secure.wechat-shop.iwc.cn
- Richemont International SA -
Issued by DigiCert Global CA G2
About this certificate
This digital certificate with serial number 03:b2:c9:29:45:d1:8e:43:bd:a6:3d:25:7b:af:85:1f was issued on by DigiCert Inc.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Richemont International SA
Organization:
Richemont International SA
Organization unit: IWC
Organization unit: IWC
State / Province:
Genève
Locality: Bellevue
Country: CH
Locality: Bellevue
Country: CH
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b2:c9:29:45:d1:8e:43:bd:a6:3d:25:7b:af:85:1fSerial Number (int): 4915992862466747006793269278436984095
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: b9:ac:e6:c7:2b:9f:db:02:60:f6:a7:f6:1d:4b:5f:e8:ed:31:1c:4b
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20
Fingerprint (sha1): cf:f5:1e:94:7b:11:e1:43:88:3b:62:97:ec:4d:15:6e:8a:ee:15:0b
Fingerprint (sha256): 28:6e:77:87:d7:d8:34:21:dc:a7:26:b1:00:cd:db:14:a0:ae:ad:08:82:12:e5:6e:54:16:54:11:20:8e:ee:37
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl
Check the revocation status for certificate secure.wechat-shop.iwc.cn
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for secure.wechat-shop.iwc.cn
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
binding.iwc.cn
lbs.iwc.cn
secure.wechat-shop.iwc.cn
lbs.iwc.cn
secure.wechat-shop.iwc.cn
Other certificates including the domain name iwc.cn
(limited to 100 certificates)
weboutique.quality.vancleefarpels.com
weboutique.quality.vancleefarpels.com
secure.wechat-shop.iwc.cn
linemedia.preprod.richemont.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
san-cn.cloudinary.com
san-cn.cloudinary.com
san-cn.cloudinary.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
mobile.iwc.com
weboutique.dev.vancleefarpels.com
mobile.iwc.com
api.weboutique.quality.iwc.cn
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
portugieser2020.iwc.cn
secure.wechat-shop.iwc.cn
weboutique.preprod.vancleefarpels.com
www.dev.iwc.cn
www.quality.alange-soehne.com
san-cn.cloudinary.com
secure.wechat-shop.iwc.cn
san-cn.cloudinary.com
san-cn.cloudinary.com
mobile.iwc.com
san-cn.cloudinary.com
san-cn.cloudinary.com
san-cn.cloudinary.com
weboutique.dev.vancleefarpels.com
secure.wechat-shop.iwc.cn
san-cn.cloudinary.com
mobile.iwc.com
san-cn.cloudinary.com
admin.giftoftime.quality.iwc.cn
linemedia.preprod.richemont.com
weboutique.montblanc.cn
www.quality.iwc.cn
san-cn.cloudinary.com
mobile.iwc.com
san-cn.cloudinary.com
san-cn.cloudinary.com
lepetitprince.iwc.cn
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
portugieser2020.iwc.cn
san-cn.cloudinary.com
weboutique.quality.vancleefarpels.com
lepetitprince.iwc.cn
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
san-cn.cloudinary.com
secure.wechat-shop.iwc.cn
linemedia.preprod.richemont.com
san-cn.cloudinary.com
lepetitprince.iwc.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
api.weboutique.quality.iwc.cn
san-cn.cloudinary.com
san-cn.cloudinary.com
san-cn.cloudinary.com
cfrsa-stg.rogerdubuis.com
san-cn.cloudinary.com
weboutique.quality.vancleefarpels.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
san-cn.cloudinary.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
cfrsa-dev.rogerdubuis.com
san-cn.cloudinary.com
san-cn.cloudinary.com
www.quality.alange-soehne.com
cfrsa-dev.rogerdubuis.com
mobile.iwc.com
www.quality.alange-soehne.com
