lwozzk.legacy.com
- Criteo Technology SAS -
Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 0f:e2:a2:06:59:bf:c7:67:90:d7:a6:7e:6a:ce:29:ef was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Criteo Technology SAS
Organization:
Criteo Technology SAS
State / Province:
Île-de-France
Locality: Paris
Country: FR
Locality: Paris
Country: FR
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:e2:a2:06:59:bf:c7:67:90:d7:a6:7e:6a:ce:29:efSerial Number (int): 21115165280303388160827532754279082479
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 9d:a0:b7:ec:1c:8f:c5:8b:43:f1:ad:a9:56:a0:11:4e:0c:aa:f7:1c
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17
Fingerprint (sha1): 88:5a:88:52:82:38:89:4b:8b:1c:93:49:56:b9:bf:bc:7b:cc:2a:74
Fingerprint (sha256): 29:8c:ef:d6:c5:f1:0e:24:7e:0d:82:e9:b6:73:25:99:bb:ee:6d:ae:13:77:c9:1c:1d:48:04:e8:ac:63:6b:d8
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
Check the revocation status for certificate lwozzk.legacy.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lwozzk.legacy.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Agreement
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lwozzk.legacy.com
Other certificates including the domain name legacy.com
(limited to 100 certificates)
carpepm.almonds.com
ssl003.insnw.net
ssl860932.cloudflaressl.com
calendar.sdzsafaripark.org
banking-business-review.com
cdn-test.battlefields.org
citeak.multidevcom.uaf.edu
ssl860932.cloudflaressl.com
chns120.courseresource.yale.edu
*.legacy.com
banking-business-review.com
tls.automattic.com
ssl003.insnw.net
ssl003.insnw.net
sni.cloudflaressl.com
www.legacy.com
chns168.courseresource.yale.edu
uat.legacy.com
club.kjzz.org
legacy.com
memorialwebsites.legacy.com
www.legacy.com
legacy.com
5691967484723200-fe1.pantheonsite.io
160.167.tmcapital.com
160.167.tmcapital.com
brassunion.com
acadmintest.cuofco.org
www.legacy.com
chns168.courseresource.yale.edu
*.legacy.com
acadmintest.cuofco.org
uat.legacy.com
buyersguide.aaps.org
tls.automattic.com
cdi.uga.edu
citeak.multidevcom.uaf.edu
chns168.courseresource.yale.edu
click.alerts.legacy.com
caldesignlab.berkeley.edu
160.167.tmcapital.com
careers.whittier.edu
ssl003.insnw.net
chns130.courseresource.yale.edu
leftwoods.com
sni.cloudflaressl.com
ssl003.insnw.net
cms.legacy.com
live-legacy-cms.pantheonsite.io
citrix.remote.naylor.com
2.www.upenn.edu
sni.cloudflaressl.com
banking-business-review.com
160.167.tmcapital.com
sympathy.legacy.com
clc.shawnee.edu
pro.legacy.com
chns150.courseresource.yale.edu
www.legacy.com
160.167.tmcapital.com
sni.cloudflaressl.com
tls.automattic.com
cci520-new.courtinnovation.org
cci520-new.courtinnovation.org
eduhup.com
media2.legacy.com
legacyowa.legacy.com
campaign.ucsc.edu
ssl003.insnw.net
chns130.courseresource.yale.edu
caldesignlab.berkeley.edu
5691967484723200-fe1.pantheonsite.io
eduhup.com
5660980839186432-fe2.pantheonsite.io
lwozzk.legacy.com
census.arizona.edu
tls.automattic.com
pro.legacy.com
chns168.courseresource.yale.edu
ssl003.insnw.net
thepointalehouse.com
lwozzk.legacy.com
sni.cloudflaressl.com
leeanatankersley.com
