karhu2.nsense.net
- F-Secure Corporation -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 01:ca:1b:d5:67:db:00:da:18:4a:17:3b:f9:71:a0:f2 was issued on by DigiCert Inc.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
F-Secure Corporation
Organization:
F-Secure Corporation
Organization unit: F-Secure Corporation
Organization unit: F-Secure Corporation
State / Province:
Uusimaa
Locality: Helsinki
Country: FI
Locality: Helsinki
Country: FI
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:ca:1b:d5:67:db:00:da:18:4a:17:3b:f9:71:a0:f2Serial Number (int): 2378636494008579976506912207566643442
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 70:8d:1e:a2:d9:49:b6:b6:b7:85:8e:5a:23:06:73:91:f2:5c:40:9f
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 8b:90:fe:a3:d4:a4:18:68:fc:81:20:83:08:bb:67:e8:9e:7c:bd:81
Fingerprint (sha256): 3f:6b:d7:b5:18:47:93:a6:b5:9f:fd:0b:09:63:af:d7:10:c5:82:74:ae:93:3a:d7:17:c7:a0:61:61:bf:9c:49
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g4.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g4.crl
Check the revocation status for certificate karhu2.nsense.net
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for karhu2.nsense.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
karhu2.nsense.net
karhu2-api.nsense.net
portal.karhu.f-secure.com
api.karhu.f-secure.com
karhu2-api.nsense.net
portal.karhu.f-secure.com
api.karhu.f-secure.com
Other certificates including the domain name nsense.net
(limited to 100 certificates)
*.nsense.net
karhu2.nsense.net
ir.f-secure.com
remote2.nsense.net
css.nsense.net
ir.f-secure.com
nsense.net
gotham.nsense.net
css.nsense.net
www.nsense.net
karhu.nsense.net
gotham.nsense.net
updates.karhu2.nsense.net
css.f-secure.com
karhu2.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
karhu.nsense.net
updates.radar.f-secure.com
www.css.f-secure.com
css.nsense.net
gotham.nsense.net
updates.karhu2.nsense.net
gotham.nsense.net
*.nsense.net
portal.radar.f-secure.com
gotham.nsense.net
nsense.net
gotham.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
ir.f-secure.com
css.nsense.net
gotham.nsense.net
www.nsense.net
gotham.nsense.net
*.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
gotham.nsense.net
nsense.net
updates.radar.f-secure.com
www.nsense.net
*.nsense.net
css.f-secure.com
www.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
remote.nsense.net
www.nsense.net
portal.radar.f-secure.com
gotham.nsense.net
gotham.nsense.net
karhu2.nsense.net
ir.f-secure.com
remote2.nsense.net
css.nsense.net
ir.f-secure.com
nsense.net
gotham.nsense.net
css.nsense.net
www.nsense.net
karhu.nsense.net
gotham.nsense.net
updates.karhu2.nsense.net
css.f-secure.com
karhu2.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
karhu.nsense.net
updates.radar.f-secure.com
www.css.f-secure.com
css.nsense.net
gotham.nsense.net
updates.karhu2.nsense.net
gotham.nsense.net
*.nsense.net
portal.radar.f-secure.com
gotham.nsense.net
nsense.net
gotham.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
ir.f-secure.com
css.nsense.net
gotham.nsense.net
www.nsense.net
gotham.nsense.net
*.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
gotham.nsense.net
nsense.net
updates.radar.f-secure.com
www.nsense.net
*.nsense.net
css.f-secure.com
www.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
remote.nsense.net
www.nsense.net
portal.radar.f-secure.com
gotham.nsense.net
gotham.nsense.net
Certificate
The complete raw certificate details for karhu2.nsense.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGiDCCBXCgAwIBAgIQAcob1WfbANoYShc7+XGg8jANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTUxMDI5MDAwMDAwWhcN MTYxMTAyMTIwMDAwWjCBjDELMAkGA1UEBhMCRkkxEDAOBgNVBAgTB1V1c2ltYWEx ETAPBgNVBAcTCEhlbHNpbmtpMR0wGwYDVQQKExRGLVNlY3VyZSBDb3Jwb3JhdGlv bjEdMBsGA1UECxMURi1TZWN1cmUgQ29ycG9yYXRpb24xGjAYBgNVBAMTEWthcmh1 Mi5uc2Vuc2UubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqToy HoZ4AjzDQGASjUB/C8Ec5PcnW8Xz5IR0V8K++dqwlM06rP7/rSd4qOdN8y4w103A RUpcycgDixXJu3LoCc7Hs04CrAj+L8v0KS94wGnENjwLIs+luiVIdL72+QHMypaf 9rDwQ6GSznSyxn6oO/FJnBVbwloCBJgyJlGLKmV1Lq6k8NDRolL8+5nbvOLGFmWR j6vgPNd8TKSWGz7kHnf23gEYElsCpm/YPAI1czCWaeT+kzePk1lhlBbd9PBHZn4n 1ZbyK2i8IwUatdjTl5dxxvN0jZ25XpxpC/MsdnJgWip/1QzzyQsa754qwgZXi0qW XS9DVQm0AXVCG+YNEx2NZhine1k1emUr/s5bmZplW/uOG+wQ6Cknp3e7Go0zaULr 6JaAQ7UQ/bU6DJAaImZhlufb8Kww3p0U7Stksx2+ay835j4uL2w2DJ5sRK3Os55A