yshop.tw
- Oath Inc -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 01:67:f9:f1:6c:0c:10:d5:1d:36:ef:2b:78:dc:58:c5 was issued on by DigiCert Inc.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Oath Inc
Organization:
Oath Inc
State / Province:
California
Locality: Sunnyvale
Country: US
Locality: Sunnyvale
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:67:f9:f1:6c:0c:10:d5:1d:36:ef:2b:78:dc:58:c5Serial Number (int): 1869104019631445981949360524515629253
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 25:eb:10:8b:44:42:01:67:a8:d6:92:6b:6c:8a:c2:9a:5d:54:38:7f
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 3a:19:e4:46:56:74:74:cc:f1:fb:f6:15:fd:bf:58:00:7c:3e:17:9e
Fingerprint (sha256): 4c:75:01:df:06:06:b6:f8:78:c7:2e:8e:ab:cd:bb:58:ad:f6:25:34:46:00:20:e1:ac:8e:0a:a4:18:3f:e3:e3
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate yshop.tw
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for yshop.tw
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
yshop.tw
ystore.tw
ybid.tw
ystore.tw
ybid.tw
Other certificates including the domain name yshop.tw
(limited to 100 certificates)
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
ystore.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
yshop.tw
consent.oath.com
stage.consent.oath.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
yshop.tw
stage.consent.oath.com
consent.oath.com
ystore.tw
*.abumedia.yahoo.com
stage.consent.oath.com
ystore.tw
consent.oath.com
ystore.tw
*.abumedia.yahoo.com
stage.consent.oath.com
*.abumedia.yahoo.com
consent.oath.com
yshop.tw
trunk.consent.oath.com
yshop.tw
consent.oath.com
ystore.tw
consent.oath.com
stage.consent.oath.com
trunk.consent.oath.com
*.abumedia.yahoo.com
*.yshop.tw
yshop.tw
trunk.consent.oath.com
*.abumedia.yahoo.com
consent.oath.com
stage.consent.oath.com
ystore.tw
stage.consent.oath.com
trunk.consent.oath.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.yshop.tw
trunk.consent.oath.com
trunk.consent.oath.com
ystore.tw
*.abumedia.yahoo.com
trunk.consent.oath.com
*.abumedia.yahoo.com
consent.oath.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
consent.oath.com
ystore.tw
stage.consent.oath.com
ystore.tw
consent.oath.com
yshop.tw
consent.oath.com
consent.oath.com
yshop.tw
trunk.consent.oath.com
ystore.tw
trunk.consent.oath.com
ystore.tw
consent.oath.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
trunk.consent.oath.com
ystore.tw
ystore.tw
yshop.tw
stage.consent.oath.com
stage.consent.oath.com
trunk.consent.oath.com
consent.oath.com
consent.oath.com
trunk.consent.oath.com
*.abumedia.yahoo.com
stage.consent.oath.com
stage.consent.oath.com
ystore.tw
stage.consent.oath.com
*.abumedia.yahoo.com
ystore.tw
ystore.tw
consent.oath.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
consent.oath.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
stage.consent.oath.com
yshop.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
ystore.tw
*.abumedia.yahoo.com
*.abumedia.yahoo.com
yshop.tw
consent.oath.com
stage.consent.oath.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
yshop.tw
stage.consent.oath.com
consent.oath.com
ystore.tw
*.abumedia.yahoo.com
stage.consent.oath.com
ystore.tw
consent.oath.com
ystore.tw
*.abumedia.yahoo.com
stage.consent.oath.com
*.abumedia.yahoo.com
consent.oath.com
yshop.tw
trunk.consent.oath.com
yshop.tw
consent.oath.com
ystore.tw
consent.oath.com
stage.consent.oath.com
trunk.consent.oath.com
*.abumedia.yahoo.com
*.yshop.tw
yshop.tw
trunk.consent.oath.com
*.abumedia.yahoo.com
consent.oath.com
stage.consent.oath.com
ystore.tw
stage.consent.oath.com
trunk.consent.oath.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.yshop.tw
trunk.consent.oath.com
trunk.consent.oath.com
ystore.tw
*.abumedia.yahoo.com
trunk.consent.oath.com
*.abumedia.yahoo.com
consent.oath.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
consent.oath.com
ystore.tw
stage.consent.oath.com
ystore.tw
consent.oath.com
yshop.tw
consent.oath.com
consent.oath.com
yshop.tw
trunk.consent.oath.com
ystore.tw
trunk.consent.oath.com
ystore.tw
consent.oath.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
trunk.consent.oath.com
ystore.tw
ystore.tw
yshop.tw
stage.consent.oath.com
stage.consent.oath.com
trunk.consent.oath.com
consent.oath.com
