*.avon.com.ar
- Avon Products Inc -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 06:2c:51:26:60:7b:f5:b8:04:ce:1b:e7:92:45:2c:af was issued on by DigiCert Inc.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Avon Products Inc
Organization:
Avon Products Inc
State / Province:
New York
Locality: Suffern
Country: US
Locality: Suffern
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:2c:51:26:60:7b:f5:b8:04:ce:1b:e7:92:45:2c:afSerial Number (int): 8205474952193518173424535996654234799
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 2b:ba:3c:f6:e7:45:f4:21:dc:2a:dc:52:ff:32:30:7d:e0:99:4f:45
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): b0:eb:94:94:d6:fa:59:0b:d3:05:5e:eb:07:84:30:6d:94:5e:99:ce
Fingerprint (sha256): 51:64:8c:48:b0:ee:db:bf:88:32:9f:e1:7b:94:6c:53:09:56:de:cf:d7:b0:33:a3:ac:c2:40:16:b1:8e:cd:d8
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate *.avon.com.ar
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.avon.com.ar
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.avon.com.ar
*.venderavon.com.ar
venderavon.com.ar
avon.com.ar
www.venderavon.com.ar
api.venderavon.com.ar
postulantes.avon.com.ar
*.venderavon.com.ar
venderavon.com.ar
avon.com.ar
www.venderavon.com.ar
api.venderavon.com.ar
postulantes.avon.com.ar
Other certificates including the domain name avon.com.ar
(limited to 100 certificates)
*.avon.com.ar
static1.br.avon.com
static1.br.avon.com
drupal.avon.com.ar
static1.br.avon.com
static1.br.avon.com
drupal.avon.com.ar
static1.br.avon.com
static1.br.avon.com
*.avon.com.ar
static1.br.avon.com
*.avon.com.ar
static1.br.avon.com
static1.br.avon.com
static1.br.avon.com
*.avon.com.ar
static1.br.avon.com
qap-o.avon.com.ar
*.avon.com.ar
static1.br.avon.com
static1.br.avon.com
qap.avon.com.ar
static1.br.avon.com
static1.br.avon.com
static1.br.avon.com
static1.br.avon.com
static1.br.avon.com
static1.br.avon.com
qaf.office.avon.com.ar
*.avon.com.ar
mioficina.avon.com.ar
static1.br.avon.com
qap.avon.com.ar
*.avon.com.ar
static1.br.avon.com
static1.br.avon.com
qap-o.avon.com.ar
qap-o.avon.com.ar
static1.br.avon.com
qap.avon.com.ar
seguimientodeentrega.avon.com.ar
static1.br.avon.com
static1.br.avon.com
*.avon.com.ar
static1.br.avon.com
static1.br.avon.com
qap.office.avon.com.ar
avon.com
qap.avon.com.ar
qap.avon.com.ar
avon.com
static1.br.avon.com
natura.com
static1.br.avon.com
static1.br.avon.com
drupal.avon.com.ar
static1.br.avon.com
static1.br.avon.com
drupal.avon.com.ar
static1.br.avon.com
static1.br.avon.com
*.avon.com.ar
static1.br.avon.com
*.avon.com.ar
static1.br.avon.com
static1.br.avon.com
static1.br.avon.com
*.avon.com.ar
static1.br.avon.com
qap-o.avon.com.ar
*.avon.com.ar
static1.br.avon.com
static1.br.avon.com
qap.avon.com.ar
static1.br.avon.com
static1.br.avon.com
static1.br.avon.com
static1.br.avon.com
static1.br.avon.com
static1.br.avon.com
qaf.office.avon.com.ar
*.avon.com.ar
mioficina.avon.com.ar
static1.br.avon.com
qap.avon.com.ar
*.avon.com.ar
static1.br.avon.com
static1.br.avon.com
qap-o.avon.com.ar
qap-o.avon.com.ar
static1.br.avon.com
qap.avon.com.ar
seguimientodeentrega.avon.com.ar
static1.br.avon.com
static1.br.avon.com
*.avon.com.ar
static1.br.avon.com
static1.br.avon.com
qap.office.avon.com.ar
avon.com
qap.avon.com.ar
qap.avon.com.ar
avon.com
static1.br.avon.com
natura.com
Certificate
The complete raw certificate details for *.avon.com.ar in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHLTCCBhWgAwIBAgIQBixRJmB79bgEzhvnkkUsrzANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA3MTIwMDAwMDBa Fw0yMzA3MjAyMzU5NTlaMGYxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9y azEQMA4GA1UEBxMHU3VmZmVybjEaMBgGA1UEChMRQXZvbiBQcm9kdWN0cyBJbmMx FjAUBgNVBAMMDSouYXZvbi5jb20uYXIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDYfri0P4vbBW5H5UK+FfRRMj7CgO4OIYuyk7EjlyGVis5Prlelwc9Z cJcItxmvGJDK6YZhrktI3JQSYvYkrt1KI/37o0Y7nQy5voyW8ndRJfvZD0XWwRH0 GjlSPoCaCnDVVL0PzJHd4umH7qPAsgDBMd3sB6/cJn6jDRNMWCaPEQcof40LdTn1 