*.manahealth.com

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate


This digital certificate with serial number 07:83:f2:97:82:fb:34:b0:59:35:57:3d:3f:c5:a6:ac was issued on by DigiCert Inc .

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Mana Health Inc.

Organization: Mana Health Inc.
Organization unit: Healthcare IT
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
State / Province: New York
Locality: New York
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 07:83:f2:97:82:fb:34:b0:59:35:57:3d:3f:c5:a6:ac
Serial Number (int): 9989707206075837361432053316258735788
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 46:0f:28:25:8c:8a:21:91:f5:94:91:be:78:c4:21:6a:e3:bd:16:88
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 78:dd:3e:a6:95:dc:2f:e0:0d:5a:33:f2:2c:00:7b:dc:62:91:5f:dc
Fingerprint (sha256): 3b:09:b1:a2:96:8c:64:0a:e1:60:a9:96:b9:ae:1c:2a:d7:f9:98:74:85:68:7e:1e:c0:2b:b7:0b:06:ef:e4:95

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g2.crl

Check the revocation status for the current certificate on *.manahealth.com
3
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

*.manahealth.com
manahealth.com
portal.manahealth.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGhDCCBWygAwIBAgIQB4Pyl4L7NLBZNVc9P8WmrDANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xNDA2MjYwMDAwMDBaFw0xNTA3MDExMjAwMDBa MIGBMQswCQYDVQQGEwJVUzERMA8GA1UECBMITmV3IFlvcmsxETAPBgNVBAcTCE5l dyBZb3JrMRkwFwYDVQQKExBNYW5hIEhlYWx0aCBJbmMuMRYwFAYDVQQLEw1IZWFs dGhjYXJlIElUMRkwFwYDVQQDDBAqLm1hbmFoZWFsdGguY29tMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEA5bspgOJ1PO0SGbqqfp/BoJKv1ErdAYjYhdG7 FwnYQlAdxMbS8cgSJ+JypQ7MuQtG0bwu5hXfaU0LBr5MYUv2z8cfd91hAI4rdWmU wPpJaLSIZqHo+HOFEj8NrlDkBq97aBcP3a6bUKT+Tp70rlnK8G9UqcZqCAre160a 0clQRGzZ95f7GJK5doPewfDGsbhLtiGjoyK4Ro/2DEaLTstwNdiBXfIKNf0wANTx 7eEpRi/typupPiRg/WH3Km9yKvCBrPlRJl/nAIasLKLA0q3FIMP7sbCkQV50Ax1N KQ+GYV+d7BfGWPOax5dxNEDFGutptykbqYbWUQ+AQHsukA474jL0RP5O2FJOW/8i 6qM5OqghPYGVV4qQA+7/QJlglkoZJ/3jo8KAhntB4XaybBwNsECTs3FfpytGj0qM XpYc2OJ/aBOZhnbthQnYp0n4bMdkOiFwcMZuT6GsVDwRtEwXKWh5V4K8z6lqZxuA vp3rIPTawOu7nrf3Zeohyq9o1xbdapRquwWyHbe1H6Fl0RP5iwoMVaR0Wf6Psl9h Q7s+M6Fmi60lydZSgJttrJTMy6Yvgj5/3eV5WJ3YxVWRepXl3BgS7GrjJ9ZQ9qY0 fLoPIbFDuuKHDUffgnG/uV8IQ5Nc9S91UFs8EWbWvdzsbyap5zI4wYfncFgwL+4T fN9aNs0CAwEAAaOCAgYwggICMB8GA1UdIwQYMBaAFFFo/5CvAgd1PMzZZWRiohK4 WXI7MB0GA1UdDgQWBBRGDygljIohkfWUkb54xCFq470WiDBCBgNVHREEOzA5ghAq Lm1hbmFoZWFsdGguY29tgg5tYW5haGVhbHRoLmNvbYIVcG9ydGFsLm1hbmFoZWFs dGguY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNlcnQuY29t L3NoYTItaGEtc2VydmVyLWcyLmNybDA0oDKgMIYuaHR0cDovL2NybDQuZGlnaWNl cnQuY29tL3NoYTItaGEtc2VydmVyLWcyLmNybDBCBgNVHSAEOzA5MDcGCWCGSAGG /WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BT MIGDBggrBgEFBQcBAQR3MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2lj ZXJ0LmNvbTBNBggrBgEFBQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29t L0RpZ2lDZXJ0U0hBMkhpZ2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/ BAIwADANBgkqhkiG9w0BAQsFAAOCAQEAIskwHR6vqlRgnefN8H4+nhWGr2jdJyFg scmoPXE0hyufEKwj1gPo+7Ci0Ae/KKXQOO8nHUSL0DG2qkBVkG7YZ2FpVGnnYq8v FWt9qxbBFioA2j5zq8MJkZ1PhDXbMtMD3Hd9N3TNgcDg7appcSw8plQKNQlWxE+r VwYi4A7ngvu7xKm2Rq42r+/WUiV9Tm1lnagSyBqfZrZP074QQhpr9Qiq/jw7Aj0v mvWw47l+pui+Zb4AxgJ5mH98XVQUMXucxZdu27+WtB2YqV9LKN8cYffpoO+OCxqL