formula-api.adtech.de
- Oath Inc -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 06:ca:3d:92:bc:7f:06:0c:42:1d:a4:ba:45:5f:b8:05 was issued on by DigiCert Inc.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Oath Inc
Organization:
Oath Inc
State / Province:
California
Locality: Sunnyvale
Country: US
Locality: Sunnyvale
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:ca:3d:92:bc:7f:06:0c:42:1d:a4:ba:45:5f:b8:05Serial Number (int): 9025460792767824238703054088524773381
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 8b:ca:4f:86:70:23:27:0b:f9:77:52:a0:7a:23:e6:fc:b4:1a:a6:09
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): fe:9e:b2:61:c4:15:ea:4c:cd:85:0a:07:9f:c1:2e:08:92:13:0e:18
Fingerprint (sha256): 33:ad:8f:a0:18:89:ee:6f:a8:5e:e0:78:cc:5d:14:2f:11:f9:ef:1f:4f:b3:74:e1:0f:2b:b0:66:e6:5a:33:37
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate formula-api.adtech.de
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for formula-api.adtech.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
formula-api.adtech.de
classic-rest-api.prod.adtech.de
classic-rest-api.prod.adtechus.com
formula-api.adtechus.com
assets.adtech.de
assets.adtechus.com
classic-rest-api.prod.adtech.de
classic-rest-api.prod.adtechus.com
formula-api.adtechus.com
assets.adtech.de
assets.adtechus.com
Other certificates including the domain name adtech.de
(limited to 100 certificates)
targeting-service.adtech.de
console.oneadserver.aol.de
report.adtech.de
aka-cdn.adtech.de
consent.oath.com
formula-api.adtech.de
targeting.oneadserver.aol.de
console.oneadserver.aol.de
pri-adserver-origin-eu.prod.adtech.de
stage.consent.oath.com
stage.guce2.oath.com
aka-cdn.adtech.de
*.adtech.de
selene-api.reserved-adserver-dev.aws.oath.cloud
stage.consent.oath.com
api.oneadserver.aol.com
stage.consent.oath.com
pri-adserver-origin-eu.prod.adtech.de
imspro.oneadserver.aol.de
stage.consent.oath.com
console.oneadserver.aol.de
ws.adtech.de
nonprod-classic-rest-api.dev.adtech.de
console.oneadserver.aol.de
aka-cdn.adtech.de
selene.oneadserver.aol.com
learnapi.oneadserver.aol.de
aka-cdn.adtech.de
*.adtech.de
api.oneadserver.aol.com
console-pr.oneadserver.aol.de
api.oneadserver.aol.com
selene.oneadserver.aol.com
1as-bannertest.adtech.de
selene.oneadserver.aol.com
imspro.oneadserver.aol.de
formula-api.adtech.de
pri-adserver-origin-eu.prod.adtech.de
trunk.consent.oath.com
ws2.adtech.de
consent.oath.com
consent.oath.com
imspro.oneadserver.aol.de
consent.oath.com
targeting-service.adtech.de
api.oneadserver.aol.com
console.oneadserver.aol.de
console.oneadserver.aol.de
pri-adserver-origin-eu.prod.adtech.de
imspro.oneadserver.aol.de
vlibs.eu-central-1.dev.adtech.de
stage.consent.oath.com
trunk.consent.oath.com
trunk.consent.oath.com
stage.consent.oath.com
assets.oneadserver.aol.de
*.adtech.de
console.oneadserver.aol.de
console-pr.oneadserver.aol.de
trunk.consent.oath.com
stage.consent.oath.com
formula-api.adtech.de
api.oneadserver.aol.com
adserver.adtech.de
console-pr.oneadserver.aol.de
consent.oath.com
cstest.oneadserver.aol.com
console-pr.oneadserver.aol.com
nonprod-classic-rest-api.dev.adtech.de
trunk.consent.oath.com
console-pr.oneadserver.aol.de
pri-adserver-origin-eu.prod.adtech.de
console.oneadserver.aol.de
eks-nonprod-classic-rest-api.dev.adtech.de
trunk.consent.oath.com
stage.consent.oath.com
*.adtech.de
nonprod-classic-rest-api.dev.adtech.de
consent.oath.com
consent.oath.com
