www.agriculture.com
- Meredith Corporation -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 05:92:27:4e:c5:b5:ab:03:5d:f1:e4:e6:b8:58:f5:a6 was issued on by DigiCert Inc.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Meredith Corporation
Organization:
Meredith Corporation
Organization unit: Internet Operations
Organization unit: Internet Operations
State / Province:
Iowa
Locality: Des Moines
Country: US
Locality: Des Moines
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:92:27:4e:c5:b5:ab:03:5d:f1:e4:e6:b8:58:f5:a6Serial Number (int): 7405012575230052820982826749061035430
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 7d:b1:71:a8:96:ce:ec:3c:c3:9f:80:61:27:cc:94:7c:cb:8c:94:75
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): fd:5e:d7:a1:21:ff:98:e8:e3:e3:23:17:00:99:9b:da:fe:d9:d3:a1
Fingerprint (sha256): 3e:45:5d:2c:3d:8c:7c:1c:a3:50:da:04:54:fc:4a:9c:e4:0e:fc:c6:a4:a8:0c:77:95:a3:68:e1:cd:e9:75:e8
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate www.agriculture.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.agriculture.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.agriculture.com
agriculture.com
woodmagazine.com
www.woodmagazine.com
origin-www.agriculture.com
origin-www.woodmagazine.com
agriculture.com
woodmagazine.com
www.woodmagazine.com
origin-www.agriculture.com
origin-www.woodmagazine.com
Other certificates including the domain name agriculture.com
(limited to 100 certificates)
payments.meredith.com
secure05.lithium.com
qa4.ugc.marthastewart.com
wpm01.eccmp.com
*.secure.meredith.com
secure.meredith.com
my.meredith.com
sli.dailypaws.com
sli.dailypaws.com
secure05.lithium.com
a-ue1.mydomaine.com
wpm01.eccmp.com
payments.meredith.com
secure05.lithium.com
wpm01.eccmp.com
agriculture.com
wpm01.eccmp.com
wpm01.eccmp.com
agriculture.com
qa4.ugc.marthastewart.com
secure05.lithium.com
specialoffers.meredith.com
sli.dailypaws.com
*.agriculture.com
wpm.eccmp.com
dev.secure.meredith.com
wpm01.eccmp.com
secure05.lithium.com
sli.dailypaws.com
sli.dailypaws.com
secure.meredith.com
secure05.lithium.com
wpm01.eccmp.com
secure05.lithium.com
wpm01.eccmp.com
agriculture.com
mywedding.com
secure.meredith.com
mywedding.com
qa2.ugc.marthastewart.com
a-uw2.mydomaine.com
mdp.api.meredith.com
secure05.lithium.com
secure.meredith.com
wpm01.eccmp.com
secure05.lithium.com
agriculture.com
a-ue1.mydomaine.com
secure05.lithium.com
qa4.ugc.marthastewart.com
ugc.marthastewart.com
secure.meredith.com
secure05.lithium.com
wpm01.eccmp.com
test.payments.meredith.com
secure05.lithium.com
secure.meredith.com
*.agriculture.com
secure05.lithium.com
secure05.lithium.com
wpm01.eccmp.com
sli.dailypaws.com
secure05.lithium.com
secure05.lithium.com
a-ue1.mydomaine.com
wpm01.eccmp.com
qa3.ugc.marthastewart.com
ugc.marthastewart.com
sli.dailypaws.com
secure05.lithium.com
secure05.lithium.com
test.secure.meredith.com
qa3.ugc.marthastewart.com
agriculture.com
links.allrecipes.com
sli.dailypaws.com
agriculture.com
secure05.lithium.com
wpm01.eccmp.com
agriculture.com
cr-iframe.magazine.store
secure05.lithium.com
secure.meredith.com
wpm01.eccmp.com
wpm01.eccmp.com
payments.meredith.com
wpm01.eccmp.com
wpm01.eccmp.com