pCBJaoivpFIzQOW5MZGDPs07AZAAP0ZLAHizh7bzl+q11dtvkzOE3A== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5bspgOJ1PO0SGbqqfp/B oJKv1ErdAYjYhdG7FwnYQlAdxMbS8cgSJ+JypQ7MuQtG0bwu5hXfaU0LBr5MYUv2 z8cfd91hAI4rdWmUwPpJaLSIZqHo+HOFEj8NrlDkBq97aBcP3a6bUKT+Tp70rlnK 8G9UqcZqCAre160a0clQRGzZ95f7GJK5doPewfDGsbhLtiGjoyK4Ro/2DEaLTstw NdiBXfIKNf0wANTx7eEpRi/typupPiRg/WH3Km9yKvCBrPlRJl/nAIasLKLA0q3F IMP7sbCkQV50Ax1NKQ+GYV+d7BfGWPOax5dxNEDFGutptykbqYbWUQ+AQHsukA47 4jL0RP5O2FJOW/8i6qM5OqghPYGVV4qQA+7/QJlglkoZJ/3jo8KAhntB4XaybBwN sECTs3FfpytGj0qMXpYc2OJ/aBOZhnbthQnYp0n4bMdkOiFwcMZuT6GsVDwRtEwX KWh5V4K8z6lqZxuAvp3rIPTawOu7nrf3Zeohyq9o1xbdapRquwWyHbe1H6Fl0RP5 iwoMVaR0Wf6Psl9hQ7s+M6Fmi60lydZSgJttrJTMy6Yvgj5/3eV5WJ3YxVWRepXl 3BgS7GrjJ9ZQ9qY0fLoPIbFDuuKHDUffgnG/uV8IQ5Nc9S91UFs8EWbWvdzsbyap 5zI4wYfncFgwL+4TfN9aNs0CAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9989707206075837361432053316258735788 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-01 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mana Health Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Healthcare IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.manahealth.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 937221127687299193743187252073036967263095984802762086589461406837021442952745090493745391884890863775936961340494370845313418180799686684197484591853568585778217278795604657512821009893960715741008362770354334220805717673536607372568009000491450019586623990766592954777554880821938819570408193641390166011289638493119630540034349832339529926306026792764839780673898740433605317068225369312908079600221962221945273472413064408969121961259266576691737376119251774323369815155035653599562240525715589998476197344377375873930748777253307140220944108528723894442306750130287898695651719833831299783239409896076868660199415313594688246813462160653022456510957304479265934251677823251399972813120749099167003884707407011314237557661230961666384893401968875059054123950056728762527239840671789424768496607862125184853331105809252407303818266953363255129627444475327961724614653698941340919255328877044745599146878809893638320004913687501974914577659482913791351476194873947067333542889685359704926183406280322464511942610439276595649830361932227351418274545740458054695981058580564144924945348964742949886130958796179314046823195054283366655650767738423088693216086355001383734138155163199083738102012024549420160998804925283302589289084621 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 460f28258c8a2191f59491be78c4216ae3bd1688 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manahealth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manahealth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.manahealth.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0022c9301d1eafaa54609de7cdf07e3e9e1586af68dd272160b1c9a83d7134872b9f10ac23d603e8fbb0a2d007bf28a5d038ef271d448bd031b6aa4055906ed86761695469e762af2f156b7dab16c1162a00da3e73abc309919d4f8435db32d303dc777d3774cd81c0e0edaa69712c3ca6540a350956c44fab570622e00ee782fbbbc4a9b646ae36afefd652257d4e6d659da812c81a9f66b64fd3be10421a6bf508aafe3c3b023d2f9af5b0e3b97ea6e8be65be00c60279987f7c5d5414317b9cc5976edbbf96b41d98a95f4b28df1c61f7e9a0ef8e0b1a8ba420496a88afa4523340e5b93191833ecd3b0190003f464b0078b387b6f397eab5d5db6f933384dc