StanfordChildrens.org
- Lucile Salter Packard Children's Hospital at Stanford -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0b:39:f5:52:7d:dc:e4:4b:1a:ac:47:d7:b6:c4:ee:51 was issued on by DigiCert Inc.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Lucile Salter Packard Children's Hospital at Stanford
Organization:
Lucile Salter Packard Children's Hospital at Stanford
Organization unit: IT
Organization unit: IT
State / Province:
CA
Locality: Palo Alto
Country: US
Locality: Palo Alto
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:39:f5:52:7d:dc:e4:4b:1a:ac:47:d7:b6:c4:ee:51Serial Number (int): 14922444600585448598666907650166681169
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 5d:66:bc:b2:37:f2:a6:40:a1:53:ca:2d:90:a2:5d:35:19:19:fe:c8
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 5d:ab:40:5e:40:aa:d0:b1:9c:41:aa:3b:c3:c7:0e:ca:f4:11:56:69
Fingerprint (sha256): 33:13:97:11:6d:f4:8b:e3:78:04:0e:f3:6b:62:0f:56:89:3f:6c:8d:45:bb:46:ec:70:78:c8:53:8b:30:20:ec
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate StanfordChildrens.org
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for StanfordChildrens.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
webmail.lpch.org
autodiscover.LPCH.ORG
autodiscover.stanfordchildrens.org
StanfordChildrens.org
Hybrid.StanfordChildrens.org
Webmail.StanfordChildrens.org
autodiscover.LPCH.ORG
autodiscover.stanfordchildrens.org
StanfordChildrens.org
Hybrid.StanfordChildrens.org
Webmail.StanfordChildrens.org
Other certificates including the domain name StanfordChildrens.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for StanfordChildrens.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHXTCCBkWgAwIBAgIQCzn1Un3c5EsarEfXtsTuUTANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwMTMxMDAwMDAwWhcN MjAwMjA0MTIwMDAwWjCBmzELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRIwEAYD VQQHEwlQYWxvIEFsdG8xPjA8BgNVBAoTNUx1Y2lsZSBTYWx0ZXIgUGFja2FyZCBD aGlsZHJlbidzIEhvc3BpdGFsIGF0IFN0YW5mb3JkMQswCQYDVQQLEwJJVDEeMBwG A1UEAxMVU3RhbmZvcmRDaGlsZHJlbnMub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAtTCJQ1lggKvjIzEMGITqVpTKXkStRRTEP87gzzFHToPw+wqH RnGN0KbaxmwVBuAxbAfK+NwBr4G0hAS3TVuQ5crQUMnMXAfq7tcb1gKjC6YbLi8+ Edyi1ldFiFvyaCCiRWHNLEUomQJtthI8v+UD1vABAbmKCT6kEzwK/wWEQNQeC5jI /thLVCOEXOKJui1Ycayh9hXtO+/xU8GVLynyw0DkJromhPjIxxc2KhYnjKBsixiw unrvnUsHYDrvOvend0GjGE+OSUnI+4V4vGNG2dn5Gezh2jaHCFtEyvSYICNZB4hK z21pKyeocR7y5vlgMqkAbxvhzjdyAdLaEveanwIDAQABo4ID6DCCA+QwHwYDVR0j BBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFF1mvLI38qZAoVPK LZCiXTUZGf7IMIGsBgNVHREEgaQwgaGCEHdlYm1haWwubHBjaC5vcmeCFWF1dG9k aXNjb3Zlci5MUENILk9SR4IiYXV0b2Rpc2NvdmVyLnN0YW5mb3JkY2hpbGRyZW5z Lm9yZ4IVU3RhbmZvcmRDaGlsZHJlbnMub3JnghxIeWJyaWQuU3RhbmZvcmRDaGls ZHJlbnMub3Jngh1XZWJtYWlsLlN0YW5mb3JkQ2hpbGRyZW5zLm9yZzAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRk MGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYu Y3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2 LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRw czovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB8BggrBgEFBQcBAQRw MG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBGBggrBgEF BQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMlNl Y3VyZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMIIBewYKKwYBBAHWeQIEAgSC AWsEggFnAWUAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWFJ 1YRlAAAEAwBHMEUCIQDyUtzDMCzQpukWwScKmw3vKDY2Wuq6527A6SzHcc4AwgIg OO5JeOMShxT8sUeXIl1gu0+VdMLp0gtA+mhGRKiBFr8AdQCHdb/nWXz4jEOZX73z bv9WjUdWNv9KtWDBtOr/XqCDDwAAAWFJ1YVWAAAEAwBGMEQCID2zsEuHnA38hFZy IVO2fCfcu4FS7WYEO262W6k1djRCAiAD4UcfIoTW5gV05QpZLQ89VGXK3pYqYW2o LQGpROJNjgB0ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABYUnV hTAAAAQDAEUwQwIfColvVtIWHZE9EyTGQ4F5+hwz49UyUtMtrD+JfFAwagIgdFoA JQyg7qVRhcEuOXdLThT9iPeAeC418k2eONIzJOgwDQYJKoZIhvcNAQELBQADggEB AEIGI2DrFFb59CZUqv7tR73adN+9mNtjigK6TyWqtIsrhg1euBYaYgXrflUGGeKT RP8ggDir8DyiLiNz1/T+xCbu02grNxRG58BWVU7k8S9yCRGpcXbZjixX6ZGUhV2V xjrzPTE6lIulD5N0R1M4ehrkAN0nTZUxW1aVUMAVUS+eKy2EBR+BTv0rzMq11Re9 jfCNGPRtmagejewuyqp2FYDlif8SabhryNvfs5qxUsIiQ9e4qRs2+rtfyyfHNiOX hBWVZ6VRssBthh0XlhuodIHqtxHCqU7hyB8V1Hk6p4UG3UkZoNo/mL9gmRip3/5n U+xtd+SVimbGeejC5cqUGyU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTCJQ1lggKvjIzEMGITq VpTKXkStRRTEP87gzzFHToPw+wqHRnGN0KbaxmwVBuAxbAfK+NwBr4G0hAS3TVuQ 5crQUMnMXAfq7tcb1gKjC6YbLi8+Edyi1ldFiFvyaCCiRWHNLEUomQJtthI8v+UD 1vABAbmKCT6kEzwK/wWEQNQeC5jI/thLVCOEXOKJui1Ycayh9hXtO+/xU8GVLyny w0DkJromhPjIxxc2KhYnjKBsixiwunrvnUsHYDrvOvend0GjGE+OSUnI+4V4vGNG 2dn5Gezh2jaHCFtEyvSYICNZB4hKz21pKyeocR7y5vlgMqkAbxvhzjdyAdLaEvea nwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14922444600585448598666907650166681169 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Palo Alto' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lucile Salter Packard Children's Hospital at Stanford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StanfordChildrens.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22873067283181202700477899291344632155985898701966696081027512658032999800492292504450710252778727219288359325422310442275460237811140118096978392523807294327926449181593239202427202093143488468905271761945538923451642717089769030068908642279862081891094813091783407486137013817370706796709162543340469898488264277814816751304874747679227824530441746990698347539472841036442233185389233568548809386750156052860126389234125539991285026321623953190787320236245093210609598018779591339834235304955536305049572648383071843196698804682129762770535357248603633261274716127526617761858953952477851488857392761419155692296863 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5d66bcb237f2a640a153ca2d90a25d351919fec8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lpch.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.LPCH.ORG' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.stanfordchildrens.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'StanfordChildrens.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Hybrid.StanfordChildrens.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Webmail.StanfordChildrens.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0042062360eb1456f9f42654aafeed47bdda74dfbd98db638a02ba4f25aab48b2b860d5eb8161a6205eb7e550619e29344ff208038abf03ca22e2373d7f4fec426eed3682b371446e7c056554ee4f12f720911a97176d98e2c57e99194855d95c63af33d313a948ba50f93744753387a1ae400dd274d95315b569550c015512f9e2b2d84051f814efd2bcccab5d517bd8df08d18f46d99a81e8dec2ecaaa761580e589ff1269b86bc8dbdfb39ab152c22243d7b8a91b36fabb5fcb27c736239784159567a551b2c06d861d17961ba87481eab711c2a94ee1c81f15d4793aa78506dd4919a0da3f98bf609918a9dffe6753ec6d77e4958a66c679e8c2e5ca941b25