sea1l3cliqa177141.davita.com
- DaVita -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number ac:62:1f:90:5b:97:c2:4c:00:00:00:00:50:f8:dd:1a was issued on by Entrust, Inc..
With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
DaVita
Organization:
DaVita
State / Province:
California
Locality: El Segundo
Country: US
Locality: El Segundo
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): ac:62:1f:90:5b:97:c2:4c:00:00:00:00:50:f8:dd:1aSerial Number (int): 229136700559041659736452995417393126682
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 63:0b:42:01:10:6e:76:8f:82:54:5e:92:7c:0a:62:c1:68:34:41:9d
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 76:d9:5d:58:72:0c:67:7d:32:e7:5c:c2:e4:09:19:8d:4b:db:df:ad
Fingerprint (sha256): 2e:27:eb:40:b8:c2:4c:89:65:c7:33:f7:1b:f9:9d:a1:8f:21:00:3f:36:7c:b1:5a:c6:ad:b1:8a:76:72:bf:86
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate sea1l3cliqa177141.davita.com
17
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sea1l3cliqa177141.davita.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sea1l3cliqa177141.davita.com
sea1l3cliqa177023.davita.com
sea1l3cliqa177154.davita.com
sea1l3cliqa174021.davita.com
sea1l3cliqa174138.davita.com
sea1l3cliqa174011.davita.com
sea1l3cliqa174012.davita.com
sea1l3cliqa179137.davita.com
sea1l3cliqa179138.davita.com
sea1l2cliqa179011.davita.com
sea1l2cliqa179121.davita.com
den3l3cliqa177014.davita.com
den3l3cliqa177144.davita.com
den4lcliqa197054.davita.com
den4lcliqa197055.davita.com
den3l3cliqa179134.davita.com
den3l3cliqa179135.davita.com
sea1l3cliqa177023.davita.com
sea1l3cliqa177154.davita.com
sea1l3cliqa174021.davita.com
sea1l3cliqa174138.davita.com
sea1l3cliqa174011.davita.com
sea1l3cliqa174012.davita.com
sea1l3cliqa179137.davita.com
sea1l3cliqa179138.davita.com
sea1l2cliqa179011.davita.com
sea1l2cliqa179121.davita.com
den3l3cliqa177014.davita.com
den3l3cliqa177144.davita.com
den4lcliqa197054.davita.com
den4lcliqa197055.davita.com
den3l3cliqa179134.davita.com
den3l3cliqa179135.davita.com
Other certificates including the domain name davita.com
(limited to 100 certificates)
vpnportal.davita.com
tacomavpn.davita.com
falcon.davita.com
ourcommunity.davita.com
bcc2.talentera.com
pressreleases.davita.com
bcc2.talentera.com
leapfrog-ssl-22.gcs-web.com
bcc2.talentera.com
isevpn.davita.com
emailmktg.davita.com
falconmobile.davita.com
vpnportal.davita.com
bcc2.talentera.com
davita.com
aslax.davita.com
davita.com
tmcentral.davita.com
*.reportsnp.davita.com
dsp.davita.com
clearpass.davita.com
bcc2.talentera.com
bcc2.talentera.com
falcondialysisqa.davita.com
falconbiebf.davita.com
bcc2.talentera.com
app.clinicalstudybiling.davita.com
bcc2.talentera.com
*.artifactory.davita.com
app.hrm.epe.davita.com
perf.physician-np.davita.com
brand.davita.com
DEN3T1CEXPCA01.davita.com
sso.starpoint.davita.com
support.cdnetworks.net
bcc2.talentera.com
bcc2.talentera.com
dsp.davita.com
app.physportalqa.davita.com
bcc2.talentera.com
tacomavpn.davita.com
bcc2.talentera.com
ola10.davita.com
bcc2.talentera.com
fe.paapp.davita.com
leapfrog-ssl-22.gcs-web.com
bcc2.talentera.com
redwoods.davita.com
ola10.davita.com
*.physiciansolutions.davita.com
bcc2.talentera.com
bcc2.talentera.com
5720147234914304-fe1.pantheonsite.io
5659118702428160-fe2.pantheonsite.io
prod.middleware.davita.com
bcc2.talentera.com
bcc2.talentera.com
denver.davita.com
*.intranet.davita.com
dsp.davita.com
help.oneviewdps.davita.com
bcc2.talentera.com
leapfrog-ssl-22.gcs-web.com
pressreleases.davita.com
www.davita.com
bcc2.talentera.com
api.piet-app.davita.com
bcc2.talentera.com
prod-podservice.rx-np.davita.com
feat-logging-test.ogb-np.davita.com
w3mail.davita.com
drvpn.davita.com
denver.davita.com
falcongithub.davita.com
5720147234914304-fe1.pantheonsite.io
bcc2.talentera.com
licensepartners.davita.com
backend-04c53-ckd.patient-np.davita.com
careers.davita.com
bcc2.talentera.com
seavpn.davita.com
davita.com
vertex-dev3.davita.com
leapfrog-ssl-22.gcs-web.com
apps.stagemcp.davita.com
bcc2.talentera.com
