mail.christianleadershipalliance.org

Issued by DigiCert High Assurance CA-3

About this certificate


This digital certificate with serial number 0a:72:0c:d6:77:21:d9:e0:96:f8:78:87:97:19:a8:6c was issued on by DigiCert Inc .

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Christian Leadership Alliance

Organization: Christian Leadership Alliance
Organization unit: IT
State / Province: California
Locality: San Clemente
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
State / Province: California
Locality: San Clemente
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:72:0c:d6:77:21:d9:e0:96:f8:78:87:97:19:a8:6c
Serial Number (int): 13884462180333790568567258158384916588
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c6:49:79:02:81:49:1f:04:25:fc:df:82:90:bb:94:e9:1a:ae:79:c5
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): 06:a6:b8:46:23:01:8d:24:5c:83:62:e4:dd:0e:1f:78:52:02:ea:48
Fingerprint (sha256): ba:22:9d:84:53:46:7e:78:9e:2c:07:2c:e2:e3:57:1d:0d:5b:3f:5e:7b:64:17:6f:59:9f:49:d0:96:2a:31:eb

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-g28.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g28.crl

Check the revocation status for the current certificate on mail.christianleadershipalliance.org
3
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.christianleadershipalliance.org
autodiscover.christianleadershipalliance.org
oc.christianleadershipalliance.org

