www.diageo.com

Issued by DigiCert High Assurance CA-3

About this certificate


This digital certificate with serial number 0e:66:f7:fd:53:83:4d:5e:31:4f:01:91:73:7a:1a:d4 was issued on by DigiCert Inc .

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Diageo Plc

Organization: Diageo Plc
State / Province: London
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
State / Province: London
Locality: London
Country: GB

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:66:f7:fd:53:83:4d:5e:31:4f:01:91:73:7a:1a:d4
Serial Number (int): 19143836046302583167542876979852876500
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 60:b3:2d:64:88:8e:b8:26:53:f7:70:c3:da:a1:7f:e0:c1:02:62:f1
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): 92:e8:0d:d6:63:a3:25:f3:f6:29:9e:81:a1:22:f2:7e:25:8a:25:9b
Fingerprint (sha256): d2:5a:56:a8:85:8e:4c:49:90:36:4b:1e:c6:b0:2d:8a:d8:3f:d1:e0:f5:de:17:ca:c5:c1:3c:15:59:e5:8f:1a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-g27.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g27.crl

Check the revocation status for the current certificate on www.diageo.com
30
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.diageo.com
neostaging.summerjug.co.uk
www.summerjug.co.uk
app.youtube.smirnoffeurope.com
neostaging.app.youtube.smirnoffeurope.com
neostaging.keepwalkingclub.com
www.keepwalkingclub.com
neostaging.summerdrinks.co.uk
www.summerdrinks.co.uk
neostaging.smirnoff1818.mobi
neostaging.tusker.mobi
www.arthurguinnessprojects.com
neostaging.arthurguinnessprojects.com
neostaging.diageo-flavourlab.com
neostaging.todaystheday.ie
www.todaystheday.ie
www.diageoagegate.com
neostaging.diageoagegate.com
www.diageo-flavourlab.com
www.tusker.mobi
www.smirnoff1818.mobi
neocdn.todaystheday.ie
neostaging.diageodata.com
www.diageodata.com
m.guinnessglass.co.uk
neostaging.m.guinnessglass.co.uk
neostaging.guinnesssignature.com
www.guinnesssignature.com
www.ciroc.com
neostaging.ciroc.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIIKzCCBxOgAwIBAgIQDmb3/VODTV4xTwGRc3oa1DANBgkqhkiG9w0BAQUFADBm MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSUwIwYDVQQDExxEaWdpQ2VydCBIaWdoIEFzc3VyYW5j ZSBDQS0zMB4XDTEzMDQxNzAwMDAwMFoXDTE2MDQyMTEyMDAwMFowXTELMAkGA1UE BhMCR0IxDzANBgNVBAgTBkxvbmRvbjEPMA0GA1UEBxMGTG9uZG9uMRMwEQYDVQQK EwpEaWFnZW8gUGxjMRcwFQYDVQQDEw53d3cuZGlhZ2VvLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBANOG+z3eDd9okDMogBoaoxyFIQjwcvv5swPX xNXZutJvQyLjkRLdx7/5Bvu4wAt2rZZYk6982T2oLV0vMKzleRgKAKKNhYarpc0c aIzwdvRIWOdW2EzCkgvPz4hrheCSPwiylTcu35FRyUF9xBfwT1hpx+e4INRLVDvy bnrU0zOw1BxBiE0PrnhXQz/90GfI0waUkib68RTKgybMMXg+9yE90WzoN0Q2+gme fek879P+bMv+fxqO4a/x1lmlh7vvuYnY0ezpM5vh+2nDydl6FaZWUxS8k0Fj6qjI fevDYoNYgJtC8wlix4evmrOnMdGMuo2OMRz2kH7hpD62mLboEQMCAwEAAaOCBNww ggTYMB8GA1UdIwQYMBaAFFDqc4nbKfsQj57lASDU3nmZSIP3MB0GA1UdDgQWBBRg sy1kiI64JlP3cMPaoX/gwQJi8TCCAzMGA1UdEQSCAyowggMmgg53d3cuZGlhZ2Vv LmNvbYIabmVvc3RhZ2luZy5zdW1tZXJqdWcuY28udWuCE3d3dy5zdW1tZXJqdWcu Y28udWuCHmFwcC55b3V0dWJlLnNtaXJub2ZmZXVyb3BlLmNvbYIpbmVvc3RhZ2lu Zy5hcHAueW91dHViZS5zbWlybm9mZmV1cm9wZS5jb22CHm5lb3N0YWdpbmcua2Vl cHdhbGtpbmdjbHViLmNvbYIXd3d3LmtlZXB3YWxraW5nY2x1Yi5jb22CHW5lb3N0 YWdpbmcuc3VtbWVyZHJpbmtzLmNvLnVrghZ3d3cuc3VtbWVyZHJpbmtzLmNvLnVr ghxuZW9zdGFnaW5nLnNtaXJub2ZmMTgxOC5tb2JpghZuZW9zdGFnaW5nLnR1c2tl ci5tb2Jpgh53d3cuYXJ0aHVyZ3Vpbm5lc3Nwcm9qZWN0cy5jb22CJW5lb3N0YWdp bmcuYXJ0aHVyZ3Vpbm5lc3Nwcm9qZWN0cy5jb22CIG5lb3N0YWdpbmcuZGlhZ2Vv LWZsYXZvdXJsYWIuY29tghpuZW9zdGFnaW5nLnRvZGF5c3RoZWRheS5pZYITd3d3 LnRvZGF5c3RoZWRheS5pZYIVd3d3LmRpYWdlb2FnZWdhdGUuY29tghxuZW9zdGFn aW5nLmRpYWdlb2FnZWdhdGUuY29tghl3d3cuZGlhZ2VvLWZsYXZvdXJsYWIuY29t gg93d3cudHVza2VyLm1vYmmCFXd3dy5zbWlybm9mZjE4MTgubW9iaYIWbmVvY2Ru LnRvZGF5c3RoZWRheS5pZYIZbmVvc3RhZ2luZy5kaWFnZW9kYXRhLmNvbYISd3d3 LmRpYWdlb2RhdGEuY29tghVtLmd1aW5uZXNzZ2xhc3MuY28udWuCIG5lb3N0YWdp bmcubS5ndWlubmVzc2dsYXNzLmNvLnVrgiBuZW9zdGFnaW5nLmd1aW5uZXNzc2ln bmF0dXJlLmNvbYIZd3d3Lmd1aW5uZXNzc2lnbmF0dXJlLmNvbYINd3d3LmNpcm9j LmNvbYIUbmVvc3RhZ2luZy5jaXJvYy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBhBgNVHR8EWjBYMCqgKKAmhiRodHRw Oi8vY3JsMy5kaWdpY2VydC5jb20vY2EzLWcyNy5jcmwwKqAooCaGJGh0dHA6Ly9j cmw0LmRpZ2ljZXJ0LmNvbS9jYTMtZzI3LmNybDBCBgNVHSAEOzA5MDcGCWCGSAGG /WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BT MHsGCCsGAQUFBwEBBG8wbTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNl cnQuY29tMEUGCCsGAQUFBzAChjlodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20v