secure-assurance-vie.ssq.ca
- SSQ, SOCIÉTÉ D'ASSURANCE-VIE INC. -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 01:a7:a3:5c:e4:3d:d6:95:17:f9:54:17:61:e4:7c:a3 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
SSQ, SOCIÉTÉ D'ASSURANCE-VIE INC.
Organization:
SSQ, SOCIÉTÉ D'ASSURANCE-VIE INC.
Organization unit: Securite
Organization unit: Securite
State / Province:
Québec
Locality: Quebec
Country: CA
Locality: Quebec
Country: CA
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:a7:a3:5c:e4:3d:d6:95:17:f9:54:17:61:e4:7c:a3Serial Number (int): 2199654963553918672449435482445872291
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 4d:cb:0e:58:96:24:5a:2e:c2:74:23:49:05:79:ea:d3:32:73:9a:9b
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): ab:e2:5d:89:27:fe:93:cd:24:d8:a3:e4:32:cc:3a:c9:df:39:1a:97
Fingerprint (sha256): 33:27:87:43:62:28:05:1c:eb:a8:24:99:2e:1f:eb:aa:69:dc:e6:7f:b4:1e:25:77:f0:dd:93:7e:1b:f2:58:c5
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate secure-assurance-vie.ssq.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for secure-assurance-vie.ssq.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
secure-assurance-vie.ssq.ca
secure-life-insurance.ssq.ca
secure-life-insurance.ssq.ca
Other certificates including the domain name ssq.ca
(limited to 100 certificates)
doc.scs.ssq.ca
assistance.ssq.ca
saasacme.com
budgettest.ssq.ca
assistance.ssq.ca
fetes.ssq.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
decimal.ssq.ca
investissement.ssq.ca
survey.ssq.ca
teletravail.ssq.ca
vac.ssq.ca
investissement.ssq.ca
msan1.myabsorb.ca
doc.scs.ssq.ca
experience.ssq.ca
direct.ssq.ca
decimaltest.ssq.ca
ssq.ca
*.interne.ssq.ca
msan1.myabsorb.ca
secure.ssq.ca
decimalbi.ssq.ca
intranetdev.ssq.ca
*.ssq.ca
msan1.myabsorb.ca
gouvernance.ssq.ca
www.ssq.ca
gouvernance.ssq.ca
sondageexperienceclient.ssq.ca
decimal.ssq.ca
www.parlor.io
msan1.myabsorb.ca
msan1.myabsorb.ca
www.ssq.ca
extranet.ssq.ca
sni.cloudflaressl.com
msan1.myabsorb.ca
direct.ssq.ca
extranet.ssq.ca
extranet-itg1.ssq.ca
ssq.ca
msan1.myabsorb.ca
*.complementary.ssq.ca
*.ssq.ca
emaxer.com
vac.ssq.ca
CD1-ISE-0101.ssq.ca
ssq.ca
extranet.ssq.ca
*.fedid.ssq.ca
adfs.ssq.ca
secure.ssq.ca
extranet.ssq.ca
direct.ssq.ca
dev.scs.ssq.ca
secure-assurance-vie.ssq.ca
teletravail.ssq.ca
extranet.ssq.ca
sondageexperienceclient.ssq.ca
msan1.myabsorb.ca
gouvernance.ssq.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
doc.scs.ssq.ca
msan1.myabsorb.ca
roro.doc.scs.ssq.ca
soumission-assurance-vie.ssq.ca
ikea.ssq.ca
decimaltest.ssq.ca
soumission-assurance-vie.ssq.ca
ssq.ca
msan1.myabsorb.ca
devilcreek.fish
services.ssq.ca
*.complementary.ssq.ca
apps.ssq.ca
investissement.ssq.ca
decimalbitest.ssq.ca
msan1.myabsorb.ca
sondageexperienceclient.ssq.ca
msan1.myabsorb.ca
ssq.ca
secure.ssq.ca
www.thailandinteriordesign.co