stage.consent.oath.com
consent.oath.com
imspro.oneadserver.aol.de
formula-api.adtech.de
a.adtech.de
aka-cdn.adtech.de
pri-adserver-origin-eu.prod.adtech.de
consent.oath.com
stage.consent.oath.com
aka-cdn.adtech.de
aka-cdn.adtech.de
trunk.consent.oath.com
formula-api.adtech.de
consent.oath.com
api.oneadserver.aol.com
stage.guce2.oath.com
console.oneadserver.aol.de
pri-adserver-origin-eu.prod.adtech.de
formula-api.adtech.de
trunk.consent.oath.com
console.oneadserver.aol.de
report.adtech.de
aka-cdn.adtech.de
consent.oath.com
formula-api.adtech.de
targeting.oneadserver.aol.de
console.oneadserver.aol.de
pri-adserver-origin-eu.prod.adtech.de
stage.consent.oath.com
stage.guce2.oath.com
aka-cdn.adtech.de
*.adtech.de
selene-api.reserved-adserver-dev.aws.oath.cloud
stage.consent.oath.com
api.oneadserver.aol.com
stage.consent.oath.com
pri-adserver-origin-eu.prod.adtech.de
imspro.oneadserver.aol.de
stage.consent.oath.com
console.oneadserver.aol.de
ws.adtech.de
nonprod-classic-rest-api.dev.adtech.de
console.oneadserver.aol.de
aka-cdn.adtech.de
selene.oneadserver.aol.com
learnapi.oneadserver.aol.de
aka-cdn.adtech.de
*.adtech.de
api.oneadserver.aol.com
console-pr.oneadserver.aol.de
api.oneadserver.aol.com
selene.oneadserver.aol.com
1as-bannertest.adtech.de
selene.oneadserver.aol.com
imspro.oneadserver.aol.de
formula-api.adtech.de
pri-adserver-origin-eu.prod.adtech.de
trunk.consent.oath.com
ws2.adtech.de
consent.oath.com
consent.oath.com
imspro.oneadserver.aol.de
consent.oath.com
targeting-service.adtech.de
api.oneadserver.aol.com
console.oneadserver.aol.de
console.oneadserver.aol.de
pri-adserver-origin-eu.prod.adtech.de
imspro.oneadserver.aol.de
vlibs.eu-central-1.dev.adtech.de
stage.consent.oath.com
trunk.consent.oath.com
trunk.consent.oath.com
stage.consent.oath.com
assets.oneadserver.aol.de
*.adtech.de
console.oneadserver.aol.de
console-pr.oneadserver.aol.de
trunk.consent.oath.com
stage.consent.oath.com
formula-api.adtech.de
api.oneadserver.aol.com
adserver.adtech.de
console-pr.oneadserver.aol.de
consent.oath.com
cstest.oneadserver.aol.com
console-pr.oneadserver.aol.com
nonprod-classic-rest-api.dev.adtech.de
trunk.consent.oath.com
console-pr.oneadserver.aol.de
pri-adserver-origin-eu.prod.adtech.de
console.oneadserver.aol.de
eks-nonprod-classic-rest-api.dev.adtech.de
trunk.consent.oath.com
stage.consent.oath.com
*.adtech.de
nonprod-classic-rest-api.dev.adtech.de
consent.oath.com
consent.oath.com
stage.consent.oath.com
consent.oath.com
imspro.oneadserver.aol.de
formula-api.adtech.de
a.adtech.de
aka-cdn.adtech.de
pri-adserver-origin-eu.prod.adtech.de
consent.oath.com
stage.consent.oath.com
aka-cdn.adtech.de
aka-cdn.adtech.de
trunk.consent.oath.com
formula-api.adtech.de
consent.oath.com
api.oneadserver.aol.com
stage.guce2.oath.com
console.oneadserver.aol.de
pri-adserver-origin-eu.prod.adtech.de
formula-api.adtech.de
trunk.consent.oath.com
Certificate
The complete raw certificate details for formula-api.adtech.