ssl003.insnw.net
sni.cloudflaressl.com
ssl003.insnw.net
ssl003.insnw.net
ssl003.insnw.net
ssl003.insnw.net
sni.cloudflaressl.com
ssl860932.cloudflaressl.com
ssl003.insnw.net
banking-business-review.com
ssl003.insnw.net
banking-business-review.com
ssl003.insnw.net
www.legacy.com
*.legacy.com
banking-business-review.com
ssl003.insnw.net
ssl860932.cloudflaressl.com
calendar.sdzsafaripark.org
banking-business-review.com
cdn-test.battlefields.org
citeak.multidevcom.uaf.edu
ssl860932.cloudflaressl.com
chns120.courseresource.yale.edu
*.legacy.com
banking-business-review.com
tls.automattic.com
ssl003.insnw.net
ssl003.insnw.net
sni.cloudflaressl.com
www.legacy.com
chns168.courseresource.yale.edu
uat.legacy.com
club.kjzz.org
legacy.com
memorialwebsites.legacy.com
www.legacy.com
legacy.com
5691967484723200-fe1.pantheonsite.io
160.167.tmcapital.com
160.167.tmcapital.com
brassunion.com
acadmintest.cuofco.org
www.legacy.com
chns168.courseresource.yale.edu
*.legacy.com
acadmintest.cuofco.org
uat.legacy.com
buyersguide.aaps.org
tls.automattic.com
cdi.uga.edu
citeak.multidevcom.uaf.edu
chns168.courseresource.yale.edu
click.alerts.legacy.com
caldesignlab.berkeley.edu
160.167.tmcapital.com
careers.whittier.edu
ssl003.insnw.net
chns130.courseresource.yale.edu
leftwoods.com
sni.cloudflaressl.com
ssl003.insnw.net
cms.legacy.com
live-legacy-cms.pantheonsite.io
citrix.remote.naylor.com
2.www.upenn.edu
sni.cloudflaressl.com
banking-business-review.com
160.167.tmcapital.com
sympathy.legacy.com
clc.shawnee.edu
pro.legacy.com
chns150.courseresource.yale.edu
www.legacy.com
160.167.tmcapital.com
sni.cloudflaressl.com
tls.automattic.com
cci520-new.courtinnovation.org
cci520-new.courtinnovation.org
eduhup.com
media2.legacy.com
legacyowa.legacy.com
campaign.ucsc.edu
ssl003.insnw.net
chns130.courseresource.yale.edu
caldesignlab.berkeley.edu
5691967484723200-fe1.pantheonsite.io
eduhup.com
5660980839186432-fe2.pantheonsite.io
lwozzk.legacy.com
census.arizona.edu
tls.automattic.com
pro.legacy.com
chns168.courseresource.yale.edu
ssl003.insnw.net
thepointalehouse.com
lwozzk.legacy.com
sni.cloudflaressl.com
leeanatankersley.com
ssl003.insnw.net
sni.cloudflaressl.com
ssl003.insnw.net
ssl003.insnw.net
ssl003.insnw.net
ssl003.insnw.net
sni.cloudflaressl.com
ssl860932.cloudflaressl.com
ssl003.insnw.net
banking-business-review.com
ssl003.insnw.net
banking-business-review.com
ssl003.insnw.net
www.legacy.com
*.legacy.com
banking-business-review.com
Certificate
The complete raw certificate details for lwozzk.legacy.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGTCCBQGgAwIBAgIQD+KiBlm/x2eQ16Z+as4p7zANBgkqhkiG9w0BAQsFADBZ MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjQw MTMxMDAwMDAwWhcNMjQwNDI5MjM1OTU5WjByMQswCQYDVQQGEwJGUjEXMBUGA1UE CAwOw45sZS1kZS1GcmFuY2UxDjAMBgNVBAcTBVBhcmlzMR4wHAYDVQQKExVDcml0 ZW8gVGVjaG5vbG9neSBTQVMxGjAYBgNVBAMTEWx3b3p6ay5sZWdhY3kuY29tMFkw EwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEkiFpKlCMUcIP0x7YCMM3suk7KYE/g+RB QI9k7ilEHZOvLUVd/QcY0Z19Uv5g0eeHbScMWrWN1nPCMphR0vs8Z6OCA40wggOJ MB8GA1UdIwQYMBaAFHSFgMBmx9833s+9KTeqAx2+7c0XMB0GA1UdDgQWBBSdoLfs