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGuTCCBaGgAwIBAgIQCnIM1nch2eCW+HiHlxmobDANBgkqhkiG9w0BAQUFADBm MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSUwIwYDVQQDExxEaWdpQ2VydCBIaWdoIEFzc3VyYW5j ZSBDQS0zMB4XDTExMTAyODAwMDAwMFoXDTE0MTEwNTEyMDAwMFowgZ0xCzAJBgNV BAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRUwEwYDVQQHEwxTYW4gQ2xlbWVu dGUxJjAkBgNVBAoTHUNocmlzdGlhbiBMZWFkZXJzaGlwIEFsbGlhbmNlMQswCQYD VQQLEwJJVDEtMCsGA1UEAxMkbWFpbC5jaHJpc3RpYW5sZWFkZXJzaGlwYWxsaWFu Y2Uub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0d+ovw4g5Brw BYWXUBZe1TxqVH647+yq3cibFem7EHzatjD8A1zXia4a0ivKZ5BnDP7XpK0c1igD KLMJfd82JXV4DhmNWni1gA3YnRPQ/Ya5GN1p3ZRol0uGaGR0kCK8EEYZLodree66 rWakRax1RLYwNhiz04Jg4Cb8aimnDdBRvpDkQWhusP18O4/8b9ncb4F6JckBkLI4 jcpyWLpA6cyz0X5P/YtbR6VPmhINE+ux9h3mVDFSXFDT70sP2B7+GzCdf8bI212F n/tBjEnCB1C8Ue0Y5vULVe3SwjQSCiR+KxOykCM5WsiE3T/gpdCLNPrQNvyDPs0W XJTmtN+LMNYsXW9wwyVddr4gBqQZ98SqBVPsCtnuA8GLbbuhscKbYERE/hLYxo9w M4vzDBiILTKnOXVq9i2S7jV+olO19j8U3Rb7lVhUlpxHMa/kYViiRD9Fj5Ovc2vV YsXXQI/svYuV/4aAoEy5XpLwTK06ykWJOKRtotOkSfmIN2+s5m2u5VSJYg1T4aDU s++aEwv3svyon2UOAa1n/KZVX72u849qjGo/7c/3Y2rT3W3KXot9M8x56L3DO6wz eQSQK7jZLDsUTBVaXHWssi2MSM07nrENRjCgh3Q8V5enBnyT28qIwy6hnIbip8Sj yFw4o0jJjEnyDYi8Y2d/qjc5vB/AEJMCAwEAAaOCAikwggIlMB8GA1UdIwQYMBaA FFDqc4nbKfsQj57lASDU3nmZSIP3MB0GA1UdDgQWBBTGSXkCgUkfBCX834KQu5Tp Gq55xTCBgQYDVR0RBHoweIIkbWFpbC5jaHJpc3RpYW5sZWFkZXJzaGlwYWxsaWFu Y2Uub3JngixhdXRvZGlzY292ZXIuY2hyaXN0aWFubGVhZGVyc2hpcGFsbGlhbmNl Lm9yZ4Iib2MuY2hyaXN0aWFubGVhZGVyc2hpcGFsbGlhbmNlLm9yZzAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGEGA1UdHwRa MFgwKqAooCaGJGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9jYTMtZzI4LmNybDAq oCigJoYkaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL2NhMy1nMjguY3JsMEIGA1Ud IAQ7MDkwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRp Z2ljZXJ0LmNvbS9DUFMwewYIKwYBBQUHAQEEbzBtMCQGCCsGAQUFBzABhhhodHRw Oi8vb2NzcC5kaWdpY2VydC5jb20wRQYIKwYBBQUHMAKGOWh0dHA6Ly9jYWNlcnRz LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEhpZ2hBc3N1cmFuY2VDQS0zLmNydDAMBgNV HRMBAf8EAjAAMA0GCSqGSIb3DQEBBQUAA4IBAQCEKewA1uRwf6KCLl2upKzXYz+b IZ6kJ8oQZJfBESpZpfrHqLDVy2m4aliZuBvvyFUqlVpF2cLMNlbD0PprIZA7RE3S HoPiIt8CdGjAQU9zJ2/qO+puAQEzl1OPn8G4iPG2zQHcJeNMO+9DpHj1v5Nyyqye 9HbP/l0Lbf0PNOy5Qb1OrnzFH2Bxdopgw/ZGCsfp9TK6OaXdv8WPZ2MxYHeWZquV TEGoSvg1ZJ7i/K4W/CmcP+J8ODgCkey84H5Ku5vgAXBgMjfgO3tXufHRxXMYsflE x2OCjZOfMyNzQ0nQ8+Zfd+SKEO1LUn0tg0d+A2fg1aLG7J1uMBszEV9dyaV1 -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0d+ovw4g5BrwBYWXUBZe 1TxqVH647+yq3cibFem7EHzatjD8A1zXia4a0ivKZ5BnDP7XpK0c1igDKLMJfd82 JXV4DhmNWni1gA3YnRPQ/Ya5GN1p3ZRol0uGaGR0kCK8EEYZLodree66rWakRax1 RLYwNhiz04Jg4Cb8aimnDdBRvpDkQWhusP18O4/8b9ncb4F6JckBkLI4jcpyWLpA 6cyz0X5P/YtbR6VPmhINE+ux9h3mVDFSXFDT70sP2B7+GzCdf8bI212Fn/tBjEnC B1C8Ue0Y5vULVe3SwjQSCiR+KxOykCM5WsiE3T/gpdCLNPrQNvyDPs0WXJTmtN+L MNYsXW9wwyVddr4gBqQZ98SqBVPsCtnuA8GLbbuhscKbYERE/hLYxo9wM4vzDBiI LTKnOXVq9i2S7jV+olO19j8U3Rb7lVhUlpxHMa/kYViiRD9Fj5Ovc2vVYsXXQI/s vYuV/4aAoEy5XpLwTK06ykWJOKRtotOkSfmIN2+s5m2u5VSJYg1T4aDUs++aEwv3 svyon2UOAa1n/KZVX72u849qjGo/7c/3Y2rT3W3KXot9M8x56L3DO6wzeQSQK7jZ LDsUTBVaXHWssi2MSM07nrENRjCgh3Q8V5enBnyT28qIwy6hnIbip8SjyFw4o0jJ jEnyDYi8Y2d/qjc5vB/AEJMCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13884462180333790568567258158384916588 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-10-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-05 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Clemente' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Christian Leadership Alliance' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.christianleadershipalliance.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856209867196110800959719548148248479726863030321761594320771408305911599721224136803240090982636951149684716692361122340373470691400723236472562365834984539107852724777846804208997839866870156619363033564391863295393138613251156772598544385176396977846436877948739316009164985568784942794690676819495261992967032137455832406787571394477884170653564778152727910601066793237054503985661216772815789653046020721805789100248484840856044294527637086616302847527844997292175722165295488381146532754956411095174067405267049467835760740990988369963429803984655644988710917482863924788634819561279087922053881884069303016961395865471666693523241578711659776926018457966666539333567887579706008404393405911806166962001312851151930052460346039182770426994738519932381650690972007340504757020244981830522299775281410057464023065330513419878362514154862445975389326200447766493278049650349983699936490561878178633916567822169994895018591075257533251278567335788477531110720330882800941802251421665867164115284247170013926793991100930390229256918862833442540766613476264193488607533329668146710051334021716672743399899437612243376058905154171556724185778647894821291124220954667391900983010648259898512409100852101097067692775011972016394601500819 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c649790281491f0425fcdf8290bb94e91aae79c5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.christianleadershipalliance.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.christianleadershipalliance.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc.christianleadershipalliance.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g28.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g28.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008429ec00d6e4707fa2822e5daea4acd7633f9b219ea427ca106497c1112a59a5fac7a8b0d5cb69b86a5899b81befc8552a955a45d9c2cc3656c3d0fa6b21903b444dd21e83e222df027468c0414f73276fea3bea6e01013397538f9fc1b888f1b6cd01dc25e34c3bef43a478f5bf9372caac9ef476cffe5d0b6dfd0f34ecb941bd4eae7cc51f6071768a60c3f6460ac7e9f532ba39a5ddbfc58f67633160779666ab954c41a84af835649ee2fcae16fc299c3fe27c38380291ecbce07e4abb9be00170603237e03b7b57b9f1d1c57318b1f944c763828d939f3323734349d0f3e65f77e48a10ed4b527d2d83477e0367e0d5a2c6ec9d6e301b33115f5dc9a575