secure05.lithium.com
wpm01.eccmp.com
*.secure.meredith.com
secure.meredith.com
secure05.lithium.com
qa3.ugc.marthastewart.com
agriculture.com
www.agriculture.com
secure05.lithium.com
cr-iframe.magazine.store
agriculture.com
api.meredith.com
secure05.lithium.com
qa4.ugc.marthastewart.com
wpm01.eccmp.com
*.secure.meredith.com
secure.meredith.com
my.meredith.com
sli.dailypaws.com
sli.dailypaws.com
secure05.lithium.com
a-ue1.mydomaine.com
wpm01.eccmp.com
payments.meredith.com
secure05.lithium.com
wpm01.eccmp.com
agriculture.com
wpm01.eccmp.com
wpm01.eccmp.com
agriculture.com
qa4.ugc.marthastewart.com
secure05.lithium.com
specialoffers.meredith.com
sli.dailypaws.com
*.agriculture.com
wpm.eccmp.com
dev.secure.meredith.com
wpm01.eccmp.com
secure05.lithium.com
sli.dailypaws.com
sli.dailypaws.com
secure.meredith.com
secure05.lithium.com
wpm01.eccmp.com
secure05.lithium.com
wpm01.eccmp.com
agriculture.com
mywedding.com
secure.meredith.com
mywedding.com
qa2.ugc.marthastewart.com
a-uw2.mydomaine.com
mdp.api.meredith.com
secure05.lithium.com
secure.meredith.com
wpm01.eccmp.com
secure05.lithium.com
agriculture.com
a-ue1.mydomaine.com
secure05.lithium.com
qa4.ugc.marthastewart.com
ugc.marthastewart.com
secure.meredith.com
secure05.lithium.com
wpm01.eccmp.com
test.payments.meredith.com
secure05.lithium.com
secure.meredith.com
*.agriculture.com
secure05.lithium.com
secure05.lithium.com
wpm01.eccmp.com
sli.dailypaws.com
secure05.lithium.com
secure05.lithium.com
a-ue1.mydomaine.com
wpm01.eccmp.com
qa3.ugc.marthastewart.com
ugc.marthastewart.com
sli.dailypaws.com
secure05.lithium.com
secure05.lithium.com
test.secure.meredith.com
qa3.ugc.marthastewart.com
agriculture.com
links.allrecipes.com
sli.dailypaws.com
agriculture.com
secure05.lithium.com
wpm01.eccmp.com
agriculture.com
cr-iframe.magazine.store
secure05.lithium.com
secure.meredith.com
wpm01.eccmp.com
wpm01.eccmp.com
payments.meredith.com
wpm01.eccmp.com
wpm01.eccmp.com
secure05.lithium.com
wpm01.eccmp.com
*.secure.meredith.com
secure.meredith.com
secure05.lithium.com
qa3.ugc.marthastewart.com
agriculture.com
www.agriculture.com
secure05.lithium.com
cr-iframe.magazine.store
agriculture.com
api.meredith.com
Certificate
The complete raw certificate details for www.agriculture.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgIQBZInTsW1qwNd8eTmuFj1pjANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xODEwMjMwMDAwMDBaFw0xOTEwMjgxMjAwMDBa MIGMMQswCQYDVQQGEwJVUzENMAsGA1UECBMESW93YTETMBEGA1UEBxMKRGVzIE1v aW5lczEdMBsGA1UEChMUTWVyZWRpdGggQ29ycG9yYXRpb24xHDAaBgNVBAsTE0lu dGVybmV0IE9wZXJhdGlvbnMxHDAaBgNVBAMTE3d3dy5hZ3JpY3VsdHVyZS5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnG0vbDYPyFvW7X+NX/FVF odkRnpEgB6wQuhzHu5aatVNrt9EVZubJG3qT7WqRNmPutF3Nv47KWhewLpIryVjn yPxTj20a9FbARHsQhmHsQ99j6OiP/Qm+eI4aqfrkII+9kJ4Ug5rLUJt9vZGOD3Hf UZYJUeHbLbiku8fc18NPoc438UxLQ+CFvIkq4++3ktrsPXkNhdbwqsvuBBWxU7cs DBz6RG/akJqFVWz/+IffAu0J9+eAMoxGZ0T1oMLFilITCrjIOYPC2ye4mbshGjgX a4mLOtYp+M2jzqPZEX81vjSzkrUM0giHQxb5mS4OwB1+VU3wBkVP0/6o2cNIh9Dn AgMBAAGjggJ2MIICcjAfBgNVHSMEGDAWgBRRaP+QrwIHdTzM2WVkYqISuFlyOzAd BgNVHQ4EFgQUfbFxqJbO7DzDn4BhJ8yUfMuMlHUwgZIGA1UdEQSBijCBh4ITd3d3 LmFncmljdWx0dXJlLmNvbYIPYWdyaWN1bHR1cmUuY29tghB3b29kbWFnYXppbmUu