WpfvzcGSmlg+Vlf3awV0+guVK0f+jBTo79IQ5XVZ9ddWMTuNOPzlPayRvr4VVqiB nIkGa+6zcBLmhyQTOy1eWqsm0jVG4oZmlhczoJEs210F0EHaSf0/Ey5XobBWOXhx QLTFwR80ssUOI5ZpxZ6pELLA9YuGM3qZAgMBAAGjggPsMIID6DAfBgNVHSMEGDAW gBS3a6LqqKqEjHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQUK7o89udF9CHcKtxS/zIw feCZT0UwgZYGA1UdEQSBjjCBi4INKi5hdm9uLmNvbS5hcoITKi52ZW5kZXJhdm9u LmNvbS5hcoIRdmVuZGVyYXZvbi5jb20uYXKCC2F2b24uY29tLmFyghV3d3cudmVu ZGVyYXZvbi5jb20uYXKCFWFwaS52ZW5kZXJhdm9uLmNvbS5hcoIXcG9zdHVsYW50 ZXMuYXZvbi5jb20uYXIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5k aWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECg PqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEy NTYyMDIwQ0ExLTQuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUH AgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB/BggrBgEFBQcBAQRzMHEw JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcw AoY9aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hB MjU2MjAyMENBMS0xLmNydDAJBgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4E ggFqAWgAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYHxoEOJ AAAEAwBHMEUCIQCXObmNN2UwtIMdydXLWBpGRQcCk4rtYV/3vszvCXeEDQIgVwYU hs4zWTBRCN4nk1H1uCxqzicddnSSs+Gl2JJdb0IAdQA1zxkbv7FsV78PrUxtQsu7 ticgJlHqP+Eq76gDwzvWTAAAAYHxoEORAAAEAwBGMEQCIAr7JcbSN3lz2tall4kG rJLK+mZEoFLhJMS5GesEpYKZAiBG2v2+kIaAs2e8bNNUlHNolaL2EzBdM0ATband gy1KHQB3ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWaAAABgfGgQ80A AAQDAEgwRgIhAKNWK+/afoP7P9RdYYoEBV/ieJI525MQkdRiQshF7RXaAiEA/M65 tQsD2aqQcyhrUEJk6XYbfQHSAaCXyhUJCpuI9AAwDQYJKoZIhvcNAQELBQADggEB AIlVcnAvXs0xbdF+8qVEaQnZa+7Q9BLswuDVhNvTKX8T3OgLx2Z93Cf+qq3mtt8J oVAqqIU2irwiDnaRqGSfHQWOtt6bu7j57DuLBA0Y6NcTV+sP9V14FlxIgln8pkfz pj++WMg5o7x7achGu/GuHCi/qSOfTEbvfPMq4z609eZmDpBmFKldwNhIkkhHXsqu M9AhpXHEoRcJZpjJP1mkqfZ8IfmcxQqk3PU9KBlkVrfvF1FrYDpg0IX2Zy38yE85 wIngFk7FUvd6QZZ84TVhP/Ne0o8xYmAWgT+2lBrmDRJtmBXsxqzBojrGkwQ6M9tO 8i6ZUfLL36Ishim7ywo5GS4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H64tD+L2wVuR+VCvhX0 UTI+woDuDiGLspOxI5chlYrOT65XpcHPWXCXCLcZrxiQyumGYa5LSNyUEmL2JK7d SiP9+6NGO50Mub6MlvJ3USX72Q9F1sER9Bo5Uj6Amgpw1VS9D8yR3eLph+6jwLIA wTHd7Aev3CZ+ow0TTFgmjxEHKH+NC3U59VqX783BkppYPlZX92sFdPoLlStH/owU 6O/SEOV1WfXXVjE7jTj85T2skb6+FVaogZyJBmvus3AS5ockEzstXlqrJtI1RuKG ZpYXM6CRLNtdBdBB2kn9PxMuV6GwVjl4cUC0xcEfNLLFDiOWacWeqRCywPWLhjN6 mQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8205474952193518173424535996654234799 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Suffern' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Avon Products Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.avon.com.ar' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27329962573486728810311667547985793847769600800412777880930720464910659518970293371006497185794954040750072750356017078457780067335554072657673355908491620301916513157227283256248718942043207335372083953312362262029659170090451534170603447330740027238854295349422719127389739640813930563997713008616980363905967691677983512071452925182213616564620384645874466919707351856740770796553254374193308208235073531408798787327951378453754381231543217448329092237027239281686820273312782445529398724018470127965245957489867264029190877631228171342769315253948772247119775223550505667914750389237308289503683700970524402481817 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2bba3cf6e745f421dc2adc52ff32307de0994f45 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (142 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avon.com.ar' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.venderavon.com.ar' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venderavon.com.ar' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avon.com.ar' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.venderavon.com.ar' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.venderavon.com.ar' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postulantes.avon.com.ar' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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