CVmbcqqbyqenCoozGMwLItQ2IVcnybZdQ2OyoN8E9uwfdwJsjkN0Hw/DAl5Lx8KX YKnb4652Le2fHs0WjR1TjvJ++pQvtoWf59xkI8LAEiZ5901xDbHQR9OMRvd9oilM 1H9OE1k/jXDUjOPnmdZM1I+l1BF/ZB3cmFf8DtVCNDZ2ammqbUX/fL5C3a9NBYtx ZhTRn4G8M7NJkDe3E40A3Ed+KGSoNcqVIN1o3GECAwEAAaOCAiIwggIeMB8GA1Ud IwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBRwjR6i2Um2treF jlojBnOR8lxAnzBmBgNVHREEXzBdghFrYXJodTIubnNlbnNlLm5ldIIVa2FyaHUy LWFwaS5uc2Vuc2UubmV0ghlwb3J0YWwua2FyaHUuZi1zZWN1cmUuY29tghZhcGku a2FyaHUuZi1zZWN1cmUuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMu ZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNC5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0 LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzQuY3JsMEwGA1UdIARFMEMwNwYJYIZI AYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9D UFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDov L29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5k aWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1Ud EwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBAAAjq6b06DcvASMSLjj/fTP4p6qv Aut6DnB2kQEPMB07S1KTKHPTjamRpiEvP3BYzcVxwYu8nyZe5dNYIzVstuUlD8se cIr/RpRcpYw/SLleUSsbsmrJMWfFcuSM9Ag1HBcgmFtbeXOJztMCMVsB2g722RV1 dqhO2+qA4FUrjRP+ZejYAMdFKzcDCcoileekPqhUmuTUC1UuzN0Aq4kT5s/iqk2y Idl0w9/WQATUWuLyq7QqWTT/A2fVeP/1yDfmhlXMJhTgnYvBhJ9y/6shWKFUmUh8 aEg16x7jp6YezqLdLqsHpILwlyhYfBaAM7hLSCSjfw7EdCNOT80OvVCRQ6Y= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqToyHoZ4AjzDQGASjUB/ C8Ec5PcnW8Xz5IR0V8K++dqwlM06rP7/rSd4qOdN8y4w103ARUpcycgDixXJu3Lo Cc7Hs04CrAj+L8v0KS94wGnENjwLIs+luiVIdL72+QHMypaf9rDwQ6GSznSyxn6o O/FJnBVbwloCBJgyJlGLKmV1Lq6k8NDRolL8+5nbvOLGFmWRj6vgPNd8TKSWGz7k Hnf23gEYElsCpm/YPAI1czCWaeT+kzePk1lhlBbd9PBHZn4n1ZbyK2i8IwUatdjT l5dxxvN0jZ25XpxpC/MsdnJgWip/1QzzyQsa754qwgZXi0qWXS9DVQm0AXVCG+YN Ex2NZhine1k1emUr/s5bmZplW/uOG+wQ6Cknp3e7Go0zaULr6JaAQ7UQ/bU6DJAa ImZhlufb8Kww3p0U7Stksx2+ay835j4uL2w2DJ5sRK3Os55ACVmbcqqbyqenCooz GMwLItQ2IVcnybZdQ2OyoN8E9uwfdwJsjkN0Hw/DAl5Lx8KXYKnb4652Le2fHs0W jR1TjvJ++pQvtoWf59xkI8LAEiZ5901xDbHQR9OMRvd9oilM1H9OE1k/jXDUjOPn mdZM1I+l1BF/ZB3cmFf8DtVCNDZ2ammqbUX/fL5C3a9NBYtxZhTRn4G8M7NJkDe3 E40A3Ed+KGSoNcqVIN1o3GECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2378636494008579976506912207566643442 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-02 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Uusimaa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helsinki' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'F-Secure Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'F-Secure Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'karhu2.nsense.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 690387261798675880826702209005260761623067518436885650224136004632018034134952052455801022694238100164141831451492806861583932172810942295436908622992470286524436448793716547496786167151137224429667690471954453241142502816526173257755036814977405500293940753843974155244723641065799673378295609640234386823755801756702725635529950193772650913131144853833746269318296266629728364717618778237697707818873268494761108168089101004173654387385300861298862391805231217454212653772890465124485244716048442266996550373529942529932290922190173724473399464504153480843141391939678352492415134053729311706438967620751619189414258328186663932208254403608596150762929738203202245326010735229923319210329649957710389397890008075440708973157092026224052554002313194742659054595078146214544069633722933058299163894304422003626165817789423847423900248474501312137381364065397403518363611187806329337720327554013390790581048042812236193765506859821686226234163208389313584941256458246334152504387299077308198196129390620976757175290769346424290990319400242594181485356024899130450655600186087533618433626118267466228076315332044696633780017190306281653640046213441168665761687436188558742603736526854549139631967466535748263978289978613682582332169313 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 708d1ea2d949b6b6b7858e5a23067391f25c409f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karhu2.nsense.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karhu2-api.nsense.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.karhu.f-secure.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.karhu.f-secure.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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