uc11.janraincapture.com
- Janrain Inc -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 01:8a:ff:fe:ed:3e:d2:45:cf:55:01:54:33:b2:8b:bb was issued on by DigiCert Inc.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Janrain Inc
Organization:
Janrain Inc
Organization unit: Operations
Organization unit: Operations
State / Province:
Oregon
Locality: Portland
Country: US
Locality: Portland
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:8a:ff:fe:ed:3e:d2:45:cf:55:01:54:33:b2:8b:bbSerial Number (int): 2050957174088825597942351671040576443
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: b9:e7:9a:e1:4b:74:a5:39:95:86:b3:a5:93:95:c4:77:31:5b:e7:46
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 35:9a:c2:84:89:24:16:e8:e7:2e:63:c4:5a:b5:3c:65:e9:39:cf:64
Fingerprint (sha256): 4f:9c:c3:31:17:fb:ff:fe:1f:f2:87:3a:9b:cf:c4:fd:41:14:a1:a3:d1:67:22:bc:06:73:73:c8:43:32:bb:f9
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate uc11.janraincapture.com
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for uc11.janraincapture.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
uc11.janraincapture.com
capture.canada.com
signup.fox.com
signup.foxsports.com
signup.fxnetworks.com
users.cmgdigital.com
users.highpointmarket.org
users.sourceinterlinkdigital.com
users.wholefoodsmarket.com
capture.canada.com
signup.fox.com
signup.foxsports.com
signup.fxnetworks.com
users.cmgdigital.com
users.highpointmarket.org
users.sourceinterlinkdigital.com
users.wholefoodsmarket.com
Other certificates including the domain name janraincapture.com
(limited to 100 certificates)
account.apple-next.com
janrain.com
*.janrain.com
janrain.biz
janrain.com
*.janraincapture.com
*.janraincapture.com
janrain.com
*.janraincapture.com
*.cc.janraincapture.com
*.janraincapture.com
rogers.client.janrain.com
*.janraincapture.com
oreilly.janrain.com
*.janraincapture.com
account.apple-next.com
slate.client.janrain.com
*.janraincapture.com
accounts.oreilly.com
*.qa.janraincapture.com
*.janraincapture.com
janrain.biz
*.multi.stg.or.janrain.com
*.janraincapture.com
*.multi.stg.or.janrain.com
uc11.janraincapture.com
*.janraincapture.com
uc11.janraincapture.com
janrain.com
*.janraincapture.com
accounts.lixil.co.jp
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
boehringer-ingelheim-dev.eu-dev.janraincapture.com
*.janraincapture.com
*.ru.janraincapture.com
*.qa.janraincapture.com
*.ru-proxy.janraincapture.com
*.testing.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
accounts.lixil.co.jp
oreilly.janrain.com
*.janraincapture.com
*.dev.janraincapture.com
*.eval.janraincapture.com
rogers.client.janrain.com
*.cn.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
janrain.biz
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
slate.client.janrain.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
accounts.oreilly.com
uc11.janraincapture.com
*.ru.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.eu.janraincapture.com
*.janraincapture.com
rogers.client.janrain.com
*.janraincapture.com
users.highpointmarket.org
oreilly.janrain.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
accounts.lixil.co.jp
*.sg.janraincapture.com
*.janraincapture.com
*.janraincapture.com
boehringer-ingelheim-dev.eu-dev.janraincapture.com
*.janraincapture.com
janrain.com
*.dev.janraincapture.com
*.qa.janraincapture.com
authenticate.globe.com.ph
janrain.com
*.janraincapture.com
authenticate.globe.com.ph
*.janraincapture.com
*.janraincapture.com
oreilly.janrain.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
oreilly.janrain.com
boehringer-ingelheim-dev.eu-dev.janraincapture.com
janrain.com
*.janrain.com
janrain.biz
janrain.com
*.janraincapture.com
*.janraincapture.com
janrain.com
*.janraincapture.com
*.cc.janraincapture.com
*.janraincapture.com
rogers.client.janrain.com
*.janraincapture.com
oreilly.janrain.com
*.janraincapture.com
account.apple-next.com
slate.client.janrain.com
*.janraincapture.com
accounts.oreilly.com
*.qa.janraincapture.com
*.janraincapture.com
janrain.biz
*.multi.stg.or.janrain.com
*.janraincapture.com
*.multi.stg.or.janrain.com
uc11.janraincapture.com
*.janraincapture.com
uc11.janraincapture.com
janrain.com
*.janraincapture.com
accounts.lixil.co.jp
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
boehringer-ingelheim-dev.eu-dev.janraincapture.com
*.janraincapture.com
*.ru.janraincapture.com
*.qa.janraincapture.com
*.ru-proxy.janraincapture.com
*.testing.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
accounts.lixil.co.jp
oreilly.janrain.com
*.janraincapture.com
*.dev.janraincapture.com
*.eval.janraincapture.com
rogers.client.janrain.com
*.cn.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
janrain.biz
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
slate.client.janrain.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
accounts.oreilly.com
uc11.janraincapture.com
*.ru.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
*.eu.janraincapture.com
*.janraincapture.com
rogers.client.janrain.com
*.janraincapture.com
users.highpointmarket.org
