apps.stagemcp.davita.com
- DaVita -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 4d:f9:d8:3a:02:ba:3b:c1:93:ae:13:61:12:9b:d4:bd was issued on by Entrust, Inc..
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
DaVita
Organization:
DaVita
State / Province:
California
Locality: El Segundo
Country: US
Locality: El Segundo
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 4d:f9:d8:3a:02:ba:3b:c1:93:ae:13:61:12:9b:d4:bdSerial Number (int): 103647823189765621293816961235513234621
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: b9:18:56:d8:9d:bc:00:56:17:b2:02:36:c8:e1:bd:9e:e6:ac:d1:0f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 79:5d:75:16:1e:53:75:80:9b:4a:80:7e:0e:d8:0a:6f:3e:35:87:01
Fingerprint (sha256): 25:e8:90:33:be:20:a4:51:5f:b8:c5:61:c7:7b:4c:8f:e1:1d:ea:33:15:c9:1a:aa:14:5e:cd:31:74:b3:30:a2
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate apps.stagemcp.davita.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for apps.stagemcp.davita.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
apps.stagemcp.davita.com
Other certificates including the domain name davita.com
(limited to 100 certificates)
vpnportal.davita.com
tacomavpn.davita.com
falcon.davita.com
ourcommunity.davita.com
bcc2.talentera.com
pressreleases.davita.com
bcc2.talentera.com
leapfrog-ssl-22.gcs-web.com
bcc2.talentera.com
isevpn.davita.com
emailmktg.davita.com
International.Qlik-dev.davita.com
falconmobile.davita.com
vpnportal.davita.com
bcc2.talentera.com
davita.com
aslax.davita.com
davita.com
tmcentral.davita.com
*.reportsnp.davita.com
dsp.davita.com
clearpass.davita.com
bcc2.talentera.com
bcc2.talentera.com
falcondialysisqa.davita.com
falconbiebf.davita.com
bcc2.talentera.com
app.clinicalstudybiling.davita.com
bcc2.talentera.com
*.artifactory.davita.com
app.hrm.epe.davita.com
perf.physician-np.davita.com
brand.davita.com
DEN3T1CEXPCA01.davita.com
sso.starpoint.davita.com
support.cdnetworks.net
bcc2.talentera.com
bcc2.talentera.com
dsp.davita.com
app.physportalqa.davita.com
bcc2.talentera.com
tacomavpn.davita.com
bcc2.talentera.com
ola10.davita.com
bcc2.talentera.com
*.docs.gcp.davita.com
fe.paapp.davita.com
leapfrog-ssl-22.gcs-web.com
bcc2.talentera.com
redwoods.davita.com
ola10.davita.com
*.physiciansolutions.davita.com
bcc2.talentera.com
bcc2.talentera.com
5720147234914304-fe1.pantheonsite.io
5659118702428160-fe2.pantheonsite.io
prod.middleware.davita.com
bcc2.talentera.com
bcc2.talentera.com
denver.davita.com
*.intranet.davita.com
dsp.davita.com
help.oneviewdps.davita.com
bcc2.talentera.com
leapfrog-ssl-22.gcs-web.com
pressreleases.davita.com
www.davita.com
*.mcoe.davita.com
bcc2.talentera.com
api.piet-app.davita.com
bcc2.talentera.com
prod-podservice.rx-np.davita.com
feat-logging-test.ogb-np.davita.com
w3mail.davita.com
drvpn.davita.com
denver.davita.com
falcongithub.davita.com
5720147234914304-fe1.pantheonsite.io
bcc2.talentera.com
licensepartners.davita.com
backend-04c53-ckd.patient-np.davita.com
careers.davita.com
bcc2.talentera.com
seavpn.davita.com
davita.com
vertex-dev3.davita.com
*.mcoe.davita.com
leapfrog-ssl-22.gcs-web.com
apps.stagemcp.davita.com
bcc2.talentera.com
