paper-attachments.dropboxstatic.com
- Dropbox, Inc -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 08:e7:2f:a2:59:b0:8c:de:62:f5:d2:93:10:0d:27:b6 was issued on by DigiCert Inc.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Dropbox, Inc
Organization:
Dropbox, Inc
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 08:e7:2f:a2:59:b0:8c:de:62:f5:d2:93:10:0d:27:b6Serial Number (int): 11834210676572173156721125888409544630
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 02:0e:db:9d:d3:bc:e8:31:6f:6a:5e:d7:ee:6d:4a:6e:b4:92:3f:33
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 3c:e8:c1:71:f7:f8:74:6e:b0:8d:f9:84:a3:f6:42:3d:85:00:f8:8c
Fingerprint (sha256): 54:20:32:1b:6b:92:e8:3e:a2:0f:c2:97:be:29:ed:17:b6:23:22:7b:5c:31:65:c5:80:df:7b:8f:c8:37:30:98
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate paper-attachments.dropboxstatic.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for paper-attachments.dropboxstatic.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
paper-attachments.dropboxstatic.com
Other certificates including the domain name dropboxstatic.com
(limited to 100 certificates)
*.dropboxstatic.com
cf.dropboxstatic.com
*.dev.corp.dropbox.com
cfl.dropboxstatic.com
*.dropboxstatic.com
rebrand.dropboxstatic.com
customer-growth.dropboxstatic.com
healthcheck.dropboxstatic.com
*.dropboxstatic.com
flash.dropboxstatic.com
*.dropboxstatic.com
cf.dropboxstatic.com
paper.dropboxstatic.com
paper-desktop.dropboxstatic.com
ac.dropboxstatic.com
cf.dropboxstatic.com
paper-desktop.dropboxstatic.com
clientupdates.dropboxstatic.com
*.dev.corp.dropboxusercontent.com
clientupdates.dropboxstatic.com
fjord.dropboxstatic.com
*.dropboxstatic.com
flash.dropboxstatic.com
*.dev.corp.dropboxstatic.com
paper-attachments.dropboxstatic.com
ac.dropboxstatic.com
cfl.dropboxstatic.com
cf.dropboxstatic.com
clientupdates.dropboxstatic.com
paper.dropboxstatic.com
cfl.dropboxstatic.com
clientupdates.dropboxstatic.com
cf2.dropboxstatic.com
*.dropboxstatic.com
flash.dropboxstatic.com
ac.dropboxstatic.com
ac.dropboxstatic.com
cf.dropboxstatic.com
*.dropboxstatic.com
cf.dropboxstatic.com
clientupdates.dropboxstatic.com
flash.dropboxstatic.com
paper.dropboxstatic.com
clientupdates.dropboxstatic.com
rebrand.dropboxstatic.com
healthcheck.dropboxstatic.com
*.dev.corp.dropbox.com
*.dev.corp.dropboxstatic.com
showcase-marketing.dropboxstatic.com
*.dev.corp.dropbox.com
paper-attachments.dropboxstatic.com
*.dev.corp.dropbox.com
ac.dropboxstatic.com
customer-growth.dropboxstatic.com
paper.dropboxstatic.com
*.dropboxstatic.com
ac.dropboxstatic.com
*.dev.corp.dropbox.com
anti-abuse.dropboxstatic.com
*.dropboxstatic.com
ac.dropboxstatic.com
cfl.dropboxstatic.com
*.dev.corp.dropbox.com
cf.dropboxstatic.com
dropboxstatic.com
healthcheck.dropboxstatic.com
showcase-marketing.dropboxstatic.com
cfl.dropboxstatic.com
*.dev.corp.dropboxstatic.com
paper-attachments.dropboxstatic.com
paper-desktop.dropboxstatic.com
*.dev.corp.dropboxstatic.com
cf.dropboxstatic.com
clientupdates.dropboxstatic.com
*.dev.corp.dropboxusercontent.com
cf.dropboxstatic.com
*.dev.corp.dropbox.com
cfl.dropboxstatic.com
*.dropboxstatic.com
rebrand.dropboxstatic.com
customer-growth.dropboxstatic.com
healthcheck.dropboxstatic.com
*.dropboxstatic.com
flash.dropboxstatic.com
*.dropboxstatic.com
cf.dropboxstatic.com
paper.dropboxstatic.com
paper-desktop.dropboxstatic.com
ac.dropboxstatic.com
cf.dropboxstatic.com
paper-desktop.dropboxstatic.com
clientupdates.dropboxstatic.com
*.dev.corp.dropboxusercontent.com
clientupdates.dropboxstatic.com
fjord.dropboxstatic.com
*.dropboxstatic.com
flash.dropboxstatic.com
*.dev.corp.dropboxstatic.com
paper-attachments.dropboxstatic.com
ac.dropboxstatic.com
cfl.dropboxstatic.com
cf.dropboxstatic.com
clientupdates.dropboxstatic.com
paper.dropboxstatic.com
cfl.dropboxstatic.com
clientupdates.dropboxstatic.com
cf2.dropboxstatic.com
*.dropboxstatic.com
flash.dropboxstatic.com
ac.dropboxstatic.com
ac.dropboxstatic.com
cf.dropboxstatic.com
*.dropboxstatic.com
cf.dropboxstatic.com
clientupdates.dropboxstatic.com
flash.dropboxstatic.com
paper.dropboxstatic.com
clientupdates.dropboxstatic.com
rebrand.dropboxstatic.com
healthcheck.dropboxstatic.com
*.dev.corp.dropbox.com
*.dev.corp.dropboxstatic.com
