mi.dropboxer.net
- Dropbox, Inc -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 0b:4a:6f:49:8c:97:1e:71:d5:76:61:f5:3d:0d:4b:00 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Dropbox, Inc
Organization:
Dropbox, Inc
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0b:4a:6f:49:8c:97:1e:71:d5:76:61:f5:3d:0d:4b:00Serial Number (int): 15007995095798113667775111193682594560
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 66:73:3c:fe:6e:5c:8c:05:46:12:d1:e7:8f:7e:ec:de:63:1c:74:fe
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 3b:ba:6b:b3:42:9d:0a:75:2a:00:0b:48:3d:3c:ad:29:a5:ab:7a:86
Fingerprint (sha256): 4b:03:35:80:44:48:66:dc:bd:e8:b9:8d:c6:a1:83:22:6a:02:92:f8:b6:28:2e:17:0e:27:f9:b5:96:66:9d:23
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate mi.dropboxer.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mi.dropboxer.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mi.dropboxer.net
mi-stage.dropboxer.net
mi-stage.dropboxer.net
Other certificates including the domain name dropboxer.net
(limited to 100 certificates)
dub.vpn.dropboxer.net
its.dropboxer.net
jira.dropboxer.net
jira-stage.dropboxer.net
app.dropboxer.net
cyberchef.dropboxer.net
jira-stage.dropboxer.net
api.dropboxer.net
amer-north-ext.vpn.dropboxer.net
jira-stage.dropboxer.net
*.dropboxer.net
amer-north-ext.vpn.dropboxer.net
*.build.dropboxer.net
tfe-alt.dropboxer.net
api.dropboxer.net
corpchef.dropboxer.net
doozers-api-dev.dropboxer.net
its.dropboxer.net
*.f2k.dropboxer.net
iad.vpn.dropboxer.net
devapi-wallarm.dropboxer.net
boomi-api.dropboxer.net
*.dropboxer.net
corpchef.dropboxer.net
api-gateway.dropboxer.net
app-stage.dropboxer.net
doozers-api-qa.dropboxer.net
99plus.dropboxer.net
*.dropboxer.net
phabricator.dropboxer.net
devapi-wallarm.dropboxer.net
app-stage.dropboxer.net
asksecurity-test.dropboxer.net
tableau.dropboxer.net
doozers-api-qa.dropboxer.net
jira.dropboxer.net
amer-north-ext.vpn.dropboxer.net
cyberchef.dropboxer.net
asksecurity-test.dropboxer.net
*.dropboxer.net
stats-aggregator.dropboxer.net
devapi-wallarm.dropboxer.net
*.first2k.dropboxer.net
stats-aggregator.dropboxer.net
amer-east.vpn.dropboxer.net
fleet.dropboxer.net
sev-dev.dropboxer.net
jira-update.dropboxer.net
jira.dropboxer.net
jira-update.dropboxer.net
api.dropboxer.net
assist.dropboxer.net
doozers-webhook-qa.dropboxer.net
app.dropboxer.net
*.dropboxer.net
oracle-ords.dropboxer.net
sandbox.terraform.dropboxer.net
api-gateway.dropboxer.net
cyberchef.dropboxer.net
dbx.vpn.dropboxer.net
mi.dropboxer.net
phabricator.dropboxer.net
service-now.dropboxer.net
asksecurity.dropboxer.net
jira.dropboxer.net
*.dropboxer.net
jira.dropboxer.net
appsmith.dropboxer.net
mi.dropboxer.net
jira.dropboxer.net
99plus.dropboxer.net
doozers-api-prd.dropboxer.net
stats-aggregator.dropboxer.net
phabricator.dropboxer.net
service-now.dropboxer.net
amer-north.vpn.dropboxer.net
asksecurity-test.dropboxer.net
boomi-api.dropboxer.net
doozers-api-qa.dropboxer.net
service-now.dropboxer.net
jira-dev.dropboxer.net
jira-update.dropboxer.net
fleet.dropboxer.net
tableau.dropboxer.net
99plus.dropboxer.net
