www.verisigndns.com
- Verisign, Inc -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 06:82:5e:fb:c2:2f:52:9c:35:88:b6:06:95:46:fc:84 was issued on by DigiCert Inc.
With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Verisign, Inc
Organization:
Verisign, Inc
State / Province:
Virginia
Locality: Reston
Country: US
Locality: Reston
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:82:5e:fb:c2:2f:52:9c:35:88:b6:06:95:46:fc:84Serial Number (int): 8652293059187858700964428839282736260
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 9e:29:9c:fc:d9:ea:65:21:90:e7:bb:cc:10:65:21:26:30:61:21:d1
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 5d:5c:ed:cb:e8:dc:31:69:16:76:e0:94:e3:46:64:fc:7c:28:57:12
Fingerprint (sha256): 47:a7:fb:c2:2a:a4:b2:fb:75:37:db:fa:06:01:5a:e4:aa:96:c4:9e:d3:50:fa:6e:c3:ca:43:80:24:4a:43:3c
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
Check the revocation status for certificate www.verisigndns.com
28
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.verisigndns.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.tipstogetonline.com
cap.verisigninc.com
dnssecforum.net
nic.name
www.dnssec.com
dnssec.com
dnssecsigningservice.com
nic.tv
www.dnssec.org
dnssec.org
dnssecsigningservice.net
registrarprograms.verisigninc.com
dnssecforum.com
nic.cc
verisigndns.com
www.dnssecsigningservice.com
www.nic.tv
verisigndnssec.net
tipstogetonline.com
www.dnssecsigningservice.net
www.verisigndnssec.com
www.verisigndns.com
www.dnssecforum.com
www.nic.cc
www.verisigndnssec.net
www.dnssecforum.net
www.nic.name
verisigndnssec.com
cap.verisigninc.com
dnssecforum.net
nic.name
www.dnssec.com
dnssec.com
dnssecsigningservice.com
nic.tv
www.dnssec.org
dnssec.org
dnssecsigningservice.net
registrarprograms.verisigninc.com
dnssecforum.com
nic.cc
verisigndns.com
www.dnssecsigningservice.com
www.nic.tv
verisigndnssec.net
tipstogetonline.com
www.dnssecsigningservice.net
www.verisigndnssec.com
www.verisigndns.com
www.dnssecforum.com
www.nic.cc
www.verisigndnssec.net
www.dnssecforum.net
www.nic.name
verisigndnssec.com
Other certificates including the domain name verisigndns.com
(limited to 100 certificates)
www.verisigndns.com
qa.verisigndns.com
verisigndns.com
www.verisigndns.com
www.verisigndns.com
ote.verisigndns.com
mdns.verisign.com
www.verisigndns.com
mdns.verisign.com
ote.verisigndns.com
rdap.verisign.com
download.verisigndns.com
qa.verisigndns.com
mdns.verisign.com
ote.verisigndns.com
download.verisigndns.com
mdns.verisign.com
mdns.verisign.com
WWW.DNS-TOOL.COM
www.verisigndns.com
rdap.verisign.com
rdap.verisign.com
qa3-mdns.verisign.com
qa.verisigndns.com
mdns.verisign.com
www.verisigndns.com
rdap.verisign.com
rdap.verisign.com
qa2-mdns.verisign.com
verisigndns.com
qa1-mdns.verisign.com
verisigndns.com
WWW.DNS-TOOL.COM
ote.verisigndns.com
www.verisigndns.com
www.verisigndns.com
mdns.verisign.com
mdns.verisign.com
qa.verisigndns.com
verisigndns.com
www.verisigndns.com
www.verisigndns.com
ote.verisigndns.com
mdns.verisign.com
www.verisigndns.com
mdns.verisign.com
ote.verisigndns.com
rdap.verisign.com
download.verisigndns.com
qa.verisigndns.com
mdns.verisign.com
ote.verisigndns.com
download.verisigndns.com
mdns.verisign.com
mdns.verisign.com
WWW.DNS-TOOL.COM
www.verisigndns.com
rdap.verisign.com
rdap.verisign.com
qa3-mdns.verisign.com
qa.verisigndns.com
mdns.verisign.com
www.verisigndns.com
