*.x.sandia.gov
- Sandia National Laboratories -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number 23:5d:cf:d1:f4:64:26:a7:a9:96:e0:3e:ae:25:f4:42 was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Sandia National Laboratories
Organization:
Sandia National Laboratories
Organization unit: Adversarial Modeling and Penetration Testing
Organization unit: Adversarial Modeling and Penetration Testing
Address:
1515 Eubank Blvd SE
Postal code: 87123
State / Province: New Mexico
Locality: Albuquerque
Country: US
Postal code: 87123
State / Province: New Mexico
Locality: Albuquerque
Country: US
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 23:5d:cf:d1:f4:64:26:a7:a9:96:e0:3e:ae:25:f4:42Serial Number (int): 47010078553425133419233367641192526914
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: ba:c3:d7:4a:52:19:63:cd:b5:83:4c:88:f6:f6:c3:82:79:94:9b:1d
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): cf:56:fe:79:51:b4:72:4f:4c:e5:08:5b:16:a9:3e:1d:75:10:29:11
Fingerprint (sha256): 4d:84:97:b5:af:55:cf:83:69:18:46:54:ba:cd:ec:5e:88:4b:75:34:db:32:fa:bd:3f:83:24:e8:87:14:ac:c6
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate *.x.sandia.gov
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.x.sandia.gov
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.x.sandia.gov
x.sandia.gov
x.sandia.gov
Other certificates including the domain name sandia.gov
(limited to 100 certificates)
remote.sandia.gov
as1013snllx.sandia.gov
al.sandia.gov
fmdiri1.webdev.sandia.gov
h2zilla.sandia.gov
cchdsupport-son.sandia.gov
as3101snllx.sandia.gov
remote-ca.sandia.gov
ccmelcor.sandia.gov
esheta-dev.sandia.gov
accountpasswords.sandia.gov
ws1682lxz.sandia.gov
xfracas.sandia.gov
rocket.web.sandia.gov
hpcn-www.ca.sandia.gov
ebid-search.sandia.gov
slycat-scn.sandia.gov
rpwmesh-web2.sandia.gov
swas-q.sandia.gov
testing-dev.sandia.gov
kscredrepo.webdev.sandia.gov
msntstsvr.webdev.sandia.gov
accountpasswords.sandia.gov
vast.sandia.gov
primavera.webqual.sandia.gov
xfracas.sandia.gov
isp.sandia.gov
nts.webdev.sandia.gov
psc03nma.sandia.gov
eimsiis.sandia.gov
nagios.gibson.sandia.gov
as3012snllx.sandia.gov
cobrap6jobs.webqual.sandia.gov
as1019snllx.sandia.gov
oud1.webdev.sandia.gov
ebprod.sandia.gov
safer.sandia.gov
wls122emw3.web.sandia.gov
ebwebe2.web.ca.sandia.gov
terminal.web.ca.sandia.gov
catest4.webdev.ca.sandia.gov
foobarmsn.webdev.sandia.gov
cbapce2.webdev.sandia.gov
cert.sandia.gov
wls122emw1.web.sandia.gov
as1008snllx.sandia.gov
radtrain.sandia.gov
gms-webhooks.sandia.gov
*.sandia.gov
datasea-qual.sandia.gov
sregistry.ca.sandia.gov
ebapce2.webdev.ca.sandia.gov
ux-registry.sandia.gov
nwisapiqual.sandia.gov
rtc.sandia.gov
met-eoc.sandia.gov
ick.sandia.gov
vzadmi1.webdev.sandia.gov
tagnsdd.sandia.gov
ws451snlnt.sandia.gov
wildfly27psf.webdev.sandia.gov
*.sandia.gov
ickdev.sandia.gov
msnfoobar.webdev.sandia.gov
wls122emw3.webqual.sandia.gov
moveitmobile-d.sandia.gov
mlserver-dev.sandia.gov
wcvis-q.sandia.gov
pointtest.ca.sandia.gov