bcc2.talentera.com
backend-e26b1-upp-admin.patient-np.davita.com
bcc2.talentera.com
netmri.davita.com
adfs.davita.com
sharedapp.davita.com
den4-clinic-raduis1.davita.com
xenweb.davita.com
jobs.davita.com
vault-cassandra.davita.com
bcc2.talentera.com
netmri.davita.com
den3-lancopesmc.davita.com
*.davita.com
tacomavpn.davita.com
falcon.davita.com
ourcommunity.davita.com
bcc2.talentera.com
pressreleases.davita.com
bcc2.talentera.com
leapfrog-ssl-22.gcs-web.com
bcc2.talentera.com
isevpn.davita.com
emailmktg.davita.com
falconmobile.davita.com
vpnportal.davita.com
bcc2.talentera.com
davita.com
aslax.davita.com
davita.com
tmcentral.davita.com
*.reportsnp.davita.com
dsp.davita.com
clearpass.davita.com
bcc2.talentera.com
bcc2.talentera.com
falcondialysisqa.davita.com
falconbiebf.davita.com
bcc2.talentera.com
app.clinicalstudybiling.davita.com
bcc2.talentera.com
*.artifactory.davita.com
app.hrm.epe.davita.com
perf.physician-np.davita.com
brand.davita.com
DEN3T1CEXPCA01.davita.com
sso.starpoint.davita.com
support.cdnetworks.net
bcc2.talentera.com
bcc2.talentera.com
dsp.davita.com
app.physportalqa.davita.com
bcc2.talentera.com
tacomavpn.davita.com
bcc2.talentera.com
ola10.davita.com
bcc2.talentera.com
fe.paapp.davita.com
leapfrog-ssl-22.gcs-web.com
bcc2.talentera.com
redwoods.davita.com
ola10.davita.com
*.physiciansolutions.davita.com
bcc2.talentera.com
bcc2.talentera.com
5720147234914304-fe1.pantheonsite.io
5659118702428160-fe2.pantheonsite.io
prod.middleware.davita.com
bcc2.talentera.com
bcc2.talentera.com
denver.davita.com
*.intranet.davita.com
dsp.davita.com
help.oneviewdps.davita.com
bcc2.talentera.com
leapfrog-ssl-22.gcs-web.com
pressreleases.davita.com
www.davita.com
bcc2.talentera.com
api.piet-app.davita.com
bcc2.talentera.com
prod-podservice.rx-np.davita.com
feat-logging-test.ogb-np.davita.com
w3mail.davita.com
drvpn.davita.com
denver.davita.com
falcongithub.davita.com
5720147234914304-fe1.pantheonsite.io
bcc2.talentera.com
licensepartners.davita.com
backend-04c53-ckd.patient-np.davita.com
careers.davita.com
bcc2.talentera.com
seavpn.davita.com
davita.com
vertex-dev3.davita.com
leapfrog-ssl-22.gcs-web.com
apps.stagemcp.davita.com
bcc2.talentera.com
bcc2.talentera.com
backend-e26b1-upp-admin.patient-np.davita.com
bcc2.talentera.com
netmri.davita.com
adfs.davita.com
sharedapp.davita.com
den4-clinic-raduis1.davita.com
xenweb.davita.com
jobs.davita.com
vault-cassandra.davita.com
bcc2.talentera.com
netmri.davita.com
den3-lancopesmc.davita.com
*.davita.com
Certificate
The complete raw certificate details for sea1l3cliqa177141.davita.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHQzCCBiugAwIBAgIRAKxiH5Bbl8JMAAAAAFD43RowDQYJKoZIhvcNAQELBQAw gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN MTkxMDE4MTQ1ODQ3WhcNMjIwMTE3MTUyODQ3WjBvMQswCQYDVQQGEwJVUzETMBEG A1UECBMKQ2FsaWZvcm5pYTETMBEGA1UEBxMKRWwgU2VndW5kbzEPMA0GA1UEChMG RGFWaXRhMSUwIwYDVQQDExxzZWExbDNjbGlxYTE3NzE0MS5kYXZpdGEuY29tMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QhKZbUhi2zhPJX8p7cNMIXp 8tq5Y/E+a0W9pUNfb/v4KGfd+5zAk4ve8n0UyzU9cmyqcsJ5h7OOfMcW3JR9icJj 5GbmF38JecELiJyKhE+jufaYiycGFDQSvS9pDF0arobkTsCkdTOpqKJ7KnzBprYL pxJGeqbHENw2n8n9SOI1dV6/6UmwiwS6tZ3X6FSJyLDRwVwdyn4+57D1Bb/AjAoZ 2JsQuedLRpAcG23BpkfJM/kRgO8CWV+Ycgmvlm15/cCH45j5Dg8MR9HKgutTuc42 yf4WaSeZV4saiJ2I3sQr1vngYuSDCArC0mjOYmWchAm4FD7P3C38czeEqfikowID AQABo4IDjDCCA4gwEwYKKwYBBAHWeQIEAwEB/wQCBQAwggIJBgNVHREEggIAMIIB /IIcc2VhMWwzY2xpcWExNzcxNDEuZGF2aXRhLmNvbYIcc2VhMWwzY2xpcWExNzcw MjMuZGF2aXRhLmNvbYIcc2VhMWwzY2xpcWExNzcxNTQuZGF2aXRhLmNvbYIcc2Vh MWwzY2xpcWExNzQwMjEuZGF2aXRhLmNvbYIcc2VhMWwzY2xpcWExNzQxMzguZGF2 aXRhLmNvbYIcc2VhMWwzY2xpcWExNzQwMTEuZGF2aXRhLmNvbYIcc2VhMWwzY2xp cWExNzQwMTIuZGF2aXRhLmNvbYIcc2VhMWwzY2xpcWExNzkxMzcuZGF2aXRhLmNv bYIcc2VhMWwzY2xpcWExNzkxMzguZGF2aXRhLmNvbYIcc2VhMWwyY2xpcWExNzkw MTEuZGF2aXRhLmNvbYIcc2VhMWwyY2xpcWExNzkxMjEuZGF2aXRhLmNvbYIcZGVu M2wzY2xpcWExNzcwMTQuZGF2aXRhLmNvbYIcZGVuM2wzY2xpcWExNzcxNDQuZGF2 aXRhLmNvbYIbZGVuNGxjbGlxYTE5NzA1NC5kYXZpdGEuY29tghtkZW40bGNsaXFh MTk3MDU1LmRhdml0YS5jb22CHGRlbjNsM2NsaXFhMTc5MTM0LmRhdml0YS5jb22C