www.quality.alange-soehne.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
secure.wechat-shop.preprod.iwc.cn
mobile.iwc.com
api.wechat-tracking.iwc.cn
san-cn.cloudinary.com
lepetitprince.iwc.cn
watchmakingclass.iwc.cn
san-cn.cloudinary.com
weboutique.quality.vancleefarpels.com
secure.wechat-shop.iwc.cn
linemedia.preprod.richemont.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
san-cn.cloudinary.com
san-cn.cloudinary.com
san-cn.cloudinary.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
mobile.iwc.com
weboutique.dev.vancleefarpels.com
mobile.iwc.com
api.weboutique.quality.iwc.cn
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
portugieser2020.iwc.cn
secure.wechat-shop.iwc.cn
weboutique.preprod.vancleefarpels.com
www.dev.iwc.cn
www.quality.alange-soehne.com
san-cn.cloudinary.com
secure.wechat-shop.iwc.cn
san-cn.cloudinary.com
san-cn.cloudinary.com
mobile.iwc.com
san-cn.cloudinary.com
san-cn.cloudinary.com
san-cn.cloudinary.com
weboutique.dev.vancleefarpels.com
secure.wechat-shop.iwc.cn
san-cn.cloudinary.com
mobile.iwc.com
san-cn.cloudinary.com
admin.giftoftime.quality.iwc.cn
linemedia.preprod.richemont.com
weboutique.montblanc.cn
www.quality.iwc.cn
san-cn.cloudinary.com
mobile.iwc.com
san-cn.cloudinary.com
san-cn.cloudinary.com
lepetitprince.iwc.cn
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
portugieser2020.iwc.cn
san-cn.cloudinary.com
weboutique.quality.vancleefarpels.com
lepetitprince.iwc.cn
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
san-cn.cloudinary.com
secure.wechat-shop.iwc.cn
linemedia.preprod.richemont.com
san-cn.cloudinary.com
lepetitprince.iwc.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
api.weboutique.quality.iwc.cn
san-cn.cloudinary.com
san-cn.cloudinary.com
san-cn.cloudinary.com
cfrsa-stg.rogerdubuis.com
san-cn.cloudinary.com
weboutique.quality.vancleefarpels.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
san-cn.cloudinary.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
cfrsa-dev.rogerdubuis.com
san-cn.cloudinary.com
san-cn.cloudinary.com
www.quality.alange-soehne.com
cfrsa-dev.rogerdubuis.com
mobile.iwc.com
www.quality.alange-soehne.com
www.quality.alange-soehne.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
secure.wechat-shop.preprod.iwc.cn
mobile.iwc.com
api.wechat-tracking.iwc.cn
san-cn.cloudinary.com
lepetitprince.iwc.cn
watchmakingclass.iwc.cn
san-cn.cloudinary.com
Certificate
The complete raw certificate details for secure.wechat-shop.iwc.cn in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIQA7LJKUXRjkO9pj0le6+FHzANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTgwNzI3MDAwMDAwWhcNMTkwNzEzMTIw MDAwWjCBiTELMAkGA1UEBhMCQ0gxEDAOBgNVBAgMB0dlbsOodmUxETAPBgNVBAcT CEJlbGxldnVlMSMwIQYDVQQKExpSaWNoZW1vbnQgSW50ZXJuYXRpb25hbCBTQTEM MAoGA1UECxMDSVdDMSIwIAYDVQQDExlzZWN1cmUud2VjaGF0LXNob3AuaXdjLmNu MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWSIiZv5yiXlVwNmyFRc 5rZ1cBSLe2HyyvBQ7qWxdPIiScaXT+n6nuETIVkuM+aLMM3u26fLlJCTV3MUUahM hgbk+ZSEtdp0JXUz4asFzY+v8kDRyLRr2joWsnoSeDGN1GBF/jOL2js+zv5M1Ly3 uC+ucRuCxtSduhwcCT7k2AJVvlPhxwUh6dYqhY1hAQSrGhQ2qgQlA6IVVhZimrZp IHx0AClJfbu5r7P6tGtVxkizu43VE3AF+Tx4z6ujib8Vcs/xoTNCLKryCx1JuAXT jV4YQFUjUC1X5wi93ZVhkqCKu29UZ8GJ/aYmT4hSenge7rRK3J39WPw+WSk6x401 6QIDAQABo4ICEjCCAg4wHwYDVR0jBBgwFoAUJG4rLdBqklFRJWkBqppHponnQCAw HQYDVR0OBBYEFLms5scrn9sCYPan9h1LX+jtMRxLMEAGA1UdEQQ5MDeCDmJpbmRp