*.coh.org
- City of Hope -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 07:e6:f4:af:4f:73:4b:07:2d:30:16:b2:4f:b3:92:5b was issued on by DigiCert Inc.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
City of Hope
Organization:
City of Hope
Organization unit: ITS
Organization unit: ITS
State / Province:
CA
Locality: Duarte
Country: US
Locality: Duarte
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:e6:f4:af:4f:73:4b:07:2d:30:16:b2:4f:b3:92:5bSerial Number (int): 10503787045417849023742679586580959835
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 10:70:37:91:2c:41:cb:8d:0d:26:fc:08:c4:1d:cb:fd:b6:d3:f2:da
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 05:86:34:21:47:91:26:cf:99:6b:19:91:36:74:b6:04:46:51:f2:12
Fingerprint (sha256): 43:ca:73:32:e9:d1:84:2d:8a:e4:c6:9a:d3:40:78:20:b0:62:7a:f1:9d:57:3e:22:dd:46:f2:e1:c6:26:22:1f
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate *.coh.org
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.coh.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.coh.org
coh.org
pwdrst.coh.org
vpwadpwdrst01.coh.org
coh.org
pwdrst.coh.org
vpwadpwdrst01.coh.org
Other certificates including the domain name coh.org
(limited to 100 certificates)
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
email.coh.org
www.infosci.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
duo.coh.org
*.coh.org
infosci.coh.org
*.coh.org
*.coh.org
*.coh.org
san-13-s10.tlsprovisioning.exacttarget.com
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
share.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
email.coh.org
benefitexpress.coh.org
*.coh.org
*.coh.org
*.coh.org
san-10-s12.tlsprovisioning.exacttarget.com
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
securelink.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
email.coh.org
disreport.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
webext.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
libguides.library.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
email.coh.org
www.infosci.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
duo.coh.org
*.coh.org
infosci.coh.org
*.coh.org
*.coh.org
*.coh.org
san-13-s10.tlsprovisioning.exacttarget.com
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
share.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
email.coh.org
benefitexpress.coh.org
*.coh.org
*.coh.org
*.coh.org
san-10-s12.tlsprovisioning.exacttarget.com
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
securelink.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
email.coh.org
disreport.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
webext.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
libguides.library.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
*.coh.org
Certificate
The complete raw certificate details for *.coh.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGwDCCBaigAwIBAgIQB+b0r09zSwctMBayT7OSWzANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwNDE1MDAwMDAwWhcN MjEwNDI1MTIwMDAwWjBkMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExDzANBgNV BAcTBkR1YXJ0ZTEVMBMGA1UEChMMQ2l0eSBvZiBIb3BlMQwwCgYDVQQLEwNJVFMx EjAQBgNVBAMMCSouY29oLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANX0LiHYzyIxBq8inLi4ROWlWCS3zmrL+/1z182g1dvGIZ41mEI6dkH+p4ov cgDgarE2q9f3MFJ1dcOLh10s490QkABLBN2Fz6xx4Bh4ePbstvalIYqtv0ZGZL3s rr/xeQeRAIW/+091oyWId4tNBBGn1QS3MSS3+078dRq8BcPlgWgJDDfxC4iDj40X 03ypA+2SaGFmz2VlI45o7CaBG+DBctP3fDf57XIfWLiai+S94vRkHBGm2ilBC1TR RjWr0jQBIbQoUFKdpyK0qIQYNkky7ktdzT/hxHpFNQ6FpE7SEeC+uIop5bB57U1K rWZIStO0Hj3gxJffKTcwtyl4QhkCAwEAAaOCA4MwggN/MB8GA1UdIwQYMBaAFA+A YRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBQQcDeRLEHLjQ0m/AjEHcv9ttPy 2jBEBgNVHREEPTA7ggkqLmNvaC5vcmeCB2NvaC5vcmeCDnB3ZHJzdC5jb2gub3Jn