ua.ams.incircuit.com
- AssetWorks Inc. -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0f:fb:1d:d8:5f:8c:fc:b5:76:4e:7a:b1:fd:18:76:03 was issued on by DigiCert Inc.
With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
AssetWorks Inc.
Organization:
AssetWorks Inc.
State / Province:
Texas
Locality: Austin
Country: US
Locality: Austin
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:fb:1d:d8:5f:8c:fc:b5:76:4e:7a:b1:fd:18:76:03Serial Number (int): 21242291780999107739370551313488705027
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 16:76:3b:6e:dd:7f:e1:c7:3c:51:b0:96:89:3d:05:3c:fc:d1:b2:83
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): f2:c4:91:36:a1:06:33:01:52:25:64:27:9b:2d:de:da:49:96:74:6b
Fingerprint (sha256): 40:a9:81:e0:52:e1:23:9a:60:09:e1:f9:99:0f:7c:49:fb:7c:55:11:cc:72:87:e9:b1:84:ae:3e:e3:f8:3b:ec
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl
Check the revocation status for certificate ua.ams.incircuit.com
16
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ua.ams.incircuit.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ua.ams.incircuit.com
ams.incircuit.com
amp.assetworks.com
ibiddemo.incircuit.com
login.incircuit.com
wsvprod1.incircuit.com
wsvprod3.incircuit.com
demo2.incircuit.com
ibid.illinois.gov
scanandvalidate.com
web5.incircuit.com
wsvprod4.incircuit.com
ucsd.ams.incircuit.com
lsu.ams.incircuit.com
towson.ams.incircuit.com
ru.ams.incircuit.com
ams.incircuit.com
amp.assetworks.com
ibiddemo.incircuit.com
login.incircuit.com
wsvprod1.incircuit.com
wsvprod3.incircuit.com
demo2.incircuit.com
ibid.illinois.gov
scanandvalidate.com
web5.incircuit.com
wsvprod4.incircuit.com
ucsd.ams.incircuit.com
lsu.ams.incircuit.com
towson.ams.incircuit.com
ru.ams.incircuit.com
Other certificates including the domain name incircuit.com
(limited to 100 certificates)
web3.incircuit.com
login.incircuit.com
*.incircuit.com
scanandvalidate.com
*.ams.incircuit.com
lsu.ams.incircuit.com
uc.ams.incircuit.com
ibid.illinois.gov
ru.ams.incircuit.com
web4.incircuit.com
web7.incircuit.com
amp.assetworks.com
*.incircuit.com
ucsd.ams.incircuit.com
ibid.illinois.gov
amp.assetworks.com
ibid.illinois.gov
demo.ams.incircuit.com
amp.assetworks.com
web9.incircuit.com
ibid.illinois.gov
login.incircuit.com
login.incircuit.com
*.incircuit.com
ua.ams.incircuit.com
web7.incircuit.com
ucsd.ams.incircuit.com
demo.ams.incircuit.com
ams.incircuit.com
demo.incircuit.com
web2.incircuit.com
scanandvalidate.com
*.ams.incircuit.com
web3.incircuit.com
login.incircuit.com
ibid.illinois.gov
demo2.incircuit.com
towson.ams.incircuit.com
amp.incircuit.com
towson.ams.incircuit.com
lsu.ams.incircuit.com
ua.ams.incircuit.com
web5.incircuit.com
*.incircuit.com
demo.ams.incircuit.com
web9.incircuit.com
towson.ams.incircuit.com
assetaimapp2.assetworks.com
login.incircuit.com
demo2.incircuit.com
web6.incircuit.com
ibid.illinois.gov
ucsd.ams.incircuit.com
*.incircuit.com
demo2.incircuit.com
web7.incircuit.com
ams.incircuit.com
*.incircuit.com
demo2.incircuit.com
lsu.ams.incircuit.com
www.incircuit.com
ru.ams.incircuit.com
login.incircuit.com
web7.incircuit.com
scanandvalidate.com
*.incircuit.com
*.incircuit.com
nshebcn.ams.incircuit.com