bcc2.talentera.com
backend-e26b1-upp-admin.patient-np.davita.com
bcc2.talentera.com
netmri.davita.com
adfs.davita.com
sharedapp.davita.com
den4-clinic-raduis1.davita.com
xenweb.davita.com
jobs.davita.com
vault-cassandra.davita.com
tacomavpn.davita.com
falcon.davita.com
ourcommunity.davita.com
bcc2.talentera.com
pressreleases.davita.com
bcc2.talentera.com
leapfrog-ssl-22.gcs-web.com
bcc2.talentera.com
isevpn.davita.com
emailmktg.davita.com
International.Qlik-dev.davita.com
falconmobile.davita.com
vpnportal.davita.com
bcc2.talentera.com
davita.com
aslax.davita.com
davita.com
tmcentral.davita.com
*.reportsnp.davita.com
dsp.davita.com
clearpass.davita.com
bcc2.talentera.com
bcc2.talentera.com
falcondialysisqa.davita.com
falconbiebf.davita.com
bcc2.talentera.com
app.clinicalstudybiling.davita.com
bcc2.talentera.com
*.artifactory.davita.com
app.hrm.epe.davita.com
perf.physician-np.davita.com
brand.davita.com
DEN3T1CEXPCA01.davita.com
sso.starpoint.davita.com
support.cdnetworks.net
bcc2.talentera.com
bcc2.talentera.com
dsp.davita.com
app.physportalqa.davita.com
bcc2.talentera.com
tacomavpn.davita.com
bcc2.talentera.com
ola10.davita.com
bcc2.talentera.com
*.docs.gcp.davita.com
fe.paapp.davita.com
leapfrog-ssl-22.gcs-web.com
bcc2.talentera.com
redwoods.davita.com
ola10.davita.com
*.physiciansolutions.davita.com
bcc2.talentera.com
bcc2.talentera.com
5720147234914304-fe1.pantheonsite.io
5659118702428160-fe2.pantheonsite.io
prod.middleware.davita.com
bcc2.talentera.com
bcc2.talentera.com
denver.davita.com
*.intranet.davita.com
dsp.davita.com
help.oneviewdps.davita.com
bcc2.talentera.com
leapfrog-ssl-22.gcs-web.com
pressreleases.davita.com
www.davita.com
*.mcoe.davita.com
bcc2.talentera.com
api.piet-app.davita.com
bcc2.talentera.com
prod-podservice.rx-np.davita.com
feat-logging-test.ogb-np.davita.com
w3mail.davita.com
drvpn.davita.com
denver.davita.com
falcongithub.davita.com
5720147234914304-fe1.pantheonsite.io
bcc2.talentera.com
licensepartners.davita.com
backend-04c53-ckd.patient-np.davita.com
careers.davita.com
bcc2.talentera.com
seavpn.davita.com
davita.com
vertex-dev3.davita.com
*.mcoe.davita.com
leapfrog-ssl-22.gcs-web.com
apps.stagemcp.davita.com
bcc2.talentera.com
bcc2.talentera.com
backend-e26b1-upp-admin.patient-np.davita.com
bcc2.talentera.com
netmri.davita.com
adfs.davita.com
sharedapp.davita.com
den4-clinic-raduis1.davita.com
xenweb.davita.com
jobs.davita.com
vault-cassandra.davita.com
Certificate
The complete raw certificate details for apps.stagemcp.davita.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIQTfnYOgK6O8GTrhNhEpvUvTANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y NDAyMTQxOTA1MjRaFw0yNTAyMTQxOTA1MjNaMGsxCzAJBgNVBAYTAlVTMRMwEQYD VQQIEwpDYWxpZm9ybmlhMRMwEQYDVQQHEwpFbCBTZWd1bmRvMQ8wDQYDVQQKEwZE YVZpdGExITAfBgNVBAMTGGFwcHMuc3RhZ2VtY3AuZGF2aXRhLmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAKxQnOnFGo20/GUiECmytT6r4SqBqERs BwYhbS/9/Wtk8ic+NDyUqYEVJ7UU0Txcp1KfS4k1Z2HHEbGXjD4nfeuWcomuSPEW TdB3aJWNBgvstAKDCJABku9KRKcNIqsX3ZzDecAuJV1lNYmKrgvh3uYFOOuKrnFs 6dfX5W8yX/JUivdqV+5mEEtF1W9MJgnALik24CMfv3yFpXbHX8LSM3oDgkMb7xTi l9rh7Yiff8c/5nTuRCaJvChpEgoeAmKl6xCHalOTq+X2syiK1B+oPYuQjULpWB5I