www.seifert-medien.de
Issued by Encryption Everywhere DV TLS CA - G2
About this certificate
This digital certificate with serial number 0c:75:cc:9f:ac:eb:62:65:39:ba:36:68:7a:ad:cd:15 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.seifert-medien.de
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0c:75:cc:9f:ac:eb:62:65:39:ba:36:68:7a:ad:cd:15Serial Number (int): 16562384944220533932256874781440068885
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 84:1b:ea:ec:d4:9b:7b:7b:f5:ee:45:62:20:49:af:df:d1:3e:c5:80
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6
Fingerprint (sha1): ce:1c:22:a3:e3:f2:9c:9a:f8:7a:62:b0:4f:ff:47:0e:da:55:2c:29
Fingerprint (sha256): 2f:97:b9:1e:38:f2:88:87:b0:df:ec:9e:6a:50:a4:f5:cc:88:2a:01:ad:4a:56:cc:62:b4:54:ee:28:b5:18:2b
Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCheck the revocation status for certificate www.seifert-medien.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.seifert-medien.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.seifert-medien.de
seifert-medien.de
seifert-medien.de
Other certificates including the domain name seifert-medien.de
(limited to 100 certificates)
www.revistacipcisa.com
broschuere.bildkunstakademie.de
kataloge.vitaltours.de
tagesspiegel.kiosk.plus
kiosk.dolcevita-magazin.ch
mitteilungsblatt.seifert-medien.de
start.andernach-wirtschaft.de
kiosk.am-weststrand.com
magazine.suncoastergroup.com
www.seifert-medien.de
kiosk.vidaglobal.de
immobilienmagazin.steinauer-immo.ch
magazine.montana-cans.com
magazine.montana-cans.com
kiosk.am-weststrand.com
media.hirschmann-automotive.com
publications.cwgc.org
magazine.montana-cans.com
www.seifert-medien.de
magazine.legacylighthouse.org
moegro.mediaflip.de
kiosk.der-kleine-georg.de
www.maryspubs.com
webkiosk.magazinmarley.de
downloads.yspi.ie
digital.queencityconnections.com
magazine.legacylighthouse.org
angebote.dersteirerhof.at
kiosk.vidaglobal.de
magazine.biss.team
read.africanphotomag.co.ke
kiosk.der-kleine-georg.de
katalog.seglerbedarf.de
quals.truebeck.com
www.digital.britishtraveljournal.com
kiosk.leuchtfeuer-verlag.com
kiosk.vidaglobal.de
kataloge.triplex-fischer.de
magazin.tellz.me
digital.queencityconnections.com
kataloge.holzimpraegnierwerk.ch
digital.queencityconnections.com
epaper.sinntec.de
kiosk.vidaglobal.de
digital.queencityconnections.com
quals.truebeck.com
emag.indianjeweller.in
katalog.hltravel.at
publikationen.contipark.de
publications.cwgc.org
flyer.aqua-dome.at
magazine.legacylighthouse.org
immomagazin.wegenerimmobilien.de
magazine.legacylighthouse.org
webkiosk.edeka-koehne.de
kataloge.otto-pokale.de
webkiosk.magazinmarley.de
magazine.roarkidsmagazine.com
brochures.adipec.com
kiosk.vidaglobal.de
catalogs.k7-pro.com
logo-moebel.mediaflip.de
news.vdmno.de
brochures.hts-touristik.de
publikationen.manres.ch
biblioteca.sciens.com.ar
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
www.seifert-medien.de
kiosk.vidaglobal.de
mitteilungsblatt.seifert-medien.de
digital.queencityconnections.com
publikationen.contipark.de
magazine.elektropraktiker.de
magazine.biss.team
flyer.aqua-dome.at
magazine.elektropraktiker.de
magazine.inversionesciel.com
brochures.hts-touristik.de
kataloge.werbeartikel-laeser.ch
magazine.legacylighthouse.org
magazine.biss.team
magazine.biss.team
ebooks.teammelanie.nz
magazine.legacylighthouse.org