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgIQBso9krx/BgxCHaS6RV+4BTANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0yMTEyMjEwMDAwMDBaFw0yMjA2MTUyMzU5NTla MGkxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRIwEAYDVQQHEwlT dW5ueXZhbGUxETAPBgNVBAoTCE9hdGggSW5jMR4wHAYDVQQDExVmb3JtdWxhLWFw aS5hZHRlY2guZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJLdW K9IjTRoWyi08Mv7r+r1i28Gs1o11YK9wr4KYu6v5raO5ObZ+quItua7RZbh4Z0DE 834TmRnSf883yA5udF5AqOWRR94yS3SmbcOFvdC78QDK61qcrRLlbS2eQuzwJc5r OnBYPa8c4KwGQZcRnpwt7MgVSnG+tJEFSbANcMWG/50HbYfCriQn4XniVoKJPbQg oi2BBkl1SOjjPFENYVZx6YYis3/koIywj6kY5mQkzOiEAC8frnUrRkfuBQrV5GUo 5PCnwR5SLDSMPgcOqBI2AXWB7h4iXda8T99MPl+uN+HLCBLHwtSyunBn6kUV/TA+ 5F5LqEQ9wUJ0VauHAgMBAAGjggJ+MIICejAfBgNVHSMEGDAWgBRRaP+QrwIHdTzM 2WVkYqISuFlyOzAdBgNVHQ4EFgQUi8pPhnAjJwv5d1KgeiPm/LQapgkwgagGA1Ud EQSBoDCBnYIVZm9ybXVsYS1hcGkuYWR0ZWNoLmRlgh9jbGFzc2ljLXJlc3QtYXBp LnByb2QuYWR0ZWNoLmRlgiJjbGFzc2ljLXJlc3QtYXBpLnByb2QuYWR0ZWNodXMu Y29tghhmb3JtdWxhLWFwaS5hZHRlY2h1cy5jb22CEGFzc2V0cy5hZHRlY2guZGWC E2Fzc2V0cy5hZHRlY2h1cy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5odHRwOi8vY3Js My5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYuY3JsMDSgMqAwhi5odHRw Oi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYuY3JsMD4GA1Ud IAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNl cnQuY29tL0NQUzCBgwYIKwYBBQUHAQEEdzB1MCQGCCsGAQUFBzABhhhodHRwOi8v b2NzcC5kaWdpY2VydC5jb20wTQYIKwYBBQUHMAKGQWh0dHA6Ly9jYWNlcnRzLmRp Z2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJhbmNlU2VydmVyQ0EuY3J0 MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL BQADggEBAJNoWeLKnPuoiG8yYK/U1tJ7HbtIro6myymokECrVxT5YrfG00qec1lV hrwqZRSmo6V6zzfwBOW6TVRXlIw0LMu7Lxh2Sae3wWNf1cCjEMke3j/Y5iaWXPSE QixCbM4yuhQqaINzi+cDdF4XTOJU/ih55ZaoGHCMLuaPYQbyKV+TvujDOAKJS3uZ OwGIKh/v1rklDKzjWwN4yOMvZpg2Q62zYb/8/6Odxce5+LDMHp+uRZV80WvTk/kb dA3XxheU9HxllD3J10pkjooVn/0II7u0yuo12TrrBv+JviOuWE7tfKtTo9zQuVnQ 4sfJaDS9MAobe0gHACMM9WUoi0otAMQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCS3VivSI00aFsotPDL+ 6/q9YtvBrNaNdWCvcK+CmLur+a2juTm2fqriLbmu0WW4eGdAxPN+E5kZ0n/PN8gO bnReQKjlkUfeMkt0pm3Dhb3Qu/EAyutanK0S5W0tnkLs8CXOazpwWD2vHOCsBkGX EZ6cLezIFUpxvrSRBUmwDXDFhv+dB22Hwq4kJ+F54laCiT20IKItgQZJdUjo4zxR DWFWcemGIrN/5KCMsI+pGOZkJMzohAAvH651K0ZH7gUK1eRlKOTwp8EeUiw0jD4H DqgSNgF1ge4eIl3WvE/fTD5frjfhywgSx8LUsrpwZ+pFFf0wPuReS6hEPcFCdFWr hwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9025460792767824238703054088524773381 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-15 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'formula-api.adtech.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24255859966095654714827903728581635657888888000666641070619023655010543062889512161925671255573194958580565846398524878202831264974056563525893821699785527387982373871668981273040308850330854435973748218244763568643815681151344286944567994263854937748829790771360370703089851134302088708981785652160289671551350397996644403805784184625534963366918291314208516127682124491574692941106179842356722073414297516283409330823212568216836351864198378100094624597162071348703046490172619326305208873408584427535000629010691004596208304490441920292738821900411464620845429721718510143614142490138241605479907283717217850862471 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8bca4f867023270bf97752a07a23e6fcb41aa609 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formula-api.adtech.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classic-rest-api.prod.adtech.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classic-rest-api.prod.adtechus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formula-api.adtechus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.adtech.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.adtechus.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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