mail.ca-usa.com
- CONSOLIDATED ANALYTICS, INC -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 09:cf:0e:79:f3:7e:ea:31:c2:d1:27:4c:d1:e9:ed:f2 was issued on by DigiCert Inc.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DNSNames must have a valid TLD. (BRs: 3.2.2.4)
- 1 DNS name(s) are bare public suffixes: CAEXCHSERVER The domain SHOULD NOT have a bare public suffix (awslabs certlint)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
CONSOLIDATED ANALYTICS, INC
Organization:
CONSOLIDATED ANALYTICS, INC
Organization unit: CONSOLIDATED ANALYTICS
Organization unit: CONSOLIDATED ANALYTICS
State / Province:
California
Locality: IRVINE
Country: US
Locality: IRVINE
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:cf:0e:79:f3:7e:ea:31:c2:d1:27:4c:d1:e9:ed:f2Serial Number (int): 13038151027481355516154651172273778162
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 6e:b2:00:c3:21:02:a4:d2:9e:9b:67:d4:ab:46:04:b4:ad:cc:99:3d
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 8e:dc:86:c3:d1:a1:a6:40:03:75:90:95:34:56:2b:14:5d:e2:de:28
Fingerprint (sha256): 37:ae:05:bc:2a:a2:cd:cd:60:89:50:29:b0:35:d7:ea:cf:ad:48:34:f8:63:ab:0c:21:cd:79:aa:81:77:97:2c
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g4.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g4.crl
Check the revocation status for certificate mail.ca-usa.com
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.ca-usa.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.ca-usa.com
AutoDiscover.CA-USA.LOCAL
AutoDiscover.ca-usa.com
AutoDiscover.consolidatedanalytics.com
caexchserver.ca-usa.local
CAEXCHSERVER
CA-USA.LOCAL
ca-usa.com
consolidatedanalytics.com
AutoDiscover.CA-USA.LOCAL
AutoDiscover.ca-usa.com
AutoDiscover.consolidatedanalytics.com
caexchserver.ca-usa.local
CAEXCHSERVER
CA-USA.LOCAL
ca-usa.com
consolidatedanalytics.com
Other certificates including the domain name ca-usa.com
(limited to 100 certificates)
support.cafonline.com
ca-usa.com
support.cafonline.com
cahelpdesk.ca-usa.com
cahelpdesk.ca-usa.com
support.cafonline.com
www.ca-usa.com
vmview.ca-usa.com
mail.ca-usa.com
ca-usa.com
support.cafonline.com
support.cafonline.com
vmview.ca-usa.com
servicedesk.gspretail.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
*.ca-usa.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
*.ca-usa.com
support.cafonline.com
support.cafonline.com
www.ca-usa.com
support.cafonline.com
itsupport.gweiss.com
ca-usa.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
itsupport.gweiss.com
support.cafonline.com
support.cafonline.com
servicedesk.gspretail.com
support.cafonline.com
itsupport.gweiss.com
itsupport.gweiss.com
support.cafonline.com
support.cafonline.com
*.ca-usa.com
*.ca-usa.com
*.ca-usa.com
support.cafonline.com
support.cafonline.com
cahelpdesk.ca-usa.com
servicedesk.gspretail.com
support.cafonline.com
ca-usa.com
vmview.ca-usa.com
www.ca-usa.com
*.ca-usa.com
servicedesk.gspretail.com
ca-usa.com
itsupport.gweiss.com
mail.ca-usa.com
www.ca-usa.com
support.cafonline.com
cahelpdesk.ca-usa.com
www.ca-usa.com
*.ca-usa.com
support.cafonline.com
itsupport.gweiss.com
ca-usa.com
support.cafonline.com
cahelpdesk.ca-usa.com
cahelpdesk.ca-usa.com
support.cafonline.com
www.ca-usa.com
vmview.ca-usa.com
mail.ca-usa.com
ca-usa.com
support.cafonline.com
support.cafonline.com
vmview.ca-usa.com
servicedesk.gspretail.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
*.ca-usa.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
*.ca-usa.com
support.cafonline.com
support.cafonline.com
www.ca-usa.com
support.cafonline.com
itsupport.gweiss.com
ca-usa.com
support.cafonline.com
support.cafonline.com
support.cafonline.com
itsupport.gweiss.com
support.cafonline.com
support.cafonline.com
servicedesk.gspretail.com
support.cafonline.com
itsupport.gweiss.com
itsupport.gweiss.com
support.cafonline.com
support.cafonline.com
*.ca-usa.com
*.ca-usa.com
*.ca-usa.com
support.cafonline.com
support.cafonline.com
cahelpdesk.ca-usa.com
servicedesk.gspretail.com
support.cafonline.com
ca-usa.com
vmview.ca-usa.com
www.ca-usa.com
*.ca-usa.com
servicedesk.gspretail.com
ca-usa.com
itsupport.gweiss.com
mail.ca-usa.com
www.ca-usa.com
support.cafonline.com
cahelpdesk.ca-usa.com
www.ca-usa.com
*.ca-usa.com
support.cafonline.com
itsupport.gweiss.com
Certificate