VYYR4ujzZLDHvTBSEoECL7e4I/V5fWtkIn4M7I8k/7gCpSOS8AiqdUUCAwEAAaOC AW8wggFrMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLkYVtidvABWF7ICNsjhvZ7m rNEPMB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DGCky/MGgGCCsGAQUFBwEB BFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYB BQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAz BgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsu Y3JsMCMGA1UdEQQcMBqCGGFwcHMuc3RhZ2VtY3AuZGF2aXRhLmNvbTAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBMGA1UdIAQM MAowCAYGZ4EMAQICMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBEmEaeo5J9MMtvDCgiMXiB/g5ZMolN5U/tSvXysf+iMySi8hIBLoPEQAV9 mzUPdgXnBmYHQP63FbdcR9yWaaCy3waK8G5ooEYLeppbHwEr1QLA+TIB317khK2Y 0naLAbi+iN8fXCD9+4rF1fslQEJiM5Kgwwipg504CT6uYOMSd03P73vtMzIf4SyG dSq1Ar7JCRdhVwZqh+mzfbyRATSGbuatfwkXtA+t7K+tzDHlEOgVCETpjwYeZvnI VoB8rHt2kPfKuU32+6ts+7/G9hJ0u+xUCFV+wug59YlNAIJ8+NhGo8ZgVoQRQWP/ hJHo7jGqSIS7ybIAZhX7JFRSeTvt -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFCc6cUajbT8ZSIQKbK1 PqvhKoGoRGwHBiFtL/39a2TyJz40PJSpgRUntRTRPFynUp9LiTVnYccRsZeMPid9 65Zyia5I8RZN0HdolY0GC+y0AoMIkAGS70pEpw0iqxfdnMN5wC4lXWU1iYquC+He 5gU464qucWzp19flbzJf8lSK92pX7mYQS0XVb0wmCcAuKTbgIx+/fIWldsdfwtIz egOCQxvvFOKX2uHtiJ9/xz/mdO5EJom8KGkSCh4CYqXrEIdqU5Or5fazKIrUH6g9 i5CNQulYHkhVhhHi6PNksMe9MFISgQIvt7gj9Xl9a2QifgzsjyT/uAKlI5LwCKp1 RQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 103647823189765621293816961235513234621 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 19:05:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-14 19:05:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'El Segundo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DaVita' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apps.stagemcp.davita.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21752740177452055588817126960833764494265602663774015585694149410567402378683651890257611157240899202948372988672649587433594969005238552064663020384751881429091889772131253040834951546749516648303488412532749050322422886445349708676994170415079795419072248738908109381789127454121256337379384012942704412844490781467659311856831312638110489903219804010042396070855102245688781753321134043674711336948559732167062054200897627358047008512479937944543552095170332805921682110075683122126125098855556011295101482840696125341658799192744926147601557617111732198518683008904924877033524977520345219263172564118023332066629 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b91856d89dbc005617b20236c8e1bd9ee6acd10f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.stagemcp.davita.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004498469ea3927d30cb6f0c2822317881fe0e5932894de54fed4af5f2b1ffa23324a2f212012e83c440057d9b350f7605e706660740feb715b75c47dc9669a0b2df068af06e68a0460b7a9a5b1f012bd502c0f93201df5ee484ad98d2768b01b8be88df1f5c20fdfb8ac5d5fb254042623392a0c308a9839d38093eae60e312774dcfef7bed33321fe12c86752ab502bec909176157066a87e9b37dbc910134866ee6ad7f0917b40fadecafadcc31e510e8150844e98f061e66f9c856807cac7b7690f7cab94df6fbab6cfbbfc6f61274bbec5408557ec2e839f5894d00827cf8d846a3c6605684114163ff8491e8ee31aa4884bbc9b2006615fb245452793bed