msan1.myabsorb.ca
extranet.ssq.ca
msan1.myabsorb.ca
*.ssq.ca
msan1.myabsorb.ca
*.ac.dev.scs.ssq.ca
msan1.myabsorb.ca
blog.ssq.ca
apps.ssq.ca
fedid.ssq.ca
expwedgeqc1.ssq.ca
sondageexperienceclient.ssq.ca
budgetprod.ssq.ca
assistance.ssq.ca
saasacme.com
budgettest.ssq.ca
assistance.ssq.ca
fetes.ssq.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
decimal.ssq.ca
investissement.ssq.ca
survey.ssq.ca
teletravail.ssq.ca
vac.ssq.ca
investissement.ssq.ca
msan1.myabsorb.ca
doc.scs.ssq.ca
experience.ssq.ca
direct.ssq.ca
decimaltest.ssq.ca
ssq.ca
*.interne.ssq.ca
msan1.myabsorb.ca
secure.ssq.ca
decimalbi.ssq.ca
intranetdev.ssq.ca
*.ssq.ca
msan1.myabsorb.ca
gouvernance.ssq.ca
www.ssq.ca
gouvernance.ssq.ca
sondageexperienceclient.ssq.ca
decimal.ssq.ca
www.parlor.io
msan1.myabsorb.ca
msan1.myabsorb.ca
www.ssq.ca
extranet.ssq.ca
sni.cloudflaressl.com
msan1.myabsorb.ca
direct.ssq.ca
extranet.ssq.ca
extranet-itg1.ssq.ca
ssq.ca
msan1.myabsorb.ca
*.complementary.ssq.ca
*.ssq.ca
emaxer.com
vac.ssq.ca
CD1-ISE-0101.ssq.ca
ssq.ca
extranet.ssq.ca
*.fedid.ssq.ca
adfs.ssq.ca
secure.ssq.ca
extranet.ssq.ca
direct.ssq.ca
dev.scs.ssq.ca
secure-assurance-vie.ssq.ca
teletravail.ssq.ca
extranet.ssq.ca
sondageexperienceclient.ssq.ca
msan1.myabsorb.ca
gouvernance.ssq.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
doc.scs.ssq.ca
msan1.myabsorb.ca
roro.doc.scs.ssq.ca
soumission-assurance-vie.ssq.ca
ikea.ssq.ca
decimaltest.ssq.ca
soumission-assurance-vie.ssq.ca
ssq.ca
msan1.myabsorb.ca
devilcreek.fish
services.ssq.ca
*.complementary.ssq.ca
apps.ssq.ca
investissement.ssq.ca
decimalbitest.ssq.ca
msan1.myabsorb.ca
sondageexperienceclient.ssq.ca
msan1.myabsorb.ca
ssq.ca
secure.ssq.ca
www.thailandinteriordesign.co
msan1.myabsorb.ca
extranet.ssq.ca
msan1.myabsorb.ca
*.ssq.ca
msan1.myabsorb.ca
*.ac.dev.scs.ssq.ca
msan1.myabsorb.ca
blog.ssq.ca
apps.ssq.ca
fedid.ssq.ca
expwedgeqc1.ssq.ca
sondageexperienceclient.ssq.ca
budgetprod.ssq.ca
Certificate
The complete raw certificate details for secure-assurance-vie.ssq.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgIQAaejXOQ91pUX+VQXYeR8ozANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgxMjA0MDAwMDAwWhcN MjEwMTA3MTIwMDAwWjCBlzELMAkGA1UEBhMCQ0ExEDAOBgNVBAgMB1F1w6liZWMx DzANBgNVBAcTBlF1ZWJlYzEsMCoGA1UECgwjU1NRLCBTT0NJw4lUw4kgRCdBU1NV UkFOQ0UtVklFIElOQy4xETAPBgNVBAsTCFNlY3VyaXRlMSQwIgYDVQQDExtzZWN1 cmUtYXNzdXJhbmNlLXZpZS5zc3EuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDGlDiWo70btoBF0M5BaU3P6EinTXImphQc1VIOiKmr9kzRjCrVLKhW ekThAzOJN/QaXfKbkNEyojc8ZI3CAdZAVTEfo/jjS3yJV4de4plbVKtOEzrIFQV6 2C2aoaHvBc6K1qhckU9wmpwVKkCOAjSOent9dKS1MIZAU881in4slPq6K0oXusnr H45s7qj0kRku1MIWVK5HpY7hKxeMYiel51HFiveQgE7CSy9aqOoupwfLs09oEeQl xUmleqtlnHg3SnB5wgv2QFNczdkO8tFoeDcRsnGeHVir+57aZXigZqu16Sy9wvMf icLkngGZ9/VVNgQJlo1i4jJstsT9hnddAgMBAAGjggIVMIICETAfBgNVHSMEGDAW gBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUTcsOWJYkWi7CdCNJBXnq 0zJzmpswRAYDVR0RBD0wO4Ibc2VjdXJlLWFzc3VyYW5jZS12aWUuc3NxLmNhghxz ZWN1cmUtbGlmZS1pbnN1cmFuY2Uuc3NxLmNhMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0 cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0 dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARF MEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2lj ZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcw AYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8v Y2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0Eu Y3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcN AQELBQADggEBAIq7ojGQ/qYzkOegE7L+hYJdrb/tGNAG127Zrb/zph5XD1RB29pd b5PhBJ1Ls2lwu1EFLAgpY2imsji2dGRBmBPhr5rqCBoMGJssg8Goy+eydms3EVop OLbqlcp5LZ9z7hGUfwiD1Jrp2HPoaaExadfrSQI+XDpcUtd+N7aIp7DO6id3YRHu /nFnupV/+ai4RSGqtluhVsXXU6HOERAQ3houJt0k1K8eCpVevXb2oeK71W1PjapN OW34n7+cwPZaR6uP3Oq4MRwyPrDeK5yDBZ84+45i3F9IulpDTpdE7npBWFOZjVWy Xz/0LzT2S8w8XYBZmIqZ5gPyEAlsGlvYbx8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpQ4lqO9G7aARdDOQWlN z+hIp01yJqYUHNVSDoipq/ZM0Ywq1SyoVnpE4QMziTf0Gl3ym5DRMqI3PGSNwgHW QFUxH6P440t8iVeHXuKZW1SrThM6yBUFetgtmqGh7wXOitaoXJFPcJqcFSpAjgI0 jnp7fXSktTCGQFPPNYp+LJT6uitKF7rJ6x+ObO6o9JEZLtTCFlSuR6WO4SsXjGIn pedRxYr3kIBOwksvWqjqLqcHy7NPaBHkJcVJpXqrZZx4N0pwecIL9kBTXM3ZDvLR aHg3EbJxnh1Yq/ue2mV4oGarteksvcLzH4nC5J4Bmff1VTYECZaNYuIybLbE/YZ3 XQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2199654963553918672449435482445872291 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-07 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Québec' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSQ, SOCIÉTÉ D'ASSURANCE-VIE INC.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Securite' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure-assurance-vie.ssq.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25068274906454497136391324639066675313046843710500318482926125261869434451567335973753621751838363119033727866736766640775542775966859803851081217841254311129121216432424597257184334798443723666941698406520694277244656537941779556461709577604334358393195047545638508512035385699287919215380983371488731563338092318089428369244327608467246604534478899055604262609132589447123797475071570965784077900523576338747527702715054936142184181548263293304613395683286047344506694268255680195818403339201608624446477771947812403273143885550927140432489426790249695710702818342393775406765932408616423848267531444638786861299549 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4dcb0e5896245a2ec27423490579ead332739a9b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-assurance-vie.ssq.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-life-insurance.ssq.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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