app.dropboxer.net
*.epe.dropboxer.net
*.dropboxer.net
about.dropboxer.net
sjc.vpn.dropboxer.net
tfe.dropboxer.net
*.dropboxer.net
service-now.dropboxer.net
dropboxer.net
tableau.dropboxer.net
devapi-wallarm.dropboxer.net
app.dropboxer.net
amer-north-ext.vpn.dropboxer.net
jira.dropboxer.net
99plus.dropboxer.net
its.dropboxer.net
jira.dropboxer.net
jira-stage.dropboxer.net
app.dropboxer.net
cyberchef.dropboxer.net
jira-stage.dropboxer.net
api.dropboxer.net
amer-north-ext.vpn.dropboxer.net
jira-stage.dropboxer.net
*.dropboxer.net
amer-north-ext.vpn.dropboxer.net
*.build.dropboxer.net
tfe-alt.dropboxer.net
api.dropboxer.net
corpchef.dropboxer.net
doozers-api-dev.dropboxer.net
its.dropboxer.net
*.f2k.dropboxer.net
iad.vpn.dropboxer.net
devapi-wallarm.dropboxer.net
boomi-api.dropboxer.net
*.dropboxer.net
corpchef.dropboxer.net
api-gateway.dropboxer.net
app-stage.dropboxer.net
doozers-api-qa.dropboxer.net
99plus.dropboxer.net
*.dropboxer.net
phabricator.dropboxer.net
devapi-wallarm.dropboxer.net
app-stage.dropboxer.net
asksecurity-test.dropboxer.net
tableau.dropboxer.net
doozers-api-qa.dropboxer.net
jira.dropboxer.net
amer-north-ext.vpn.dropboxer.net
cyberchef.dropboxer.net
asksecurity-test.dropboxer.net
*.dropboxer.net
stats-aggregator.dropboxer.net
devapi-wallarm.dropboxer.net
*.first2k.dropboxer.net
stats-aggregator.dropboxer.net
amer-east.vpn.dropboxer.net
fleet.dropboxer.net
sev-dev.dropboxer.net
jira-update.dropboxer.net
jira.dropboxer.net
jira-update.dropboxer.net
api.dropboxer.net
assist.dropboxer.net
doozers-webhook-qa.dropboxer.net
app.dropboxer.net
*.dropboxer.net
oracle-ords.dropboxer.net
sandbox.terraform.dropboxer.net
api-gateway.dropboxer.net
cyberchef.dropboxer.net
dbx.vpn.dropboxer.net
mi.dropboxer.net
phabricator.dropboxer.net
service-now.dropboxer.net
asksecurity.dropboxer.net
jira.dropboxer.net
*.dropboxer.net
jira.dropboxer.net
appsmith.dropboxer.net
mi.dropboxer.net
jira.dropboxer.net
99plus.dropboxer.net
doozers-api-prd.dropboxer.net
stats-aggregator.dropboxer.net
phabricator.dropboxer.net
service-now.dropboxer.net
amer-north.vpn.dropboxer.net
asksecurity-test.dropboxer.net
boomi-api.dropboxer.net
doozers-api-qa.dropboxer.net
service-now.dropboxer.net
jira-dev.dropboxer.net
jira-update.dropboxer.net
fleet.dropboxer.net
tableau.dropboxer.net
99plus.dropboxer.net
app.dropboxer.net
*.epe.dropboxer.net
*.dropboxer.net
about.dropboxer.net
sjc.vpn.dropboxer.net
tfe.dropboxer.net
*.dropboxer.net
service-now.dropboxer.net
dropboxer.net
tableau.dropboxer.net
devapi-wallarm.dropboxer.net
app.dropboxer.net
amer-north-ext.vpn.dropboxer.net
jira.dropboxer.net
99plus.dropboxer.net
Certificate