oreilly.janrain.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
accounts.lixil.co.jp
*.sg.janraincapture.com
*.janraincapture.com
*.janraincapture.com
boehringer-ingelheim-dev.eu-dev.janraincapture.com
*.janraincapture.com
janrain.com
*.dev.janraincapture.com
*.qa.janraincapture.com
authenticate.globe.com.ph
janrain.com
*.janraincapture.com
authenticate.globe.com.ph
*.janraincapture.com
*.janraincapture.com
oreilly.janrain.com
*.janraincapture.com
*.janraincapture.com
*.janraincapture.com
oreilly.janrain.com
boehringer-ingelheim-dev.eu-dev.janraincapture.com
Certificate
The complete raw certificate details for uc11.janraincapture.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIQAYr//u0+0kXPVQFUM7KLuzANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xODA5MTIwMDAwMDBaFw0xOTExMTIxMjAwMDBa MH4xCzAJBgNVBAYTAlVTMQ8wDQYDVQQIEwZPcmVnb24xETAPBgNVBAcTCFBvcnRs YW5kMRQwEgYDVQQKEwtKYW5yYWluIEluYzETMBEGA1UECxMKT3BlcmF0aW9uczEg MB4GA1UEAxMXdWMxMS5qYW5yYWluY2FwdHVyZS5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDf37TyHlmYwEnKdLTrqwp4ND6g71Zk6P2HMBUIdHsd ZckGt30RD0NG54CmonAZiPZtRQHrEnE2X/Z1S+Om1g2zcFnBwoGI78QjHG7tzG0W voFaRpFGXKe7Dw1qkIo5brtVVASOVz18zi6yWl2iLLLsYGtph67SOIn0Wt37P7qY +ggCQk6reaXFIw3YsBmQhhLFjmxx9VAnLNBZuD+ndRPDO9GUTYu1qqlclwJHm9vv OD+IB1fsMD+uTqeEmzfLwmE7qnpdJR+Z852Qwk1qWQOu/t+K70QuiYdgf8c96ptw q3ZVrOZ04rUkALijeJ1FKOnVB7gR3ZJvyCY9JYqwQtg/AgMBAAGjggLIMIICxDAf BgNVHSMEGDAWgBRRaP+QrwIHdTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQUueea4Ut0 pTmVhrOlk5XEdzFb50YwgeQGA1UdEQSB3DCB2YIXdWMxMS5qYW5yYWluY2FwdHVy ZS5jb22CEmNhcHR1cmUuY2FuYWRhLmNvbYIOc2lnbnVwLmZveC5jb22CFHNpZ251 cC5mb3hzcG9ydHMuY29tghVzaWdudXAuZnhuZXR3b3Jrcy5jb22CFHVzZXJzLmNt Z2RpZ2l0YWwuY29tghl1c2Vycy5oaWdocG9pbnRtYXJrZXQub3JngiB1c2Vycy5z b3VyY2VpbnRlcmxpbmtkaWdpdGFsLmNvbYIadXNlcnMud2hvbGVmb29kc21hcmtl dC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20v c2hhMi1oYS1zZXJ2ZXItZzYuY3JsMDSgMqAwhi5odHRwOi8vY3JsNC5kaWdpY2Vy dC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9 bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMw CAYGZ4EMAQICMIGDBggrBgEFBQcBAQR3MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v Y3NwLmRpZ2ljZXJ0LmNvbTBNBggrBgEFBQcwAoZBaHR0cDovL2NhY2VydHMuZGln aWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkhpZ2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQw DAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsF AAOCAQEAFuUvq+sT+RkrQdk2sNZGbmt3dgGbMgq6qTtC1+hThINIX95tY/jUoA8O ted5aI86ckzJH8PzpNXdNa02oPbDvyRxGwhVc12nKBwsVZ495D3OAiQYzxk1gpoH 4nSFSCP5hrK8SgH3dziq394U7l15ixVvY7/mn6TVsZVMkZmpR2Es7arcfUmEXglH Ftg664+APEALUV2e8Vc6r3/vYJEOKe/77mSLjf0RJ3EWabKBXo1g8hukWQMNjg5+ lKUeMTu4lFwLffgUpOX/VNvxUDE7ro1OTU+/OBGIN+YeuvT0yfzk7xEBgS1Q8ObB 52x3+2taM9NxB5ZCyhErAFBcy+rf3g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39+08h5ZmMBJynS066sK eDQ+oO9WZOj9hzAVCHR7HWXJBrd9EQ9DRueApqJwGYj2bUUB6xJxNl/2dUvjptYN s3BZwcKBiO/EIxxu7cxtFr6BWkaRRlynuw8NapCKOW67VVQEjlc9fM4uslpdoiyy 7GBraYeu0jiJ9Frd+z+6mPoIAkJOq3mlxSMN2LAZkIYSxY5scfVQJyzQWbg/p3UT wzvRlE2LtaqpXJcCR5vb7zg/iAdX7DA/rk6nhJs3y8JhO6p6XSUfmfOdkMJNalkD rv7fiu9ELomHYH/HPeqbcKt2VazmdOK1JAC4o3idRSjp1Qe4Ed2Sb8gmPSWKsELY PwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2050957174088825597942351671040576443 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-12 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Janrain Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Operations' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uc11.janraincapture.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28261455951551943413335556943641688799493380178308939051732468427601961986385011436248639587519749607008955514183876888123686812638550518433353674737896014437270290033798858535993999717191393356218311019794381080828161844589513709880202399913183410994970222675400694383077612014263992130975616942413491736374072809067748750026372738914159320784453196424527790129358474899302325897054961616590192944604186243443837872826145943098483053906129567182126581474243986691340369187821775399932167723677497119667109057980891897965279868323023509959151866948484546494445277914051274339404896005227706898385702802530112068835391 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b9e79ae14b74a5399586b3a59395c477315be746 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (220 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uc11.janraincapture.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capture.canada.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.fox.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.foxsports.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.fxnetworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'users.cmgdigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'users.highpointmarket.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'users.sourceinterlinkdigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'users.wholefoodsmarket.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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