blog.stopware.com
- HubSpot, Inc. -
Issued by CloudFlare Inc Compatibility CA-3
About this certificate
This digital certificate with serial number 04:55:4e:7f:01:92:8d:43:28:0e:ea:3f:cc:fd:fb:55 was issued on by CloudFlare, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- CAs MUST NOT issue any new Subscriber certificates or Subordinate CA certificates using SHA-1 after 1 January 2016 (BRs: 7.1.3)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber certificates using the SHA-1 algorithm SHOULD NOT have an expiration date later than 1 Jan 2017 (BRs: 7.1.3)
HubSpot, Inc.
Organization:
HubSpot, Inc.
State / Province:
MA
Locality: Cambridge
Country: US
Locality: Cambridge
Country: US
CloudFlare, Inc.
Organization:
CloudFlare, Inc.
State / Province:
CA
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:55:4e:7f:01:92:8d:43:28:0e:ea:3f:cc:fd:fb:55Serial Number (int): 5759849306527503253881783152468163413
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: da:c9:45:af:96:f1:de:72:b3:49:76:00:fa:4a:22:04:ee:88:9d:23
AuthorityKeyId: 97:49:c5:f6:84:14:73:df:73:ba:cc:a9:66:ba:f9:a6:3c:59:c6:ae
Fingerprint (sha1): de:18:64:fe:5a:14:37:ba:33:bf:9f:c8:9f:58:6f:aa:f8:57:03:53
Fingerprint (sha256): 28:b1:75:8f:51:72:f1:9d:7b:05:34:7d:bc:a5:b9:e2:6f:36:29:fb:be:41:96:76:22:4d:85:4c:25:19:e6:b8
Issuing Certificate URL: http://cacerts.digicert.com/CloudFlareIncCompatibilityCA-3.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/CloudFlareIncCompatibilityCA3.crl
CRL Distribution Point: http://crl4.digicert.com/CloudFlareIncCompatibilityCA3.crl
Check the revocation status for certificate blog.stopware.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for blog.stopware.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blog.stopware.com
Other certificates including the domain name stopware.com
(limited to 100 certificates)
invoice.redsixdigital.com
info.stopware.com
portail.digit-info.fr
ticket.antwons.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
blog.stopware.com
support.xceed.com
stopware.com
info.stopware.com
incapsula.com
invoice.redsixdigital.com
support.xceed.com
incapsula.com
incapsula.com
invoice.redsixdigital.com
incapsula.com
incapsula.com
invoice.redsixdigital.com
incapsula.com
stopware.com
incapsula.com
support.xceed.com
support.adrytech.com
books.polariscrmsuccess.com
clients.proboxes.bh
blog.stopware.com
support.xceed.com
stopware.com
incapsula.com
incapsula.com
incapsula.com
support.xceed.com
invoice.redsixdigital.com
stopware.com
invoice.orbitalcomputers.com
incapsula.com
transact.wellgrotech.com
incapsula.com
invoice.redsixdigital.com
invoice.redsixdigital.com
incapsula.com
blog.stopware.com
info.stopware.com
blog.stopware.com
incapsula.com
stopware.com
incapsula.com
incapsula.com
incapsula.com
books.industrialairpurification.com
invoice.redsixdigital.com
blog.stopware.com
incapsula.com
billing.robsonsupport.com
support.xceed.com
stopware.com
incapsula.com
incapsula.com
helpdesk.micromass.com
incapsula.com
incapsula.com
incapsula.com
accounts.cananphoto.com
help.fidigital.ae
books.secursignal.com
incapsula.com
incapsula.com
info.stopware.com
incapsula.com
incapsula.com
bookstest.sujaynsg.in
incapsula.com
incapsula.com
incapsula.com
incapsula.com
accounts.digilifes.com
stopware.com
incapsula.com
incapsula.com
info.stopware.com
incapsula.com
incapsula.com
portail.digit-info.fr
incapsula.com
incapsula.com
transact.wellgrotech.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
transact.wellgrotech.com
rbac.oodc.com.ph
blog.stopware.com
incapsula.com
incapsula.com
incapsula.com
info.stopware.com
portail.digit-info.fr
ticket.antwons.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
blog.stopware.com
support.xceed.com
stopware.com
info.stopware.com
incapsula.com
invoice.redsixdigital.com
support.xceed.com
incapsula.com
incapsula.com
invoice.redsixdigital.com
incapsula.com
incapsula.com
invoice.redsixdigital.com
incapsula.com
stopware.com
incapsula.com
support.xceed.com
support.adrytech.com
books.polariscrmsuccess.com
clients.proboxes.bh
blog.stopware.com
support.xceed.com
stopware.com
incapsula.com
incapsula.com
incapsula.com
support.xceed.com
invoice.redsixdigital.com
stopware.com
invoice.orbitalcomputers.com
incapsula.com
transact.wellgrotech.com
incapsula.com
invoice.redsixdigital.com
invoice.redsixdigital.com
incapsula.com
blog.stopware.com
info.stopware.com
blog.stopware.com
incapsula.com
stopware.com
incapsula.com
incapsula.com
incapsula.com
books.industrialairpurification.com
invoice.redsixdigital.com
blog.stopware.com
incapsula.com
billing.robsonsupport.com
support.xceed.com
stopware.com
incapsula.com
incapsula.com
helpdesk.micromass.com
incapsula.com
incapsula.com
incapsula.com