consent.oath.com
trunk.consent.oath.com
*.abumedia.yahoo.com
stage.consent.oath.com
stage.consent.oath.com
ystore.tw
stage.consent.oath.com
*.abumedia.yahoo.com
ystore.tw
ystore.tw
consent.oath.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
consent.oath.com
*.abumedia.yahoo.com
*.abumedia.yahoo.com
stage.consent.oath.com
yshop.tw
*.abumedia.yahoo.com
Certificate
The complete raw certificate details for yshop.tw in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgIQAWf58WwMENUdNu8reNxYxTANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0yMDEwMTQwMDAwMDBaFw0yMTA0MDYyMzU5NTla MFwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRIwEAYDVQQHEwlT dW5ueXZhbGUxETAPBgNVBAoTCE9hdGggSW5jMREwDwYDVQQDEwh5c2hvcC50dzCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKKZwdVM8LHCu5knQp1gFfJt EQ09QqPiVis4Oe6jeSQ2gun8u++QC9tHwEQbcN4cdgpnXCiLQyxfVc//9vx5CJ5S N2audwoad5fAlEqcb93bRiNgjvHIw9zznj/nYbXSoP+d+xCjn7LzSjMwsN4953Vf GDy8Gt5/5J6XVtN5w2G4wSCCm6byfyHk1YNrajmYxZNb5Xs8mxBcR/2QGn8HGo3T D4zODu7CWagsJa1W8AkaIKoFB3KzHRN83+Rd/nWz/SeV9MoECIbUGX3jJGowZr8W ZM7bta3hUlD17f41dc3087VzBCn7YSEPU8vrfDpVOy18jbQIvFGgfMuv7rsNrUkC AwEAAaOCAgowggIGMB8GA1UdIwQYMBaAFFFo/5CvAgd1PMzZZWRiohK4WXI7MB0G A1UdDgQWBBQl6xCLREIBZ6jWkmtsisKaXVQ4fzAnBgNVHREEIDAeggh5c2hvcC50 d4IJeXN0b3JlLnR3ggd5YmlkLnR3MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2Ny bDMuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDA0oDKgMIYuaHR0 cDovL2NybDQuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDBMBgNV HSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k aWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjCBgwYIKwYBBQUHAQEEdzB1MCQGCCsG AQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTQYIKwYBBQUHMAKGQWh0 dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJh bmNlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQELBQADggEBADvGhf9OCoYCRihL0YMb1Ia8U2owfJAqPVfU A/sMfJiHsmTwe1ufcsky1fDtYymCzNm1IhG9SbIGa73tPKi1Fhg0U3VM1taqAoRB 5FlVb8gZYNazFxPMdJaM2viM6COhacoO/k5DPzwhx79rhfDQl/WhUkcqa7GWgjBD 7+GXHcmV//mZNv5pCcKTx3AkJTSoTKYUmPlhzTrDv2Eospt70aH6+CVbvcwyMrf+ /OV4U+UbSAcDoN8CWW22sN3uEnkcf91EuTKbxHOIeSoOvcYoS6FxqyhFpQ5cq7p1 HakOkBfOrUQHqDA8OCL155Ika4ItkvFGAc4DVNnfugz8GlQ+rgk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopnB1UzwscK7mSdCnWAV 8m0RDT1Co+JWKzg57qN5JDaC6fy775AL20fARBtw3hx2CmdcKItDLF9Vz//2/HkI nlI3Zq53Chp3l8CUSpxv3dtGI2CO8cjD3POeP+dhtdKg/537EKOfsvNKMzCw3j3n dV8YPLwa3n/knpdW03nDYbjBIIKbpvJ/IeTVg2tqOZjFk1vlezybEFxH/ZAafwca jdMPjM4O7sJZqCwlrVbwCRogqgUHcrMdE3zf5F3+dbP9J5X0ygQIhtQZfeMkajBm vxZkztu1reFSUPXt/jV1zfTztXMEKfthIQ9Ty+t8OlU7LXyNtAi8UaB8y6/uuw2t SQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1869104019631445981949360524515629253 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yshop.tw' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20526425886437979185505970402851421287601519876028583552616092884576345390953170089611151793366792638230975583495282918207808749605906655165041407634591936432786758311825642642396407049829488557019416032041712147291170137016897468387609216517515023408466413467364133997981647281985861881095103950585264363254265458195718391612930689234030969574226030885638066801877838542075875182694100652309497877409523586671699889763500988467358034135042949952086860534988511016082887061801046742108702820980308267405433552838682890341410561815064967715095872039999720302660140316514976039303184365764124333513803487634445239692617 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 25eb108b44420167a8d6926b6c8ac29a5d54387f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yshop.tw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ystore.tw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ybid.tw' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003bc685ff4e0a860246284bd1831bd486bc536a307c902a3d57d403fb0c7c9887b264f07b5b9f72c932d5f0ed632982ccd9b52211bd49b2066bbded3ca8b516183453754cd6d6aa028441e459556fc81960d6b31713cc74968cdaf88ce823a169ca0efe4e433f3c21c7bf6b85f0d097f5a152472a6bb196823043efe1971dc995fff99936fe6909c293c770242534a84ca61498f961cd3ac3bf6128b29b7bd1a1faf8255bbdcc3232b7fefce57853e51b480703a0df02596db6b0ddee12791c7fdd44b9329bc47388792a0ebdc6284ba171ab2845a50e5cabba751da90e9017cead4407a8303c3822f5e792246b822d92f14601ce0354d9dfba0cfc1a543eae09