showcase-marketing.dropboxstatic.com
*.dev.corp.dropbox.com
paper-attachments.dropboxstatic.com
*.dev.corp.dropbox.com
ac.dropboxstatic.com
customer-growth.dropboxstatic.com
paper.dropboxstatic.com
*.dropboxstatic.com
ac.dropboxstatic.com
*.dev.corp.dropbox.com
anti-abuse.dropboxstatic.com
*.dropboxstatic.com
ac.dropboxstatic.com
cfl.dropboxstatic.com
*.dev.corp.dropbox.com
cf.dropboxstatic.com
dropboxstatic.com
healthcheck.dropboxstatic.com
showcase-marketing.dropboxstatic.com
cfl.dropboxstatic.com
*.dev.corp.dropboxstatic.com
paper-attachments.dropboxstatic.com
paper-desktop.dropboxstatic.com
*.dev.corp.dropboxstatic.com
cf.dropboxstatic.com
clientupdates.dropboxstatic.com
*.dev.corp.dropboxusercontent.com
Certificate
The complete raw certificate details for paper-attachments.dropboxstatic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIQCOcvolmwjN5i9dKTEA0ntjANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzEyMTMwMDAwMDBa Fw0yNTAxMDcyMzU5NTlaMH8xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9y bmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRUwEwYDVQQKEwxEcm9wYm94LCBJ bmMxLDAqBgNVBAMTI3BhcGVyLWF0dGFjaG1lbnRzLmRyb3Bib3hzdGF0aWMuY29t MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jpJroxJkSx6oE32qpiz e/BwJMdWXp0iNxkaHqgGIRryicz7QGGvSOPT+N28OcoSB4rYjFRfoS0YN3C1CYmy hli1NKuQetLdB1Cb1XXsa1zpB/Uphc4nviov4J1wOad5R7C1NFjy1VqpEpwlFzVL PgE9fn1sdI8hLUxwC+X/XKsG9cGxXeWxoBbeEoFWCmiMuzpHU3MqI93gyiELSsXQ xzNZvrzoTRsX0eifJEe9HE8xvYV14d3aBG6OBzuzpmfZ+RJW65H70gfSxx3vGv2X TcF6whye5TsFk0i9CNbZlWLvSCnIKpPcqHtn9DuT5zrXLUbEtzanMkm8VmU8gDkP ewIDAQABo4ICGTCCAhUwHwYDVR0jBBgwFoAUt2ui6qiqhIx56rTaD5iyxZV2ufQw HQYDVR0OBBYEFAIO253TvOgxb2pe1+5tSm60kj8zMC4GA1UdEQQnMCWCI3BhcGVy LWF0dGFjaG1lbnRzLmRyb3Bib3hzdGF0aWMuY29tMD4GA1UdIAQ3MDUwMwYGZ4EM AQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGP BgNVHR8EgYcwgYQwQKA+oDyGOmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdp Q2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwQKA+oDyGOmh0dHA6Ly9jcmw0 LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmww fwYIKwYBBQUHAQEEczBxMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2Vy dC5jb20wSQYIKwYBBQUHMAKGPWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9E aWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwDAYDVR0TAQH/BAIwADAT BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/9VdQhvkDbJ JStZk4pSGkkIxj04Qnkz5b1ggVU0YMwSAO5J9M/+wJxvSO1p4wSG5CdWoDVfrlOD Kwyki0gU7LU9qHqZPRBr/pbdPQkGUXl3ZlS7Fjdx+H6/+JzHG55+b9URiHhAgTHN 9hS6DWjM82YIa59cKQ70yX7/d+f2yyx7ddg0NDLwpJUj97UfqIyhm2eazNtrlXlp 7lhJtb12P4aeoIXkrmvj+KZb0RW/a9vhLvSctPfk6os4VEuBi9hqCtr2VvMgbohd 25K6Reu58inBT5wE6yTHLeeq2Ovkzvetp+psZYemzbk9mDvBuckn03U1UD+K/MTm jhZzjuPJ8w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jpJroxJkSx6oE32qpiz e/BwJMdWXp0iNxkaHqgGIRryicz7QGGvSOPT+N28OcoSB4rYjFRfoS0YN3C1CYmy hli1NKuQetLdB1Cb1XXsa1zpB/Uphc4nviov4J1wOad5R7C1NFjy1VqpEpwlFzVL PgE9fn1sdI8hLUxwC+X/XKsG9cGxXeWxoBbeEoFWCmiMuzpHU3MqI93gyiELSsXQ xzNZvrzoTRsX0eifJEe9HE8xvYV14d3aBG6OBzuzpmfZ+RJW65H70gfSxx3vGv2X TcF6whye5TsFk0i9CNbZlWLvSCnIKpPcqHtn9DuT5zrXLUbEtzanMkm8VmU8gDkP ewIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11834210676572173156721125888409544630 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dropbox, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paper-attachments.dropboxstatic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27043740057860204346674408124262795910836183310124218291402093655116954774789530565859161706537558208834557561461243122908068998221338212183466127138279230296567738212199489722296473364254758988589847120833344987503113889592451374363028070732063367071106684772890708934758512069470816627243938086265032883865002237990939323747602498883605170865083497698263040815255448598142218811680214091365428397154987915171251411517644687133543037053372251500066211052224405073474629689958092147376574591308155098461274323806615480528573689642676219021710036166197921163782605676002597166497675420675727229471826219469389398871931 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 020edb9dd3bce8316f6a5ed7ee6d4a6eb4923f33 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paper-attachments.dropboxstatic.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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