The complete raw certificate details for mail.ca-usa.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIQCc8OefN+6jHC0SdM0ent8jANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTUwNzAxMDAwMDAwWhcN MTUxMDIwMTIwMDAwWjCBlDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3Ju aWExDzANBgNVBAcTBklSVklORTEkMCIGA1UEChMbQ09OU09MSURBVEVEIEFOQUxZ VElDUywgSU5DMR8wHQYDVQQLExZDT05TT0xJREFURUQgQU5BTFlUSUNTMRgwFgYD VQQDEw9tYWlsLmNhLXVzYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCa7rGZHI8FdyH64DV7Wl2WL85daeRuirXztczabJEiGJjxqmxYWW5Bvz+r tm/WjxRp2ZMtaGxMSzf1uO4GjWIvPHJuhUOd6pIWQhZdFZgLYuxVOldBcSIk9EZz q0/2DLSLumutAlenc8JUCiNgIIQPaA5nzH1s4hqap2w/F0j2722IITNQ9Nc6d8pp eYUOcmpTp8NGMwwbZJ3edTAVn08ZeAD/ZhCxODdECC+wsn7G3yt31eIcVZsbqe4j cj4caebsXiBD+ashH4SaAM7r33CyZod8fQqrGAqiWXY74y2kXMzLUVmxVsjy4waj pUgbuoh+ZsSq4R28URJlfuUh5rP1AgMBAAGjggKJMIIChTAfBgNVHSMEGDAWgBQP gGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUbrIAwyECpNKem2fUq0YEtK3M mT0wgdYGA1UdEQSBzjCBy4IPbWFpbC5jYS11c2EuY29tghlBdXRvRGlzY292ZXIu Q0EtVVNBLkxPQ0FMghdBdXRvRGlzY292ZXIuY2EtdXNhLmNvbYImQXV0b0Rpc2Nv dmVyLmNvbnNvbGlkYXRlZGFuYWx5dGljcy5jb22CGWNhZXhjaHNlcnZlci5jYS11 c2EubG9jYWyCDENBRVhDSFNFUlZFUoIMQ0EtVVNBLkxPQ0FMggpjYS11c2EuY29t ghljb25zb2xpZGF0ZWRhbmFseXRpY3MuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0 cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNC5jcmwwL6AtoCuGKWh0 dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzQuY3JsMEIGA1UdIAQ7 MDkwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2lj ZXJ0LmNvbS9DUFMwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8v b2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRp Z2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwDAYDVR0T AQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAQEAk6/ksfIGVrVihQjnQ2D4T8gQbpyE AtlNDrOaLXi4IUgyJaUZFVoxSGvOYzh0kXgda5Jkfj2iH9RXuIQ5OVxdPNFc9s7b 7wq8oY93shYqZXborLVCsG5SZHMpzBn8X5Iqo1fZiQ/KDxPmmJdg08hhXX/PvNQi 9IwUDEadekylsRlIbqVibITr/XTeYIcqyuxZFWL06S2SC7led70JpjnL049Ow1Z/ hjHfwAvFyc2muhHZ9gEiEeHyIhwW0Wo4QsdmRYXq6YAPPQ3JStbtAVIlm3YuqMrY cXu2Op9/g0kTVeq4faxeNY2rJGGJV5gr6k/z511sG3AaZpVn3P+DInIfBg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu6xmRyPBXch+uA1e1pd li/OXWnkboq187XM2myRIhiY8apsWFluQb8/q7Zv1o8UadmTLWhsTEs39bjuBo1i LzxyboVDneqSFkIWXRWYC2LsVTpXQXEiJPRGc6tP9gy0i7prrQJXp3PCVAojYCCE D2gOZ8x9bOIamqdsPxdI9u9tiCEzUPTXOnfKaXmFDnJqU6fDRjMMG2Sd3nUwFZ9P GXgA/2YQsTg3RAgvsLJ+xt8rd9XiHFWbG6nuI3I+HGnm7F4gQ/mrIR+EmgDO699w smaHfH0KqxgKoll2O+MtpFzMy1FZsVbI8uMGo6VIG7qIfmbEquEdvFESZX7lIeaz 9QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13038151027481355516154651172273778162 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-20 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IRVINE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CONSOLIDATED ANALYTICS, INC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CONSOLIDATED ANALYTICS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.ca-usa.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19558403236121201893593942980622312325041477431379045126779627006974323200239018463634451634661458301627350344183088375263394988034888997411891840603943066864504055084710627755200267557792130630943462685996049460867149609581419956060173499992535023288478289512424734455416273331278046980730480342924904642605019422075554187257686877464174379002050551229772347499027304096751209522921405007421625730146944808021187005267004742452685024133460907780164586534506705221368253820134568828326024337655913796211852865096675962419014461483833228875631454381405439765955306100665396504546494040977075862302403092401022998852597 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6eb200c32102a4d29e9b67d4ab4604b4adcc993d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ca-usa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.CA-USA.LOCAL' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.ca-usa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.consolidatedanalytics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caexchserver.ca-usa.local' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CAEXCHSERVER' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CA-USA.LOCAL' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-usa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consolidatedanalytics.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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