publications.cwgc.org
webkiosk.werk5.ch
webkiosk.lurkoi.com
webkiosk.lurkoi.com
webkiosk.magazinmarley.de
kiosk.der-kleine-georg.de
kiosk.der-kleine-georg.de
brochure.ntpwarranty.com
wirbeicontipark.contipark.de
magazine.biss.team
read.africanphotomag.co.ke
mitteilungsblatt.seifert-medien.de
magazine.cioa.com
moebel-seesen.mediaflip.de
kataloge.weilermoebel.at
broschuere.bildkunstakademie.de
kataloge.vitaltours.de
tagesspiegel.kiosk.plus
kiosk.dolcevita-magazin.ch
mitteilungsblatt.seifert-medien.de
start.andernach-wirtschaft.de
kiosk.am-weststrand.com
magazine.suncoastergroup.com
www.seifert-medien.de
kiosk.vidaglobal.de
immobilienmagazin.steinauer-immo.ch
magazine.montana-cans.com
magazine.montana-cans.com
kiosk.am-weststrand.com
media.hirschmann-automotive.com
publications.cwgc.org
magazine.montana-cans.com
www.seifert-medien.de
magazine.legacylighthouse.org
moegro.mediaflip.de
kiosk.der-kleine-georg.de
www.maryspubs.com
webkiosk.magazinmarley.de
downloads.yspi.ie
digital.queencityconnections.com
magazine.legacylighthouse.org
angebote.dersteirerhof.at
kiosk.vidaglobal.de
magazine.biss.team
read.africanphotomag.co.ke
kiosk.der-kleine-georg.de
katalog.seglerbedarf.de
quals.truebeck.com
www.digital.britishtraveljournal.com
kiosk.leuchtfeuer-verlag.com
kiosk.vidaglobal.de
kataloge.triplex-fischer.de
magazin.tellz.me
digital.queencityconnections.com
kataloge.holzimpraegnierwerk.ch
digital.queencityconnections.com
epaper.sinntec.de
kiosk.vidaglobal.de
digital.queencityconnections.com
quals.truebeck.com
emag.indianjeweller.in
katalog.hltravel.at
publikationen.contipark.de
publications.cwgc.org
flyer.aqua-dome.at
magazine.legacylighthouse.org
immomagazin.wegenerimmobilien.de
magazine.legacylighthouse.org
webkiosk.edeka-koehne.de
kataloge.otto-pokale.de
webkiosk.magazinmarley.de
magazine.roarkidsmagazine.com
brochures.adipec.com
kiosk.vidaglobal.de
catalogs.k7-pro.com
logo-moebel.mediaflip.de
news.vdmno.de
brochures.hts-touristik.de
publikationen.manres.ch
biblioteca.sciens.com.ar
kiosk.vidaglobal.de
magazines.somethinggoodmagazines.com
www.seifert-medien.de
kiosk.vidaglobal.de
mitteilungsblatt.seifert-medien.de
digital.queencityconnections.com
publikationen.contipark.de
magazine.elektropraktiker.de
magazine.biss.team
flyer.aqua-dome.at
magazine.elektropraktiker.de
magazine.inversionesciel.com
brochures.hts-touristik.de
kataloge.werbeartikel-laeser.ch
magazine.legacylighthouse.org
magazine.biss.team
magazine.biss.team
ebooks.teammelanie.nz
magazine.legacylighthouse.org
publications.cwgc.org
webkiosk.werk5.ch
webkiosk.lurkoi.com
webkiosk.lurkoi.com
webkiosk.magazinmarley.de
kiosk.der-kleine-georg.de
kiosk.der-kleine-georg.de
brochure.ntpwarranty.com
wirbeicontipark.contipark.de
magazine.biss.team
read.africanphotomag.co.ke
mitteilungsblatt.seifert-medien.de
magazine.cioa.com
moebel-seesen.mediaflip.de
kataloge.weilermoebel.at
Certificate