HGRlbjNsM2NsaXFhMTc5MTM1LmRhdml0YS5jb20wDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAzBgNVHR8ELDAqMCigJqAkhiJo dHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMEsGA1UdIAREMEIwNgYK YIZIAYb6bAoBBTAoMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LmVudHJ1c3QubmV0 L3JwYTAIBgZngQwBAgIwaAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRw Oi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRy dXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU 981/p2DGCky/MB0GA1UdDgQWBBRjC0IBEG52j4JUXpJ8CmLBaDRBnTAJBgNVHRME AjAAMA0GCSqGSIb3DQEBCwUAA4IBAQALaWnDCc0nh2oet8V3i5NfslN30U4il+9z RvurTdLHhbRSb+p9VD0YLmm7gaoyc85IfFBLe2X6+U/TiJbFKJbKA51jQvyjzBu/ fnQUZmqJF3p1bi9llF/ax0Ptbo8FYpxTzSoGjBq8qnk7y7qQlTEf7++Cd3+El/Ir CT0Z+XoJbph4dkpXXWbU6bFM0iTL9WRfyGd1Ouf/I/JbHMcWpFeAtBZ6XZrwrGs2 5AVsXPs6eTE6LMRhl1OHq4cY3Kb0xWSFDlybfu6DrNoo0DrbhletYdcA3nyGnf7l O5KFOgzNk31C4ktTF7cKhivOZjsm9PNLByx5IEFQLaolCd/HN3h9 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QhKZbUhi2zhPJX8p7cN MIXp8tq5Y/E+a0W9pUNfb/v4KGfd+5zAk4ve8n0UyzU9cmyqcsJ5h7OOfMcW3JR9 icJj5GbmF38JecELiJyKhE+jufaYiycGFDQSvS9pDF0arobkTsCkdTOpqKJ7KnzB prYLpxJGeqbHENw2n8n9SOI1dV6/6UmwiwS6tZ3X6FSJyLDRwVwdyn4+57D1Bb/A jAoZ2JsQuedLRpAcG23BpkfJM/kRgO8CWV+Ycgmvlm15/cCH45j5Dg8MR9HKgutT uc42yf4WaSeZV4saiJ2I3sQr1vngYuSDCArC0mjOYmWchAm4FD7P3C38czeEqfik owIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 229136700559041659736452995417393126682 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 14:58:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-17 15:28:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'El Segundo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DaVita' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sea1l3cliqa177141.davita.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26387893992254957180074170162505094076155915380993207930424185955491355274942378425375015844823106800693974767558913299336583659151482495299352734286942478795148626871874478947603898103025269103567380617370640932798778251417988519249978694688256549340403979667288410748587980418260844870468840473657178053866229007432975485411583135211475047187898567320305448606554552048617938062458163366194840232594422800958228508000398903960317067995521582260745767603060205857429901300650750264420541064719968915086257472828601803406523697257977868431899517877175565147351823830571118098703450303491706594640032770553472813147299 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (512 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sea1l3cliqa177141.davita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sea1l3cliqa177023.davita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sea1l3cliqa177154.davita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sea1l3cliqa174021.davita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sea1l3cliqa174138.davita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sea1l3cliqa174011.davita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sea1l3cliqa174012.davita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sea1l3cliqa179137.davita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sea1l3cliqa179138.davita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sea1l2cliqa179011.davita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sea1l2cliqa179121.davita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'den3l3cliqa177014.davita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'den3l3cliqa177144.davita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'den4lcliqa197054.davita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'den4lcliqa197055.davita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'den3l3cliqa179134.davita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'den3l3cliqa179135.davita.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 630b4201106e768f82545e927c0a62c16834419d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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