rp-linux01.ca.sandia.gov
supplierportal-qual.sandia.gov
dancer.ca.sandia.gov
msntstrostra.webdev.sandia.gov
fmsoai1.webdev.sandia.gov
caf.web.sandia.gov
prodtools.sandia.gov
dhs2.ca.sandia.gov
ebid-role.sandia.gov
eo12333-qual.sandia.gov
sip.sandia.gov
vnge.sandia.gov
foiax.sandia.gov
sccmexternal.sandia.gov
lb-qual-2.sandia.gov
dancer.ca.sandia.gov
getridofit-p.sandia.gov
ebid-help.sandia.gov
range-vpn-1.sandia.gov
hackmd.sandia.gov
lapsmq15.webdev.sandia.gov
ebfrmi2.webdev.ca.sandia.gov
config1.ca.sandia.gov
nexus.web.sandia.gov
ebccmi1.webqual.sandia.gov
map.sandia.gov
supplierportal-dev.sandia.gov
tagnsdd.sandia.gov
fmfnr.webqual.sandia.gov
870dev.sandia.gov
nexus.web.sandia.gov
as1013snllx.sandia.gov
al.sandia.gov
fmdiri1.webdev.sandia.gov
h2zilla.sandia.gov
cchdsupport-son.sandia.gov
as3101snllx.sandia.gov
remote-ca.sandia.gov
ccmelcor.sandia.gov
esheta-dev.sandia.gov
accountpasswords.sandia.gov
ws1682lxz.sandia.gov
xfracas.sandia.gov
rocket.web.sandia.gov
hpcn-www.ca.sandia.gov
ebid-search.sandia.gov
slycat-scn.sandia.gov
rpwmesh-web2.sandia.gov
swas-q.sandia.gov
testing-dev.sandia.gov
kscredrepo.webdev.sandia.gov
msntstsvr.webdev.sandia.gov
accountpasswords.sandia.gov
vast.sandia.gov
primavera.webqual.sandia.gov
xfracas.sandia.gov
isp.sandia.gov
nts.webdev.sandia.gov
psc03nma.sandia.gov
eimsiis.sandia.gov
nagios.gibson.sandia.gov
as3012snllx.sandia.gov
cobrap6jobs.webqual.sandia.gov
as1019snllx.sandia.gov
oud1.webdev.sandia.gov
ebprod.sandia.gov
safer.sandia.gov
wls122emw3.web.sandia.gov
ebwebe2.web.ca.sandia.gov
terminal.web.ca.sandia.gov
catest4.webdev.ca.sandia.gov
foobarmsn.webdev.sandia.gov
cbapce2.webdev.sandia.gov
cert.sandia.gov
wls122emw1.web.sandia.gov
as1008snllx.sandia.gov
radtrain.sandia.gov
gms-webhooks.sandia.gov
*.sandia.gov
datasea-qual.sandia.gov
sregistry.ca.sandia.gov
ebapce2.webdev.ca.sandia.gov
ux-registry.sandia.gov
nwisapiqual.sandia.gov
rtc.sandia.gov
met-eoc.sandia.gov
ick.sandia.gov
vzadmi1.webdev.sandia.gov
tagnsdd.sandia.gov
ws451snlnt.sandia.gov
wildfly27psf.webdev.sandia.gov
*.sandia.gov
ickdev.sandia.gov
msnfoobar.webdev.sandia.gov
wls122emw3.webqual.sandia.gov
moveitmobile-d.sandia.gov
mlserver-dev.sandia.gov
wcvis-q.sandia.gov
pointtest.ca.sandia.gov
rp-linux01.ca.sandia.gov
supplierportal-qual.sandia.gov
dancer.ca.sandia.gov
msntstrostra.webdev.sandia.gov
fmsoai1.webdev.sandia.gov
caf.web.sandia.gov
prodtools.sandia.gov
dhs2.ca.sandia.gov
ebid-role.sandia.gov
eo12333-qual.sandia.gov
sip.sandia.gov
vnge.sandia.gov
foiax.sandia.gov
sccmexternal.sandia.gov
lb-qual-2.sandia.gov
dancer.ca.sandia.gov
getridofit-p.sandia.gov
ebid-help.sandia.gov
range-vpn-1.sandia.gov
hackmd.sandia.gov
lapsmq15.webdev.sandia.gov
ebfrmi2.webdev.ca.sandia.gov
config1.ca.sandia.gov
nexus.web.sandia.gov
ebccmi1.webqual.sandia.gov
map.sandia.gov
supplierportal-dev.sandia.gov
tagnsdd.sandia.gov
fmfnr.webqual.sandia.gov
870dev.sandia.gov
nexus.web.sandia.gov
Certificate