uc.ams.incircuit.com
*.incircuit.com
login.incircuit.com
*.incircuit.com
scanandvalidate.com
*.ams.incircuit.com
lsu.ams.incircuit.com
uc.ams.incircuit.com
ibid.illinois.gov
ru.ams.incircuit.com
web4.incircuit.com
web7.incircuit.com
amp.assetworks.com
*.incircuit.com
ucsd.ams.incircuit.com
ibid.illinois.gov
amp.assetworks.com
ibid.illinois.gov
demo.ams.incircuit.com
amp.assetworks.com
web9.incircuit.com
ibid.illinois.gov
login.incircuit.com
login.incircuit.com
*.incircuit.com
ua.ams.incircuit.com
web7.incircuit.com
ucsd.ams.incircuit.com
demo.ams.incircuit.com
ams.incircuit.com
demo.incircuit.com
web2.incircuit.com
scanandvalidate.com
*.ams.incircuit.com
web3.incircuit.com
login.incircuit.com
ibid.illinois.gov
demo2.incircuit.com
towson.ams.incircuit.com
amp.incircuit.com
towson.ams.incircuit.com
lsu.ams.incircuit.com
ua.ams.incircuit.com
web5.incircuit.com
*.incircuit.com
demo.ams.incircuit.com
web9.incircuit.com
towson.ams.incircuit.com
assetaimapp2.assetworks.com
login.incircuit.com
demo2.incircuit.com
web6.incircuit.com
ibid.illinois.gov
ucsd.ams.incircuit.com
*.incircuit.com
demo2.incircuit.com
web7.incircuit.com
ams.incircuit.com
*.incircuit.com
demo2.incircuit.com
lsu.ams.incircuit.com
www.incircuit.com
ru.ams.incircuit.com
login.incircuit.com
web7.incircuit.com
scanandvalidate.com
*.incircuit.com
*.incircuit.com
nshebcn.ams.incircuit.com
uc.ams.incircuit.com
*.incircuit.com
Certificate
The complete raw certificate details for ua.ams.incircuit.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIQD/sd2F+M/LV2Tnqx/Rh2AzANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTUxMDIwMDAwMDAwWhcN MTYxMTE2MTIwMDAwWjBnMQswCQYDVQQGEwJVUzEOMAwGA1UECBMFVGV4YXMxDzAN BgNVBAcTBkF1c3RpbjEYMBYGA1UEChMPQXNzZXRXb3JrcyBJbmMuMR0wGwYDVQQD ExR1YS5hbXMuaW5jaXJjdWl0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAOXAaVcihxXpHTqxfImzng+8hOBdftU8ZK/Dcx7kUdqAp2eZLoaTrl9S dnKnyauww2ONIknqKpu23usEzV80eV/MZWsq0O5aF+z+SOmeGKPa8y1/031rKcLv fYfsjfRjpTiEElbIPaHbMduDgZwxHGqEbwMnuKowlBf9p2Gekb0JwFios+FwajlS GiDO3sC8Vw1OWgDYfAEE0vCBOcXZgF/d0W7sKCpWl6Id6CuoD/E6X649bWAtSyNe cfFLg5j6Zoj/hXdm9e5emYZtG3mwy72Br4gzwwpPTT6bPdx3lM1QoNge7TYtt1LK coVMcKEKCgHT4VRZKkPfz1ouv9WpJr0CAwEAAaOCAy0wggMpMB8GA1UdIwQYMBaA FA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBQWdjtu3X/hxzxRsJaJPQU8 /NGygzCCAW8GA1UdEQSCAWYwggFighR1YS5hbXMuaW5jaXJjdWl0LmNvbYIRYW1z LmluY2lyY3VpdC5jb22CEmFtcC5hc3NldHdvcmtzLmNvbYIWaWJpZGRlbW8uaW5j aXJjdWl0LmNvbYITbG9naW4uaW5jaXJjdWl0LmNvbYIWd3N2cHJvZDEuaW5jaXJj dWl0LmNvbYIWd3N2cHJvZDMuaW5jaXJjdWl0LmNvbYITZGVtbzIuaW5jaXJjdWl0 LmNvbYIRaWJpZC5pbGxpbm9pcy5nb3aCE3NjYW5hbmR2YWxpZGF0ZS5jb22CEndl YjUuaW5jaXJjdWl0LmNvbYIWd3N2cHJvZDQuaW5jaXJjdWl0LmNvbYIWdWNzZC5h bXMuaW5jaXJjdWl0LmNvbYIVbHN1LmFtcy5pbmNpcmN1aXQuY29tghh0b3dzb24u YW1zLmluY2lyY3VpdC5jb22CFHJ1LmFtcy5pbmNpcmN1aXQuY29tMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQw YjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNS5j cmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzUu Y3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBz Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAw bjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUF BzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2Vj dXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEB ALbKiFcRddJK+xbd+cdEK/zQYizvl/NZ/B45TvTefrDWuuUGojYEONtbbZjqdwG1 1NlfZVrPkEMv4M7Bl6Nr2nepZJwW+NQaDWpVY6xIpbAoLX6mHBcNZvjXrA1AnZd5 t/wVti5BD1XHCZjjX1CIGEocZbVTa5EV8FWPpLCuHId4SWxbxuxJ6hY2i7WnPJof r1IwuWJJox6PbO9mWFUyl7+RTQ6FvZkv6AbmaAe4ldSFjDI2PWDS6ovk9nf99EuM 9QjWCKGlkH1lX42ux/IfEVdDGctFIJSxBjrZovaPT6FRnGoDdLsavtRSu8ATQ4yd T1OjiJZa8QbY3H5OasP2fOc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cBpVyKHFekdOrF8ibOe D7yE4F1+1Txkr8NzHuRR2oCnZ5kuhpOuX1J2cqfJq7DDY40iSeoqm7be6wTNXzR5 X8xlayrQ7loX7P5I6Z4Yo9rzLX/TfWspwu99h+yN9GOlOIQSVsg9odsx24OBnDEc aoRvAye4qjCUF/2nYZ6RvQnAWKiz4XBqOVIaIM7ewLxXDU5aANh8AQTS8IE5xdmA X93RbuwoKlaXoh3oK6gP8Tpfrj1tYC1LI15x8UuDmPpmiP+Fd2b17l6Zhm0bebDL vYGviDPDCk9NPps93HeUzVCg2B7tNi23UspyhUxwoQoKAdPhVFkqQ9/PWi6/1akm vQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21242291780999107739370551313488705027 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-16 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Austin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AssetWorks Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ua.ams.incircuit.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29003453477173726136817581166568118235199764662490021484718607096783010988391917527808563985971592399088369690066733850038412525381987079981947869703375310744178102030040331441719174834126914088519404501309118836490029959748394765127347438587229581220499029600416972749992736726888936463245379623081567325414744907947438306583341172070435094661397144313351563605688257828872615735628856325683792716455672442112111901869396611453238142833671021052249176991351834634589598718599862972365231360867725825216007634797327855417591019843903880102309520884779803553390287452913505776598844493157204959899498508121728774383293 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 16763b6edd7fe1c73c51b096893d053cfcd1b283 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (358 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ua.ams.incircuit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ams.incircuit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.assetworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibiddemo.incircuit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.incircuit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsvprod1.incircuit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsvprod3.incircuit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo2.incircuit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibid.illinois.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scanandvalidate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web5.incircuit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsvprod4.incircuit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucsd.ams.incircuit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsu.ams.incircuit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'towson.ams.incircuit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru.ams.incircuit.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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