rdap.verisign.com
rdap.verisign.com
qa2-mdns.verisign.com
verisigndns.com
qa1-mdns.verisign.com
verisigndns.com
WWW.DNS-TOOL.COM
ote.verisigndns.com
www.verisigndns.com
www.verisigndns.com
mdns.verisign.com
mdns.verisign.com
Certificate
The complete raw certificate details for www.verisigndns.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIujCCB6KgAwIBAgIQBoJe+8IvUpw1iLYGlUb8hDANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMTA1MDcwMDAwMDBa Fw0yMjA1MTIyMzU5NTlaMGcxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhWaXJnaW5p YTEPMA0GA1UEBxMGUmVzdG9uMRYwFAYDVQQKEw1WZXJpc2lnbiwgSW5jMRwwGgYD VQQDExN3d3cudmVyaXNpZ25kbnMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAnDmMAW2TfmM9FBb6E1XH/+1tfc+ra9G99eJJQc7ISn3qES9Y+rPr gWclQSxVexI+1/U+tMMMdrd9SbWtIJ7AjfsZ4MIvszja9AGdvvhNlQL5rORP/5gs 02Xddg8w2n7aqVIgPF3nE8TCzwScyjZ3m7c8tellHbn+Vh3NRD8LM60oVD0LukJR uWzKChpWp9s9xxv2yvTmJYsB05TLND7GV70EvmY70kAPlrNa/Y7jf9sqY10nVL1A zExsTkduzGg1t3QFy75O3MTBnjhn6q/Cuv4U0htKSZ8cyuizaUmFdjaZjqBFqX0s 9RGpVkg+qtl4573ERWpshR7657BCB1kp5wIDAQABo4IFeDCCBXQwHwYDVR0jBBgw FoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0OBBYEFJ4pnPzZ6mUhkOe7zBBl ISYwYSHRMIICJQYDVR0RBIICHDCCAhiCF3d3dy50aXBzdG9nZXRvbmxpbmUuY29t ghNjYXAudmVyaXNpZ25pbmMuY29tgg9kbnNzZWNmb3J1bS5uZXSCCG5pYy5uYW1l gg53d3cuZG5zc2VjLmNvbYIKZG5zc2VjLmNvbYIYZG5zc2Vjc2lnbmluZ3NlcnZp Y2UuY29tggZuaWMudHaCDnd3dy5kbnNzZWMub3JnggpkbnNzZWMub3JnghhkbnNz ZWNzaWduaW5nc2VydmljZS5uZXSCIXJlZ2lzdHJhcnByb2dyYW1zLnZlcmlzaWdu aW5jLmNvbYIPZG5zc2VjZm9ydW0uY29tggZuaWMuY2OCD3ZlcmlzaWduZG5zLmNv bYIcd3d3LmRuc3NlY3NpZ25pbmdzZXJ2aWNlLmNvbYIKd3d3Lm5pYy50doISdmVy aXNpZ25kbnNzZWMubmV0ghN0aXBzdG9nZXRvbmxpbmUuY29tghx3d3cuZG5zc2Vj c2lnbmluZ3NlcnZpY2UubmV0ghZ3d3cudmVyaXNpZ25kbnNzZWMuY29tghN3d3cu dmVyaXNpZ25kbnMuY29tghN3d3cuZG5zc2VjZm9ydW0uY29tggp3d3cubmljLmNj ghZ3d3cudmVyaXNpZ25kbnNzZWMubmV0ghN3d3cuZG5zc2VjZm9ydW0ubmV0ggx3 d3cubmljLm5hbWWCEnZlcmlzaWduZG5zc2VjLmNvbTAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGLBgNVHR8EgYMwgYAwPqA8 oDqGOGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1 NjIwMjBDQTEuY3JsMD6gPKA6hjhodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGln aUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLmNybDA+BgNVHSAENzA1MDMGBmeBDAEC AjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwfQYI KwYBBQUHAQEEcTBvMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j b20wRwYIKwYBBQUHMAKGO2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdp Q2VydFRMU1JTQVNIQTI1NjIwMjBDQTEuY3J0MAwGA1UdEwEB/wQCMAAwggF9Bgor BgEEAdZ5AgQCBIIBbQSCAWkBZwB1AEalVet1+pEgMLWiiWn0830RLEF0vv1JuIWr 8vxw/m1HAAABeUdUazMAAAQDAEYwRAIgPg23wPBCGiZy4ELv5TkuUr0oB8Uh4vfc AJyQfu0XEs8CIA0gGDeIQ2vdxw3L8py7+bj6jrpG+40GXqm0YfmOa2emAHYAIkVF B1lVJFaWP6Ev8fdthuAjJmOtwEt/XcaDXG7iDwIAAAF5R1RrUAAABAMARzBFAiEA kysFLgxOyfXyE2nPL/PnEl0AQ3c34esn6w5WlsauedQCIDGYvuswlYIVdIA67lw7 ZWIjvq3/NEshTXho/dmcd5a6AHYAUaOw9f0BeZxWbbg3eI8MpHrMGyfL956IQpoN /tSLBeUAAAF5R1Rp7QAABAMARzBFAiB6oJRHVkN/FFzQw0ysPUVjqtxrQgHzAlj3 6cm+dbsRpQIhAJ5dzOLlHnUwRKeUu6m6BimTa+UED4uN9PdS4u+wsv8uMA0GCSqG SIb3DQEBCwUAA4IBAQArjwK3oooDcaKliA0k17QKwTefWYarouTkRGjl0ud1+Zxx +w8+jP4937A0/fiFLnU9nG7wHukQ1Pg+fac6OLNGk9eGHkffYBO09LijbCwEC29B d5Tx5SmdVq8D0tqB2N0OsNQcFXn6FZvy/jrQtiPQuKPlVY2sir4tu7Lg+t2sLPlp AU/tTSMzeucLSzwKFmwi2VaOMRa5ezKc7yJaSOqSICm5sZkJlyb+ToZkjGff4z4D SV0bcLvnuvO445YxBqffA1B4nNY+rBvmHd9cEq5XsuWWaI/Ulqpjty8qvNokLCyu