bmcuaXdjLmNuggpsYnMuaXdjLmNughlzZWN1cmUud2VjaGF0LXNob3AuaXdjLmNu MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw dwYDVR0fBHAwbjA1oDOgMYYvaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lD ZXJ0R2xvYmFsQ0FHMi5jcmwwNaAzoDGGL2h0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNv bS9EaWdpQ2VydEdsb2JhbENBRzIuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEB MCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYG Z4EMAQICMHQGCCsGAQUFBwEBBGgwZjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3Au ZGlnaWNlcnQuY29tMD4GCCsGAQUFBzAChjJodHRwOi8vY2FjZXJ0cy5kaWdpY2Vy dC5jb20vRGlnaUNlcnRHbG9iYWxDQUcyLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB 1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBRqgQ04P1GtQw36ILb6R35 q0uQ8NdU6L9d4C49UtxDCLwog1dh4JVYqctXGcZ21pFMRCl6UG+4+sXPOuteGBlV QLM05l2Ntq59h842CjRHAlnDeuT9rcqx18HWHhCprFRs5EZ9VcBF2JCFQHwpjxql 4iRukNWq9oJJNGtX6z68x9ZxGBdU8w3gO/8plz2kV71fMFlSVr3n0AExrSrL2Dry zOqMjie01hZ7wmaW0d3TXafAPn8jpMZ7zs/tLBo3C55LEio4ZhNlNrbRy+ej1k20 V04sF0GFKyTcTXIRo0M4I4LgtRmITSV377TlhB4iDkOAt/n0iGFMo0z5JGLhvW7E -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWSIiZv5yiXlVwNmyFRc 5rZ1cBSLe2HyyvBQ7qWxdPIiScaXT+n6nuETIVkuM+aLMM3u26fLlJCTV3MUUahM hgbk+ZSEtdp0JXUz4asFzY+v8kDRyLRr2joWsnoSeDGN1GBF/jOL2js+zv5M1Ly3 uC+ucRuCxtSduhwcCT7k2AJVvlPhxwUh6dYqhY1hAQSrGhQ2qgQlA6IVVhZimrZp IHx0AClJfbu5r7P6tGtVxkizu43VE3AF+Tx4z6ujib8Vcs/xoTNCLKryCx1JuAXT jV4YQFUjUC1X5wi93ZVhkqCKu29UZ8GJ/aYmT4hSenge7rRK3J39WPw+WSk6x401 6QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4915992862466747006793269278436984095 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-13 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bellevue' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Richemont International SA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IWC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.wechat-shop.iwc.cn' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23908614481026968945878915801527146999725387470415505869050290441360116895683437451899715015606748711248051439636515033405669437772391948161964924159639071062336948350479186888936717697397640316108634098335735304683275275437051337970133741735449117117820278732432861652162966702270911771534898408825065560200673371799683626776807517481583693278005972678189978337414338452938755882328758644802430081988100322144000708664701985164816503242443324133771246295472503260133886028048106115804868655955232962008928108454365899149281804981008908658457614912131629436128177501136921737945545543540961048883970452552309680190953 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b9ace6c72b9fdb0260f6a7f61d4b5fe8ed311c4b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binding.iwc.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbs.iwc.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wechat-shop.iwc.cn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0051aa0434e0fd46b50c37e882dbe91df9ab4b90f0d754e8bf5de02e3d52dc4308bc28835761e09558a9cb5719c676d6914c44297a506fb8fac5cf3aeb5e18195540b334e65d8db6ae7d87ce360a34470259c37ae4fdadcab1d7c1d61e10a9ac546ce4467d55c045d89085407c298f1aa5e2246e90d5aaf68249346b57eb3ebcc7d671181754f30de03bff29973da457bd5f30595256bde7d00131ad2acbd83af2ccea8c8e27b4d6167bc26696d1ddd35da7c03e7f23a4c67bcecfed2c1a370b9e4b122a3866136536b6d1cbe7a3d64db4574e2c1741852b24dc4d7211a343382382e0b519884d2577efb4e5841e220e4380b7f9f488614ca34cf92462e1bd6ec4