The complete raw certificate details for www.seifert-medien.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIQDHXMn6zrYmU5ujZoeq3NFTANBgkqhkiG9w0BAQsFADBu MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS0wKwYDVQQDEyRFbmNyeXB0aW9uIEV2ZXJ5d2hlcmUg RFYgVExTIENBIC0gRzIwHhcNMjQwNTIyMDAwMDAwWhcNMjUwNjExMjM1OTU5WjAg MR4wHAYDVQQDExV3d3cuc2VpZmVydC1tZWRpZW4uZGUwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDrq6UcqX5rwsXZjxWrfhv3sbhLy0fRvZjvvo/73+nX xBnMMxQaPEOug1rme+QlXXwf6xjIle+NTsIbybF2Z4tRsX/ObnbKrKxtWk7tA2Qu B1Abib+R1q7pr+mvfaZ3Rng8Lxf/5fmPp0Z6SxsgviDk09g0FAGAgR49WLZBN4WP ojjHzIVn5Xjkv0DfGJwcsgKiuH35q/VzE3mqOIdWJQByxh6T4kv3dB8GKwOwit8o UsMyzDXtRtuxjH3djtsjZ/6Nh3SmMbquvDJIX9kgO6cIBn67IJ6u8PZgvOf0gogq FDQlIJSaEUQ7jr/Rmak6HlSZ4ov69F0qpCzWk+ZhsaudAgMBAAGjggL7MIIC9zAf BgNVHSMEGDAWgBR435GQX+7erPbFdevVTFVT7yRKtjAdBgNVHQ4EFgQUhBvq7NSb e3v17kViIEmv39E+xYAwMwYDVR0RBCwwKoIVd3d3LnNlaWZlcnQtbWVkaWVuLmRl ghFzZWlmZXJ0LW1lZGllbi5kZTA+BgNVHSAENzA1MDMGBmeBDAECATApMCcGCCsG AQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBgAYIKwYBBQUHAQEE dDByMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSgYIKwYB BQUHMAKGPmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9FbmNyeXB0aW9uRXZl cnl3aGVyZURWVExTQ0EtRzIuY3J0MAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5 AgQCBIIBbgSCAWoBaAB2AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnf AAABj58JIMUAAAQDAEcwRQIhAKRtgo51UtrZa0wWXfNb3pgEiqRTKMVG+94QK9sZ Ks70AiAK4Lq5kyVcsyrX8kovcV8k3CFzyk74609UGuT9yR4pOwB2AH1ZHhLheCp7 HGFnfF79+NCHXBSgTpWeuQMv2Q6MLnm4AAABj58JIQgAAAQDAEcwRQIhALaIMlbo RuodLi3qN6cNDg4tVpIPttillmAsMU2dew6/AiA328KMgNL4u2X3nsY4yqfNDokU 5S/5SGuRZ+fEYKU2gQB2AKLjCuRF772tm3447Udnd1PXgluElNcrXhssxLlQpEfn AAABj58JIbwAAAQDAEcwRQIhALKpeSOn56G0WJIC20Q1tw/tnD4hLNNy7bUV+JxU RWYnAiAdKQgPswpasgCU8jrvcosLy884zXnOniCF/LEc1ZohYzANBgkqhkiG9w0B AQsFAAOCAQEAOBtI5S8X2FbGl8pYNAj3s20GJ2cAzYFklPXbvJeVACIqQKxtv1OD nFc6am+qXZ1W+Gw2VCgLXMkqoNNABLdZP0HQTOoVKxmTK4wYxpqLUwfweaFQ51LS XO5qZ3qpCq/V/g3us8V6/0EUAWihKLqoichuAJAI/V3ejGLSMmloFOeL7ByzIniw tUM05iZtD5WtwsMOkDES3+bpuG2bfXA3VWyy6+1JFZ99PTYLR9wySoaZI1KCQoyt eTKOrNmiw9MzL9fR5BfrHEUUgIMKSmCds/f+47vcTiQ3JTJ0OJ0P0APW+Kedl2t+ oLXcQfn+XP8vNe2Yf/16eH6VKBCMk2P/GA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66ulHKl+a8LF2Y8Vq34b 97G4S8tH0b2Y776P+9/p18QZzDMUGjxDroNa5nvkJV18H+sYyJXvjU7CG8mxdmeL UbF/zm52yqysbVpO7QNkLgdQG4m/kdau6a/pr32md0Z4PC8X/+X5j6dGeksbIL4g 5NPYNBQBgIEePVi2QTeFj6I4x8yFZ+V45L9A3xicHLICorh9+av1cxN5qjiHViUA csYek+JL93QfBisDsIrfKFLDMsw17UbbsYx93Y7bI2f+jYd0pjG6rrwySF/ZIDun CAZ+uyCervD2YLzn9IKIKhQ0JSCUmhFEO46/0ZmpOh5UmeKL+vRdKqQs1pPmYbGr nQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16562384944220533932256874781440068885 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.seifert-medien.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29750642955663830671829699498920490050313410583475607802645025662242950181301434194340107093350058169366664377341489836214881920456167840268145633606157101626448763021814920772283892463678933786033198138667049916035390314103873944723489611868610401756261210801396308775924345379321283337450648048411402077923678939631179194029093792170289721693591767023226583676411254739594895689578974831861318778250042563857763256670401499116619046475379839475414467771536951039068375990712760784741647853661641119721320499639611038307863349942873337488032198044771095290838713432354331963433403290717921218822492803295175840476061 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 841beaecd49b7b7bf5ee45622049afdfd13ec580 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seifert-medien.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seifert-medien.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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