tcfUlbRHsqmbSry7aA0z04YqhmoUnsYuy5+8a38Y -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDmMAW2TfmM9FBb6E1XH /+1tfc+ra9G99eJJQc7ISn3qES9Y+rPrgWclQSxVexI+1/U+tMMMdrd9SbWtIJ7A jfsZ4MIvszja9AGdvvhNlQL5rORP/5gs02Xddg8w2n7aqVIgPF3nE8TCzwScyjZ3 m7c8tellHbn+Vh3NRD8LM60oVD0LukJRuWzKChpWp9s9xxv2yvTmJYsB05TLND7G V70EvmY70kAPlrNa/Y7jf9sqY10nVL1AzExsTkduzGg1t3QFy75O3MTBnjhn6q/C uv4U0htKSZ8cyuizaUmFdjaZjqBFqX0s9RGpVkg+qtl4573ERWpshR7657BCB1kp 5wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8652293059187858700964428839282736260 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verisign, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.verisigndns.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19721553007153703334128809108782213341711786888341267928770353782896318487481239279954248861961477704183081988952105668205872731099295871762067222019666183216209805511429619069434061075940107308626001915580104360991268608765569617877756541481207166126999941055668563353796306821953881627472288065257335809530932021495194040015303818165026569053603024126919096335608815262106677857368209541654974626386022958297611618682988862182957003768033720518675562920668725948995305833662114485144989469062563585261121934901069126310416641700859327717895706398400835105008334555854192479308996465747054003832774513399834112240103 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9e299cfcd9ea652190e7bbcc10652126306121d1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (540 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tipstogetonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cap.verisigninc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnssecforum.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nic.name' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dnssec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnssec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnssecsigningservice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nic.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dnssec.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnssec.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnssecsigningservice.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registrarprograms.verisigninc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnssecforum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nic.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisigndns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dnssecsigningservice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nic.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisigndnssec.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tipstogetonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dnssecsigningservice.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisigndnssec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisigndns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dnssecforum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nic.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verisigndnssec.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dnssecforum.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nic.name' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisigndnssec.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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