Y29tghR3d3cud29vZG1hZ2F6aW5lLmNvbYIab3JpZ2luLXd3dy5hZ3JpY3VsdHVy ZS5jb22CG29yaWdpbi13d3cud29vZG1hZ2F6aW5lLmNvbTAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAy oDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5j cmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZl ci1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYc aHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwgYMGCCsGAQUF BwEBBHcwdTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME0G CCsGAQUFBzAChkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRT SEEySGlnaEFzc3VyYW5jZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMBMGCisG AQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCe3xm5TF9nHNrLBEFG Fe1avuYKoSzLo+U9gIj4BIDGIBokhVNIPok8dhAtoAXZ4CGm43xm1wWPBkeTD99J rLmSzkUqjD9KOz4Ht8VKTn9Nud/Ihvdqx1d8mISWul210v3XpUp7Cd0XRjZwy3GK zDAet00tR53+/Jcrge1sDZhbtik7HBOAlTXmBa7kA2zTCrJ6NLmkwIxCjiMXKQ74 rcMnc7tRqZXVJqTV+XOarpng4Qn0MnWIUro0J6zGBjyPphs/R2xxbp9oH6ftVuys s5Bvlqkq6TC1ARhYNnmSXjChczDxVDaCnlU92Orju9DYcTDuRuMLkqmwvQ/djUN2 F6Ek -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xtL2w2D8hb1u1/jV/xV RaHZEZ6RIAesELocx7uWmrVTa7fRFWbmyRt6k+1qkTZj7rRdzb+OyloXsC6SK8lY 58j8U49tGvRWwER7EIZh7EPfY+joj/0JvniOGqn65CCPvZCeFIOay1Cbfb2Rjg9x 31GWCVHh2y24pLvH3NfDT6HON/FMS0PghbyJKuPvt5La7D15DYXW8KrL7gQVsVO3 LAwc+kRv2pCahVVs//iH3wLtCffngDKMRmdE9aDCxYpSEwq4yDmDwtsnuJm7IRo4 F2uJizrWKfjNo86j2RF/Nb40s5K1DNIIh0MW+ZkuDsAdflVN8AZFT9P+qNnDSIfQ 5wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7405012575230052820982826749061035430 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Iowa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Des Moines' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Meredith Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet Operations' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.agriculture.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29174508759899971145184653743813002239608936989220888367483534764822294676696232686089196861554326862428761034964448528474496902374768379012455102404064974055673983621396040167987182742032881494162023555908145110720823171761120914493093765863644420361000149666124434083805442828530410193476504790675670337608332764001659119610606844643083699856119724787100799520819949027838829365214752366081375250776504909217273279156472351076594271676094259663033699029658243167757234657966577807411042565904591176842969274297711767261097211618923869860725463549279908838405412300293422082742609734960134844329804228242955462758631 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7db171a896ceec3cc39f806127cc947ccb8c9475 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (138 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agriculture.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculture.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodmagazine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodmagazine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-www.agriculture.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-www.woodmagazine.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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