd.com
cp.carefusion.com
sslchi.carefusion.com
is-team.carefusion.com
aria.bd.com
aria.bd.com
cfnowa.carefusion.com
pages.carefusion.com
service.carefusion.com
sslapac.carefusion.com
remoteaccess.carefusion.com
collaboration.carefusion.com
sslemea.carefusion.com
*.carefusion.com
secmodcloud01.carefusion.com
cp.carefusion.com
sslemea.carefusion.com
remoteaccess.carefusion.com
storefronteur01.carefusion.com
home.carefusion.com
sslchi.carefusion.com
rowaapi.carefusion.com
update-emea.carefusion.com
callback-gms-tx.carefusion.com
eftqa01.carefusion.com
remoteaccess.carefusion.com
access.carefusion.com
pages.carefusion.com
*.CareFusion.com
api.carefusion.com
052dCH1L40SE01.052d.mgd.msft.net
cp.carefusion.com
carefusion.com
update-emea.carefusion.com
sf.carefusion.com
rss.bd.com
secmodcloud01.carefusion.com
sn2052dl50se01.052d.dedicated.lync.com
ipsurgtool.carefusion.com
qa-remoteaccess.carefusion.com
*.052dspoapp.com
www.carefusion.com
rss.carefusion.com
mysite.carefusion.com
go.carefusion.com
pages.carefusion.com
ariaapi-qa.bd.com
rss-staging.bd.com
aria.bd.com
sharepoint.carefusion.com
secmodcloud01.carefusion.com
sslemea.carefusion.com
datafusion.carefusion.com
sheffield.carefusion.com
easylobby.carefusion.com
cfnowa.carefusion.com
rowaapi.carefusion.com
github-rd.carefusion.com
qa-remoteaccess.carefusion.com
sheffield.carefusion.com
das-qa.carefusion.com
das.carefusion.com
remoteaccess.carefusion.com
ariaapi-qa.bd.com
cfnowa.carefusion.com
secmodcloud01.carefusion.com
mail.carefusion.com
rsscp-qa.carefusion.com
updates01.carefusion.com
bartender.carefusion.com
ioservices-staging.bd.com
bartender.carefusion.com
update-emea.carefusion.com
rss.carefusion.com
Certificate
The complete raw certificate details for is-team.carefusion.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGhjCCBW6gAwIBAgIQA07N3jXfLVvlWUxkssId+zANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwNzExMDAwMDAwWhcN MjAwODE2MTIwMDAwWjCBkTELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJz ZXkxFzAVBgNVBAcTDkZyYW5rbGluIExha2VzMSYwJAYDVQQKEx1CZWN0b24sIERp Y2tpbnNvbiBhbmQgQ29tcGFueTELMAkGA1UECxMCSVQxHzAdBgNVBAMTFmlzLXRl YW0uY2FyZWZ1c2lvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB4Ib81g7C6/hVzVnf6wYU5KmkF/eZBsqG8d+rvMg8CMZfU9iGPcGBsMmO4XRw PlnTMkVhIPBJUQEcxp/6VTdzfCni7tB+hAw5E7HSqyK+nBb87uB4QMJGF2eXtn47 BBQXbUi7XUaYqoVH99IPUVq3s/78FK+NuZSTRUmBCd437bDXf1uU2lkXqmPeD9sd LO0M4K0r69Y0fuwYmb7C0xiOO0Pa8YIcXX8Ssf5qMRPMdhEYP9ZlEObTsSEWFHDm NfsDjQsF1dIlvCgL+f+J7DfHEWsUqpoMGNziaZUfG5Rck75yekJVDeCbp3OkGXo0 xJY+6J8Tiql1wyqIbP3HxZq3AgMBAAGjggMbMIIDFzAfBgNVHSMEGDAWgBQPgGEc gjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUhLToQReh9PxKKcuz+gki4xsHwY0w WAYDVR0RBFEwT4IWaXMtdGVhbS5jYXJlZnVzaW9uLmNvbYIYaXMtdGVhbTEzLmNh cmVmdXNpb24uY29tghtpcy10ZWFtMTMtcWEuY2FyZWZ1c2lvbi5jb20wDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8E ZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2 LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1n Ni5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0 cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEE cDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYB BQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJT ZWN1cmVTZXJ2ZXJDQS5jcnQwCQYDVR0TBAIwADCCAQYGCisGAQQB1nkCBAIEgfcE gfQA8gB3ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABa+F0me8A AAQDAEgwRgIhANMb3QO1tKQ9/lUaae2fHaVC0JbXQ1C2EqiIjpssFoAyAiEA+gN6 pqp7ZanuPX5XCrvwjvGucX7UxvxwEwiVUyJ33hsAdwCHdb/nWXz4jEOZX73zbv9W jUdWNv9KtWDBtOr/XqCDDwAAAWvhdJo/AAAEAwBIMEYCIQCt6JPopJMtxMEfDN2D Y8cQ11Itw6tRNgQ7sVAlMsGCOgIhAKEXbtsWN+yhIXZx8UKw+wuPbvAp9ijUGUXm oMj7oZAEMA0GCSqGSIb3DQEBCwUAA4IBAQAn09TXLnAVJebK+OQhQ1vQrlTyC/GB wyO2HXnKQKn7H+wgSH3f3Q5QxXRWsz07pjLu8N9brT51E5WefcJJgIKHwzNBTvEc Ldd2nWpNTS3XwDkxfV1/4fjj0mYh3r6eQ/JBZ5AJXLuFgAmKOhRl1xiNRKGHqBX9 t/6hCY6LUfje4myvVRpsItyBaJDZa5xBIEWIMZXFmCZvAuVl3dmPlP14SfOYQOq2 nlMxwAjdKVcq+YSJTbdbbDkFA5B6br9Y7MyFIHYqdZLscBN3VZjGXBqDaWB4GHag Z1Tizh/kM9XQhIUO9rU5vtWz/JPAMhxUDHSu68QwD6939pchbWsTU6zm -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweCG/NYOwuv4Vc1Z3+sG FOSppBf3mQbKhvHfq7zIPAjGX1PYhj3BgbDJjuF0cD5Z0zJFYSDwSVEBHMaf+lU3 c3wp4u7QfoQMOROx0qsivpwW/O7geEDCRhdnl7Z+OwQUF21Iu11GmKqFR/fSD1Fa t7P+/BSvjbmUk0VJgQneN+2w139blNpZF6pj3g/bHSztDOCtK+vWNH7sGJm+wtMY jjtD2vGCHF1/ErH+ajETzHYRGD/WZRDm07EhFhRw5jX7A40LBdXSJbwoC/n/iew3 xxFrFKqaDBjc4mmVHxuUXJO+cnpCVQ3gm6dzpBl6NMSWPuifE4qpdcMqiGz9x8Wa twIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4396858641613801112833769940759748091 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-16 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Franklin Lakes' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Becton, Dickinson and Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'is-team.carefusion.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24474711394383728523922857299814789109821144689668238123478418029823320594070869215023667419896412537891802417112823440996433976442292595302047917471933229484658595737715698147843912517693886596152396582605440290880373558385106105398315537851593679312008195310558725194965340150013625205221553586356207055420077241404970393932898118190216420857464913717982294362618487397044232156167564205623999481672888555995988394201668293332233159571419389974554602525100364151351471054441556470872497204866892898277443093438376435792778655772250636171354337910108208226948262241552702993917926530259269906415528347725647493569207 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 84b4e84117a1f4fc4a29cbb3fa0922e31b07c18d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is-team.carefusion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is-team13.carefusion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is-team13-qa.carefusion.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016be17499ef0000040300483046022100d31bdd03b5b4a43dfe551a69ed9f1da542d096d74350b612a8888e9b2c168032022100fa037aa6aa7b65a9ee3d7e570abbf08ef1ae717ed4c6fc70130895532277de1b0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016be1749a3f0000040300483046022100ade893e8a4932dc4c11f0cdd8363c710d7522dc3ab5136043bb1502532c1823a022100a1176edb1637eca1217671f142b0fb0b8f6ef029f628d41945e6a0c8fba19004 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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