The complete raw certificate details for mi.dropboxer.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIQC0pvSYyXHnHVdmH1PQ1LADANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzEyMTMwMDAwMDBa Fw0yNTAxMDcyMzU5NTlaMGwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9y bmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRUwEwYDVQQKEwxEcm9wYm94LCBJ bmMxGTAXBgNVBAMTEG1pLmRyb3Bib3hlci5uZXQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxs4sfanHg0JdFoUw5H0ZqyBYh+EfVMg1In6tgBY9pgXUR lcVix8IaamtUBMtjymOXflzokLPzDUfygE07o4eLNXnZQIotBZ6VRPW3vtCMidZq vYnvd/ABR9aiHkaz544jUcLIWdvw8seLtAJijPAf8sREdQWPZjrkA+JNS0870ftb EdVhn+8L89P8HSvgeiIMccyV/vU0mPN0wEZz5jRmzt2mh7DWvYnOc/oiiab76T0/ bmySs+SUFLc/p6FeaI3wEvLvQHZgJ2DRrTb3++nege67iQhvZsKXeR0p3CfU+Ne0 ggNYuPre/uLBN+97zsCW40UkxMEnRiXvwa+S8ZGZAgMBAAGjggIeMIICGjAfBgNV HSMEGDAWgBS3a6LqqKqEjHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQUZnM8/m5cjAVG EtHnj37s3mMcdP4wMwYDVR0RBCwwKoIQbWkuZHJvcGJveGVyLm5ldIIWbWktc3Rh Z2UuZHJvcGJveGVyLm5ldDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUF BwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBjwYDVR0fBIGHMIGEMECg PqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEy NTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20v RGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMH8GCCsGAQUFBwEBBHMw cTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEkGCCsGAQUF BzAChj1odHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FT SEEyNTYyMDIwQ0ExLTEuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB /wQCBQAwDQYJKoZIhvcNAQELBQADggEBAFi9RkbtFwcQAYd+2TuGv2hpSI7L/DhA foiyAiykNJOueNEoJYsMSDBaJq0pLu7d2ycf4gGkDhs907NVFYQib0kE136GlDZQ UBM5tQmzAklQIuen50OsrE385VMebFfFmVnF5ZzuMv7gjLzVz/MPZFVvjsgm2r1D dckGBXXW7zL4V8uyY0fS1b/jpFCxUYdRkbRfuxS8qcYSdm5YzmXs5TZmu6TwvuFu mt3JnH3cDlFVU2wnLYOKamyvpYkXLa/Lg3xBkI7Lh2qk2+NfXlHsIVT+QlsZ8LBR GBzcfblxwvrWc1ifMUymPS7HZ76vBI1gvLnkpQf2mSJwmUgu2w+2kVc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bOLH2px4NCXRaFMOR9G asgWIfhH1TINSJ+rYAWPaYF1EZXFYsfCGmprVATLY8pjl35c6JCz8w1H8oBNO6OH izV52UCKLQWelUT1t77QjInWar2J73fwAUfWoh5Gs+eOI1HCyFnb8PLHi7QCYozw H/LERHUFj2Y65APiTUtPO9H7WxHVYZ/vC/PT/B0r4HoiDHHMlf71NJjzdMBGc+Y0 Zs7dpoew1r2JznP6Iomm++k9P25skrPklBS3P6ehXmiN8BLy70B2YCdg0a029/vp 3oHuu4kIb2bCl3kdKdwn1PjXtIIDWLj63v7iwTfve87AluNFJMTBJ0Yl78GvkvGR mQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15007995095798113667775111193682594560 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dropbox, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mi.dropboxer.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30511967670875050252657412021475658990725313055882575707165602067094562118607638566835946813577959534957425086270401768138617711053787243763988896597597718569552522269831478020497730451272695882867653473596064420683542784804237226656178589529871994421841085808769954890467473250185769581447642849742348694663575428245917789208917636341136228991520961965493231011443820102062341527592460538734681381698295314761231372788202405985341858396008848118664880730737708810175777209689091857275041603054797639340784095826117116415105815642864718160922681281461440754593809470692924922311867178863458788439886889024270342656409 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 66733cfe6e5c8c054612d1e78f7eecde631c74fe . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.dropboxer.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-stage.dropboxer.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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