ghV2cHdhZHB3ZHJzdDAxLmNvaC5vcmcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8v Y3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0cDov L2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3 BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQu Y29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhho dHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNl cnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQw DAYDVR0TAQH/BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYA7ku9t3XO YLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFqIrb8jwAABAMARzBFAiEA8T+I rQ9kDHg0xRZx2QSkmyKdv5Z8WFaTU2xIFtUM54kCIFwo2zgoxopFTTeWKZ0D3cCI OdHfyjNIqAhWvlKHYSXLAHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16g gw8AAAFqIrb9qgAABAMARzBFAiEA5DGcZ1Vo2oulE0nHRvdDa4z3Hlhu/muH0t5p 1amx4SwCICKkcJZkU08UxwojmGK/D4WqjA4PCQC2H1dic3pBMMj4AHcARJRlLrDu zq/EQAfYqP4owNrmgr7YyzG1P9MzlrW2gagAAAFqIrb8JAAABAMASDBGAiEA6nq+ ZOBc72PIG6XI6R+PoqAgtQFqrzo5wmTwXJVl/9QCIQCFj+RHqZ+9yEagmfvSiEMQ UtkxxUxe5EWHjhdaTBv21TANBgkqhkiG9w0BAQsFAAOCAQEAlhPrC7kL1/SC8J66 5ZrkiilHU8/37QwV2GO+rVTZb9oLlZx4bmEEpJ9gahKJYN9QmUuLnkwv0zrZEBVH eDr4ZEmsHaqfmySJvlqF4NZr/Cnw3pLQggXkO+qtw2q2mUeyzT6cYQDHANDJF1W8 vfE0Xim1duoNB79UHEdt09F1otAneMvrrbk71/SpvjKT8my0phtXnwoWs5pxK+om OECPv8uuRMtX78n7lqKBq/snT573jzN/E1aEbZCY2G/+e0+aIz2D+1jJWHdoI2mr XrSPILmG5zrUIwkg5eypvIJgsimu+TtW1AoYf2H0yR8PJk5y0aj82eSdib1obvcx U3kFnQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fQuIdjPIjEGryKcuLhE 5aVYJLfOasv7/XPXzaDV28YhnjWYQjp2Qf6nii9yAOBqsTar1/cwUnV1w4uHXSzj 3RCQAEsE3YXPrHHgGHh49uy29qUhiq2/RkZkveyuv/F5B5EAhb/7T3WjJYh3i00E EafVBLcxJLf7Tvx1GrwFw+WBaAkMN/ELiIOPjRfTfKkD7ZJoYWbPZWUjjmjsJoEb 4MFy0/d8N/ntch9YuJqL5L3i9GQcEabaKUELVNFGNavSNAEhtChQUp2nIrSohBg2 STLuS13NP+HEekU1DoWkTtIR4L64iinlsHntTUqtZkhK07QePeDEl98pNzC3KXhC GQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10503787045417849023742679586580959835 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-25 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Duarte' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City of Hope' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ITS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.coh.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27009168704077279903329955989562673993962801660423468631664438362109671654340311617232274519969983980225980009429025490989381816246147819259755798662198503623046656742774683187616382018285442045591638580786426205253763744952356515386138338194171818382349181279740284306380886095060940370215499800321278924695387350851031172233736845193603196960022876440964179342961724145652563629970210129977884012270148378648572655313481882361007242711335327434142367543411429443744473610025065832462290638416302409299443896547247895140516798065327885794765441093957176953522458827749509419906187269311753656880896685603667960152601 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 107037912c41cb8d0d26fc08c41dcbfdb6d3f2da . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coh.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coh.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwdrst.coh.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpwadpwdrst01.coh.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009613eb0bb90bd7f482f09ebae59ae48a294753cff7ed0c15d863bead54d96fda0b959c786e6104a49f606a128960df50994b8b9e4c2fd33ad9101547783af86449ac1daa9f9b2489be5a85e0d66bfc29f0de92d08205e43beaadc36ab69947b2cd3e9c6100c700d0c91755bcbdf1345e29b576ea0d07bf541c476dd3d175a2d02778cbebadb93bd7f4a9be3293f26cb4a61b579f0a16b39a712bea2638408fbfcbae44cb57efc9fb96a281abfb274f9ef78f337f1356846d9098d86ffe7b4f9a233d83fb58c95877682369ab5eb48f20b986e73ad4230920e5eca9bc8260b229aef93b56d40a187f61f4c91f0f264e72d1a8fcd9e49d89bd686ef7315379059d