The complete raw certificate details for *.x.sandia.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIYDCCB0igAwIBAgIQI13P0fRkJqepluA+riX0QjANBgkqhkiG9w0BAQsFADCB lTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMT0wOwYDVQQD EzRTZWN0aWdvIFJTQSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTZWN1cmUgU2Vy dmVyIENBMB4XDTIwMDEwNzAwMDAwMFoXDTIyMDEwNjIzNTk1OVowgd0xCzAJBgNV BAYTAlVTMQ4wDAYDVQQREwU4NzEyMzETMBEGA1UECBMKTmV3IE1leGljbzEUMBIG A1UEBxMLQWxidXF1ZXJxdWUxHDAaBgNVBAkTEzE1MTUgRXViYW5rIEJsdmQgU0Ux JTAjBgNVBAoTHFNhbmRpYSBOYXRpb25hbCBMYWJvcmF0b3JpZXMxNTAzBgNVBAsT LEFkdmVyc2FyaWFsIE1vZGVsaW5nIGFuZCBQZW5ldHJhdGlvbiBUZXN0aW5nMRcw FQYDVQQDDA4qLnguc2FuZGlhLmdvdjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC AgoCggIBALv6C1sjABZwEF+YSScdicDtOsBU3LU86o2pdIIlZUjLhxjXbXLJqyFK Ec2n+Q5ZQ2WUuJeTHdM/SKxB2W1C4ItXSUxpISq1t9Cv+XUgdvJWK5TElBBets3m ltKOhPd41Jt9uOMEn04opDCN6kWrVWGIsh0npIrOjIlNVEpYzdJ9GR8iF8tXVJl8 MygTHJ/38m60h7nz3XWIuzsbJY3kT7lHCyJ2LKeEzg+Wui6GnlKsz8Dp85Ha/ZX8 DjrG+nJFsrTL41gD1YCJx9t9YwRT6fVJV+BywOqAKypuXy02l3G6YONFFn50gBvt QYfGUmhHrT49knU71g0u6ojbaRe1PmxZfRmlIWBIyTZ+eTVL8jQcWkvEEPvGIb4X X1tOkc0ak0OzgfUEJlIVtWcCmVW/571bm87qRPGuqFk6Bk0MhpqX6vGE6kjEQGje DisU7nNmK/YCHI4qI/1UFQN3gutcEU2jh/59misrNMgZSrULtG+wG8MsyD06LkLK clE3u2QjsZdy6ION6X8barBaDvhrbbtz7vM/Yas35MW7iY4ZgpVTa7WRBp7ad7ls Zk0O75mg1nWNVm9hrCQGMG61aE7QDi1CVxMndbesL/ZAwycmyyCznSUQqRU0hx2O qp/GNzLNlyIdrMD7hLu5yscycwg08HjTHGusER8OQnlykPTJhFILAgMBAAGjggNg MIIDXDAfBgNVHSMEGDAWgBQX2dYlJ2f5McJJQ9kwNkSMbKlP6zAdBgNVHQ4EFgQU usPXSlIZY821g0yI9vbDgnmUmx0wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQC MAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEoGA1UdIARDMEEwNQYM KwYBBAGyMQECAQMEMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20v Q1BTMAgGBmeBDAECAjBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLnNlY3Rp Z28uY29tL1NlY3RpZ29SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2Vy dmVyQ0EuY3JsMIGKBggrBgEFBQcBAQR+MHwwVQYIKwYBBQUHMAKGSWh0dHA6Ly9j cnQuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25T ZWN1cmVTZXJ2ZXJDQS5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3Rp Z28uY29tMCcGA1UdEQQgMB6CDioueC5zYW5kaWEuZ292ggx4LnNhbmRpYS5nb3Yw ggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB3AEalVet1+pEgMLWiiWn0830RLEF0 vv1JuIWr8vxw/m1HAAABb4EZrukAAAQDAEgwRgIhAKc0vnufRQgeRZj+rOll1C6o kxXUrUAAq4H5qCipmyGUAiEA8yxtdEx7EM0i+Dpgdi8bFlwTdKZmqmX3VpD4LtgU XrUAdQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAW+BGa8CAAAE AwBGMEQCIBlPzNPaO45zcsrjqOefHICyYMoDUT4pV2es72OcRBFiAiAx6S3UwC24 yjhVdBF7nF9SdTtgCx+/KHu9ca8S3yVFYAB1ACJFRQdZVSRWlj+hL/H3bYbgIyZj rcBLf13Gg1xu4g8CAAABb4EZrtcAAAQDAEYwRAIgNYaMonqidGkDTYW7S+78D1Vj HYgHC4ZHRHAnP5utuuQCIAKlv8R8VC0kDAd9q8cZqU6NGqFJEfylgFpnjuj/E26v MA0GCSqGSIb3DQEBCwUAA4IBAQB2w/zDNekbuWGaXe1TtvDpFYjp/Bs7e/xUB4Tb S7y8pT5o60eTwP4+ODDaAQvJyi6zMeYMc3VMxPvj0Mziu9jhXI0axLaosih6QWC/ yTEyonh8r6p46LV+gLlcwWTIAPCDwaxRJ7VY5WneCWc35+sgg12JwAmjCya5fT6J HYSv+txHBaxNFaqMrCZCDCpsmot/yWTq7HSiXDby8KNkQVZKL+PA5hSYxwsiskNF ZDnNB4azSascwMWXKPmuIl8J3BW+gNt6FbzABR9J4vDWlqCIoX9sErV5oa/A1wA/ jBuVAzjJQ1oHOUliRGbUdZI5o3s4VtUPyUIE1uXRosLIJlR1 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu/oLWyMAFnAQX5hJJx2J wO06wFTctTzqjal0giVlSMuHGNdtcsmrIUoRzaf5DllDZZS4l5Md0z9IrEHZbULg i1dJTGkhKrW30K/5dSB28lYrlMSUEF62zeaW0o6E93jUm3244wSfTiikMI3qRatV YYiyHSekis6MiU1USljN0n0ZHyIXy1dUmXwzKBMcn/fybrSHufPddYi7OxsljeRP uUcLInYsp4TOD5a6LoaeUqzPwOnzkdr9lfwOOsb6ckWytMvjWAPVgInH231jBFPp 9UlX4HLA6oArKm5fLTaXcbpg40UWfnSAG+1Bh8ZSaEetPj2SdTvWDS7qiNtpF7U+ bFl9GaUhYEjJNn55NUvyNBxaS8QQ+8YhvhdfW06RzRqTQ7OB9QQmUhW1ZwKZVb/n vVubzupE8a6oWToGTQyGmpfq8YTqSMRAaN4OKxTuc2Yr9gIcjioj/VQVA3eC61wR TaOH/n2aKys0yBlKtQu0b7AbwyzIPTouQspyUTe7ZCOxl3Log43pfxtqsFoO+Gtt u3Pu8z9hqzfkxbuJjhmClVNrtZEGntp3uWxmTQ7vmaDWdY1Wb2GsJAYwbrVoTtAO LUJXEyd1t6wv9kDDJybLILOdJRCpFTSHHY6qn8Y3Ms2XIh2swPuEu7nKxzJzCDTw eNMca6wRHw5CeXKQ9MmEUgsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 47010078553425133419233367641192526914 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '87123' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Mexico' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albuquerque' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1515 Eubank Blvd SE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sandia National Laboratories' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Adversarial Modeling and Penetration Testing' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.x.sandia.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766878175045978344043669205099322806894844187882373330991358937076373175075660090961859700907018937213232436584587095862624496320963900698882336913798700338501339458084812896527835759268868704026039032657296550629563676083531251884277353337340358838513245056891432505043419755754145099650577325311003065956433194670303946948584885211628202014519481861290297453576974959957360883637433152584952062351185328995878407735919278649912322349461135615098921101769881668557512762919258059072123463929740678886106223680695081760937015616570826314926889038877320623478556343397456806345693722138347004932942624036842671011887861084525587318380312130644923444168583058343627971364091087808716525400594130095032173460263238008426675428887317597786649816241350620360399510719703640259294064935504175811892275681033616907898026561433372826420817872671761313623379738907173231053058452766409411216296713898009097560431632792199442098726476513053800804668868470543684425758588637701912150365993303591348491180429126445374484785700494178466479602591703859400780859764701348739337080644364882607051901430363931961334974043116937984701575456039287097812986387978441614515937346293303305736249527278202783367751864335962628122996514471685122655544168971 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bac3d74a521963cdb5834c88f6f6c38279949b1d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.x.sandia.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x.sandia.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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