MTVI.com
- Viacom International Inc. -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0f:cb:7e:37:f4:88:b6:31:a4:52:cb:38:34:c6:71:a1 was issued on by DigiCert Inc.
With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Viacom International Inc.
Organization:
Viacom International Inc.
State / Province:
New York
Locality: New York
Country: US
Locality: New York
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:cb:7e:37:f4:88:b6:31:a4:52:cb:38:34:c6:71:a1Serial Number (int): 20995016215894923191467659693994176929
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: d9:63:9f:9a:fa:79:62:84:76:21:30:24:f8:ac:38:76:4f:64:60:d9
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 66:88:01:5f:ad:2f:61:d1:7b:31:34:f7:94:ed:20:74:ea:2d:61:51
Fingerprint (sha256): 35:8a:b2:10:ac:fc:ad:5d:00:c0:2e:04:a8:d1:3e:8b:b4:50:6b:08:8c:98:fa:fa:1f:f7:dd:f9:30:a0:91:60
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6-1.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6-1.crl
Check the revocation status for certificate MTVI.com
34
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for MTVI.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.bellator.com
*.channel5.com
*.dai.viacomcbs.digital
*.dev.viacomcbs.digital
*.five.tv
*.milkshake.tv
*.mtvi.com
*.mtvnimages.com
*.mtvnservices-q.mtvi.com
*.mtvnservices.com
*.my5.tv
*.orchestrator.uat-viacomcbs-tech.com
*.orchestrator.viacomcbs-tech.com
*.plutotv.net
*.staging.viacomcbs.digital
*.ts.mtvnservices.com
*.uat.viacomcbs.digital
*.viacom.com
*.viacom.tech
*.viacomcbs.com
*.viacomcbs.digital
*.viacomcbs.tech
aka-tls.ts.mtvnservices.com
aka-tls.tsq.mtvnservices.com
auth.id.viacom.com
images.pluto.tv
MTVI.com
ns1.tsq.mtvnservices.com
siloh-aka.plutotv.net
testing.cmt.vmn.io
topaz.dai.uat.viacomcbs.digital
topaz.qa.viacomcbs.digital
www.paramount.com
www.viacomcbs-q.mtvi.com
*.channel5.com
*.dai.viacomcbs.digital
*.dev.viacomcbs.digital
*.five.tv
*.milkshake.tv
*.mtvi.com
*.mtvnimages.com
*.mtvnservices-q.mtvi.com
*.mtvnservices.com
*.my5.tv
*.orchestrator.uat-viacomcbs-tech.com
*.orchestrator.viacomcbs-tech.com
*.plutotv.net
*.staging.viacomcbs.digital
*.ts.mtvnservices.com
*.uat.viacomcbs.digital
*.viacom.com
*.viacom.tech
*.viacomcbs.com
*.viacomcbs.digital
*.viacomcbs.tech
aka-tls.ts.mtvnservices.com
aka-tls.tsq.mtvnservices.com
auth.id.viacom.com
images.pluto.tv
MTVI.com
ns1.tsq.mtvnservices.com
siloh-aka.plutotv.net
testing.cmt.vmn.io
topaz.dai.uat.viacomcbs.digital
topaz.qa.viacomcbs.digital
www.paramount.com
www.viacomcbs-q.mtvi.com
Other certificates including the domain name MTVI.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for MTVI.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIkjCCB3qgAwIBAgIQD8t+N/SItjGkUss4NMZxoTANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjIwMjAzMDAwMDAwWhcN MjMwMjAzMjM1OTU5WjBqMQswCQYDVQQGEwJVUzERMA8GA1UECBMITmV3IFlvcmsx ETAPBgNVBAcTCE5ldyBZb3JrMSIwIAYDVQQKExlWaWFjb20gSW50ZXJuYXRpb25h bCBJbmMuMREwDwYDVQQDEwhNVFZJLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEH A0IABIw+BSpQ1nDLdiBRGkCvRBQx/77x+pOFrdGYkdiV8pcwgtKUxgD4BK8WGrXZ 78S9H3fWZFPVUsiZpCOff/kPT4ajggYaMIIGFjAfBgNVHSMEGDAWgBQPgGEcgjFh 1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQU2WOfmvp5YoR2ITAk+Kw4dk9kYNkwggLl BgNVHREEggLcMIIC2IIOKi5iZWxsYXRvci5jb22CDiouY2hhbm5lbDUuY29tghcq LmRhaS52aWFjb21jYnMuZGlnaXRhbIIXKi5kZXYudmlhY29tY2JzLmRpZ2l0YWyC CSouZml2ZS50doIOKi5taWxrc2hha2UudHaCCioubXR2aS5jb22CECoubXR2bmlt YWdlcy5jb22CGSoubXR2bnNlcnZpY2VzLXEubXR2aS5jb22CEioubXR2bnNlcnZp Y2VzLmNvbYIIKi5teTUudHaCJSoub3JjaGVzdHJhdG9yLnVhdC12aWFjb21jYnMt dGVjaC5jb22CISoub3JjaGVzdHJhdG9yLnZpYWNvbWNicy10ZWNoLmNvbYINKi5w bHV0b3R2Lm5ldIIbKi5zdGFnaW5nLnZpYWNvbWNicy5kaWdpdGFsghUqLnRzLm10 dm5zZXJ2aWNlcy5jb22CFyoudWF0LnZpYWNvbWNicy5kaWdpdGFsggwqLnZpYWNv bS5jb22CDSoudmlhY29tLnRlY2iCDyoudmlhY29tY2JzLmNvbYITKi52aWFjb21j YnMuZGlnaXRhbIIQKi52aWFjb21jYnMudGVjaIIbYWthLXRscy50cy5tdHZuc2Vy dmljZXMuY29tghxha2EtdGxzLnRzcS5tdHZuc2VydmljZXMuY29tghJhdXRoLmlk LnZpYWNvbS5jb22CD2ltYWdlcy5wbHV0by50doIITVRWSS5jb22CGG5zMS50c3Eu bXR2bnNlcnZpY2VzLmNvbYIVc2lsb2gtYWthLnBsdXRvdHYubmV0ghJ0ZXN0aW5n LmNtdC52bW4uaW+CH3RvcGF6LmRhaS51YXQudmlhY29tY2JzLmRpZ2l0YWyCGnRv cGF6LnFhLnZpYWNvbWNicy5kaWdpdGFsghF3d3cucGFyYW1vdW50LmNvbYIYd3d3 LnZpYWNvbWNicy1xLm10dmkuY29tMA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwbwYDVR0fBGgwZjAxoC+gLYYraHR0cDovL2Ny bDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi0xLmNybDAxoC+gLYYraHR0cDov L2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi0xLmNybDA+BgNVHSAENzA1 MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNv bS9DUFMwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5k aWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0 LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIw ADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHUA6D7Q2j71BjUy51covIlryQPT y9ERa+zraeF3fW0GvW4AAAF+wRuZCwAABAMARjBEAiAakUxedBrOz43sPkD3595U LGwFYryKjg0AEkaHVhVlqwIgQq9+oXgmKFiz01I8FgCNY10H0oqT4miR9AIQ4aTL XdoAdgA1zxkbv7FsV78PrUxtQsu7ticgJlHqP+Eq76gDwzvWTAAAAX7BG5lfAAAE AwBHMEUCIHZ+kIyPOWitKGrAtIBD/N2PRz7NJVwoSIkmSq1Ftxy+AiEAzhgEP8um psbBENIotz7adkDSS1ZxOd5IaXlAn5G6RJAAdgCzc3cH4YRQ+GOG1gWp3BEJSnkt sWcMC4fc8AMOeTalmgAAAX7BG5l8AAAEAwBHMEUCIHDqiyZvtGxwqfB35h5x72Zw IMHxajxLWcgEdVCpTo+GAiEAppmMDu7Alt3D9O61fE53WotQ9QlWpb3ruIqT4VEc nxEwDQYJKoZIhvcNAQELBQADggEBADBHtY5A7XTgZvUDJafH/cjPKVNJT+t27daX UA+7A3VX+2FqMkW8ZhXf9MEc4sP3hq4yy9PqQQ+5exDJgRgDqrgyoOEmXiEJASQa gT5t0zurf7BHi/8w8lJPHAzkfCBfl+CioRBCCfOo6vvWFI2XkFqJLGGbzVCV8PBa PSeXO9XH1CqMY++8ZwW61yuFNHiqUNZEnD1WkOVctSPj0k2IlhxD0DOexV+VEjmf TIdUpzXINH1AYF/zyTH4gdCKRSPcfb8zatEBR1RT3867WCf9QGUBkM/HUDw8L0Au pAGUtxrUB+Hi/cUuqSkq4gDd86MsPd+GGrh8ImsH6WqWKAlEt4I= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEjD4FKlDWcMt2IFEaQK9EFDH/vvH6 k4Wt0ZiR2JXylzCC0pTGAPgErxYatdnvxL0fd9ZkU9VSyJmkI59/+Q9Phg== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20995016215894923191467659693994176929 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MTVI.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 00048c3e052a50d670cb7620511a40af441431ffbef1fa9385add19891d895f2973082d294c600f804af161ab5d9efc4bd1f77d66453d552c899a4239f7ff90f4f86 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d9639f9afa79628476213024f8ac38764f6460d9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (732 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellator.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.channel5.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dai.viacomcbs.digital' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.viacomcbs.digital' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.five.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milkshake.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvnimages.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvnservices-q.mtvi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtvnservices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my5.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchestrator.uat-viacomcbs-tech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchestrator.viacomcbs-tech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plutotv.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.viacomcbs.digital' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ts.mtvnservices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.viacomcbs.digital' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacom.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacom.tech' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacomcbs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacomcbs.digital' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viacomcbs.tech' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aka-tls.ts.mtvnservices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aka-tls.tsq.mtvnservices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.id.viacom.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.pluto.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'MTVI.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns1.tsq.mtvnservices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siloh-aka.plutotv.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.cmt.vmn.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topaz.dai.uat.viacomcbs.digital' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topaz.qa.viacomcbs.digital' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paramount.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacomcbs-q.mtvi.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6-1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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