HI/Fi0PxralWoBFODKr3HDAcBgNVHREEFTATghFsd296emsubGVnYWN5LmNvbTA+ BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRp Z2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgOIMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5k aWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEt MS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEds b2JhbEcyVExTUlNBU0hBMjU2MjAyMENBMS0xLmNybDCBhwYIKwYBBQUHAQEEezB5 MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUH MAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcy VExTUlNBU0hBMjU2MjAyMENBMS0xLmNydDAMBgNVHRMBAf8EAjAAMIIBfgYKKwYB BAHWeQIEAgSCAW4EggFqAWgAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlG cR+1mwAAAY1fA/cwAAAEAwBHMEUCICwGWBy1bhGnQc/p+3q05+OCMVS6XtO2sG8v 2iUi8YYzAiEApOcFeGWCHXbmZ2Vbs/Jm4POBJ3mb5Xb4ysLx/nQ+VvIAdgBIsONr 2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY1fA/csAAAEAwBHMEUCIQD3 tyIM/rgooyt/K+dO6+HyXmBaKhgkdj494ArmDu5wwgIgdhcNNUiqgRboElrfbUCe VaxmMGJavCcERX0Y+NOIv3EAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0w SNf7qwAAAY1fA/cPAAAEAwBHMEUCIA9f0D1dwrX+0NbkujrbaGL0EOvBd6XSn2lj qeQHuQQvAiEAmQXdA7t6NFNQjZ1m/p41GJH3h1NbKi7DxvZY1/4wIY8wDQYJKoZI hvcNAQELBQADggEBAGRsYyRkdZWkgzowDkcONSEebMWNanuFPXC6UHuOUyIVkKs4 uhFtDdSKIvN4NWd6JIqufhSnP68UT/saPH4SlYBdvfj7VJ4z17HvIkgWyDqTz9qJ LWNRilJ/nVKEvoOSs087+SZ4+n+4oQIKmqu9EK86jEJaMjlxGSRCcMWiLlndohv/ 6B/VW33EMv5yLG/gSBzlEHy12xCNanXo55Qc3cEvDOW33v5c7pzAD57Vp+DvTMnR swTeHwsHzskIzjBCPR2DV3ANmJCaBIpAkwfaQmpejJwR+x2D2ZVt34OUqzM4NMns 5QMC59RFYihFUHzobK/rA10y9ojszDUCNaP7GQQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEkiFpKlCMUcIP0x7YCMM3suk7KYE/ g+RBQI9k7ilEHZOvLUVd/QcY0Z19Uv5g0eeHbScMWrWN1nPCMphR0vs8Zw== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21115165280303388160827532754279082479 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Criteo Technology SAS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lwozzk.legacy.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 00049221692a508c51c20fd31ed808c337b2e93b29813f83e441408f64ee29441d93af2d455dfd0718d19d7d52fe60d1e7876d270c5ab58dd673c2329851d2fb3c67 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9da0b7ec1c8fc58b43f1ada956a0114e0caaf71c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lwozzk.legacy.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 0388 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d5f03f730000004030047304502202c06581cb56e11a741cfe9fb7ab4e7e3823154ba5ed3b6b06f2fda2522f18633022100a4e7057865821d76e667655bb3f266e0f38127799be576f8cac2f1fe743e56f200760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d5f03f72c0000040300473045022100f7b7220cfeb828a32b7f2be74eebe1f25e605a2a1824763e3de00ae60eee70c2022076170d3548aa8116e8125adf6d409e55ac6630625abc2704457d18f8d388bf71007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d5f03f70f000004030047304502200f5fd03d5dc2b5fed0d6e4ba3adb6862f410ebc177a5d29f6963a9e407b9042f0221009905dd03bb7a3453508d9d66fe9e351891f787535b2a2ec3c6f658d7fe30218f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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