accounts.cananphoto.com
help.fidigital.ae
books.secursignal.com
incapsula.com
incapsula.com
info.stopware.com
incapsula.com
incapsula.com
bookstest.sujaynsg.in
incapsula.com
incapsula.com
incapsula.com
incapsula.com
accounts.digilifes.com
stopware.com
incapsula.com
incapsula.com
info.stopware.com
incapsula.com
incapsula.com
portail.digit-info.fr
incapsula.com
incapsula.com
transact.wellgrotech.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
transact.wellgrotech.com
rbac.oodc.com.ph
blog.stopware.com
incapsula.com
incapsula.com
incapsula.com
Certificate
The complete raw certificate details for blog.stopware.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIQBFVOfwGSjUMoDuo/zP37VTANBgkqhkiG9w0BAQUFADB5 MQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExFjAUBgNVBAcTDVNhbiBGcmFuY2lz Y28xGTAXBgNVBAoTEENsb3VkRmxhcmUsIEluYy4xKjAoBgNVBAMTIUNsb3VkRmxh cmUgSW5jIENvbXBhdGliaWxpdHkgQ0EtMzAeFw0xODAxMjAwMDAwMDBaFw0xODA4 MTAxMjAwMDBaMGIxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJNQTESMBAGA1UEBxMJ Q2FtYnJpZGdlMRYwFAYDVQQKEw1IdWJTcG90LCBJbmMuMRowGAYDVQQDExFibG9n LnN0b3B3YXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOyd jwJ/uEEJhmUM6JirgviqKWYLsgTRV+T57bhYCq7xUge3C2YF4Ts4yCaXjt/g8gxu B5UVsTEGMt33/QekQ3PYW7NE75fDv3szuC4JoQPh4Jiyvpsp3PAom52UHLoxXYNW nd5iuWSC8EZNY4nxa1HRw1T/X/nxxbfBTxfD7bD0DFHMe7sj2GPi7phZVO8nKook vHO0MtDKNwCJT11phlFKpMpv/tPt5qLTJm7/xnaUCmnrPz9OojKylnfItNrZnTHX 2BdC98UsZd0DsbKVdWAGTJTPqbFypcrpU3xzSqvkU5OIqQQ/2Oh3mRqL1fWbOboa igIwMlb/h61KXKSNq3ECAwEAAaOCAfgwggH0MB8GA1UdIwQYMBaAFJdJxfaEFHPf c7rMqWa6+aY8WcauMB0GA1UdDgQWBBTayUWvlvHecrNJdgD6SiIE7oidIzAcBgNV HREEFTATghFibG9nLnN0b3B3YXJlLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGPBgNVHR8EgYcwgYQwQKA+oDyGOmh0 dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9DbG91ZEZsYXJlSW5jQ29tcGF0aWJpbGl0 eUNBMy5jcmwwQKA+oDyGOmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9DbG91ZEZs YXJlSW5jQ29tcGF0aWJpbGl0eUNBMy5jcmwwQgYDVR0gBDswOTA3BglghkgBhv1s AQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzCB gAYIKwYBBQUHAQEEdDByMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2Vy dC5jb20wSgYIKwYBBQUHMAKGPmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9D bG91ZEZsYXJlSW5jQ29tcGF0aWJpbGl0eUNBLTMuY3J0MAwGA1UdEwEB/wQCMAAw DQYJKoZIhvcNAQEFBQADggEBAKoho1s/CArACKPyDRGOryGLuqVYiIWflF9nDCDK ZPXMUpqwiXI8yGin6ztKkZCjVplBKxOiP6cNbvzOOyl88ngtDnx7KwucFcWuGvSz hUGj4NDwswamMCHHGyYunpL4PGgSqIZp3rE0ZDcRl9CNTol+TrQS6PAPP0G5E+cH uqWwC23S1wJU073SVxQTiJLVany413nz32DkJ139hmTAXC7neqt1kR0l2TOYKWOx zkDJl4GpH1Nnv68LLJTTvlEcgg/14ZGllhHukmLKqwTTN8YaZm1l4XNZCHECvTsM utr9McdeBK87mYM9Ab955REgrIg659ZHNL45g1KP7P1r8zA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7J2PAn+4QQmGZQzomKuC +KopZguyBNFX5PntuFgKrvFSB7cLZgXhOzjIJpeO3+DyDG4HlRWxMQYy3ff9B6RD c9hbs0Tvl8O/ezO4LgmhA+HgmLK+mync8CibnZQcujFdg1ad3mK5ZILwRk1jifFr UdHDVP9f+fHFt8FPF8PtsPQMUcx7uyPYY+LumFlU7ycqiiS8c7Qy0Mo3AIlPXWmG UUqkym/+0+3motMmbv/GdpQKaes/P06iMrKWd8i02tmdMdfYF0L3xSxl3QOxspV1 YAZMlM+psXKlyulTfHNKq+RTk4ipBD/Y6HeZGovV9Zs5uhqKAjAyVv+HrUpcpI2r cQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5759849306527503253881783152468163413 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare Inc Compatibility CA-3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-10 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridge' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HubSpot, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.stopware.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29869935029104429536362523623779668272983878505303596145305188323258221394439815052188376766890657016430842175372972281462261697560338943633548435475460557891711257851425298215052718025585699110976700126946312708610899225734736489814656316658382340247479150668688622749500148724989421824230545766824964082196648306494018197217495839575390995657017462191548374467783011493404295863135865868269662611193775433069922794135707186459022091623091476076528488072344473259530225914139851801946031588160926733743481746426435328322128717093163603409760800126580575037609317661159244213466189103503424443004518205669769678269297 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9749c5f6841473df73bacca966baf9a63c59c6ae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dac945af96f1de72b3497600fa4a2204ee889d23 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.stopware.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudFlareIncCompatibilityCA3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudFlareIncCompatibilityCA3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudFlareIncCompatibilityCA-3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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