RGlnaUNlcnRIaWdoQXNzdXJhbmNlQ0EtMy5jcnQwDAYDVR0TAQH/BAIwADANBgkq hkiG9w0BAQUFAAOCAQEAAiPY2/mIJiH8UuRItzThVyFT8JNPWCikD2MFwYXEM2hz dE/jPRqKjb7TTaNwx0DAEZcGUI/FAlFvyAa441tJ8geMTml6MYfjXXMx0UGQAmuN GJXLHQ7FMvv7y38CaQGXcuHNO2Me5578Nu6vZLIr53oVISLStYQ/AlQFuQ//FTNx 6fGOhqOzG5H5fI6w0MI62g6Ro8NDe5OPVRKGxOAc/JrOmtnNBwvq8prU9tGu4j9O NNmiMejCcrAKjiUilj7oKzXWppgPCsCuuczhTT2F+SeSipZQge8R30oGkIZoBGnj efp7uwGG5TXNtUxZiQhPQkcOP0BIaQ7XRgL5xxglSA== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04b7Pd4N32iQMyiAGhqj HIUhCPBy+/mzA9fE1dm60m9DIuOREt3Hv/kG+7jAC3atlliTr3zZPagtXS8wrOV5 GAoAoo2FhqulzRxojPB29EhY51bYTMKSC8/PiGuF4JI/CLKVNy7fkVHJQX3EF/BP WGnH57gg1EtUO/JuetTTM7DUHEGITQ+ueFdDP/3QZ8jTBpSSJvrxFMqDJswxeD73 IT3RbOg3RDb6CZ596Tzv0/5sy/5/Go7hr/HWWaWHu++5idjR7Okzm+H7acPJ2XoV plZTFLyTQWPqqMh968Nig1iAm0LzCWLHh6+as6cx0Yy6jY4xHPaQfuGkPraYtugR AwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19143836046302583167542876979852876500 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-21 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Diageo Plc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.diageo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26702844163268876782978950122111262050082454388033019658085807765169409028085356979511750256455309838439333028290281235735434307840523157936189321296260337662947057399316729827914478713513954435929030359625275160815369617387843698229163660169156073333370424938539654269392863352366475411902385864544873310502462734856145976424117713997223240567909708601595835407264377898865693830298808646500239288523257972821574826492176517502441646138284250638090728667629258946152950192666244253408808632983918086787161845049034558620452550364281595221272186154046634688890467983746809232792529769612279070604732869117311120314627 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 60b32d64888eb82653f770c3daa17fe0c10262f1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (810 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diageo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neostaging.summerjug.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summerjug.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.youtube.smirnoffeurope.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neostaging.app.youtube.smirnoffeurope.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neostaging.keepwalkingclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepwalkingclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neostaging.summerdrinks.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summerdrinks.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neostaging.smirnoff1818.mobi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neostaging.tusker.mobi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arthurguinnessprojects.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neostaging.arthurguinnessprojects.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neostaging.diageo-flavourlab.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neostaging.todaystheday.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.todaystheday.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diageoagegate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neostaging.diageoagegate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diageo-flavourlab.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tusker.mobi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smirnoff1818.mobi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neocdn.todaystheday.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neostaging.diageodata.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diageodata.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.guinnessglass.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neostaging.m.guinnessglass.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neostaging.guinnesssignature.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guinnesssignature.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ciroc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neostaging.ciroc.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g27.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g27.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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