mail.bronxbetterlearning.org
- Bronx Charter School for Better Learning -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 02:d2:42:63:09:79:03:0b:1d:f5:68:ef:2e:f4:d8:4d was issued on by DigiCert Inc.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Bronx Charter School for Better Learning
Organization:
Bronx Charter School for Better Learning
Organization unit: IT
Organization unit: IT
State / Province:
New York
Locality: Bronx
Country: US
Locality: Bronx
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:d2:42:63:09:79:03:0b:1d:f5:68:ef:2e:f4:d8:4dSerial Number (int): 3750184817415734954954276770424346701
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: d7:c6:ea:4e:8a:bd:ed:4e:b1:39:2a:68:60:4f:9c:6d:8a:18:57:a5
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): e5:92:9d:3a:dc:83:fa:e0:06:d1:54:c3:ad:26:14:a7:d1:99:6a:0f
Fingerprint (sha256): 59:c1:86:f3:bc:b2:8f:aa:ed:84:7c:3b:8e:3c:83:57:7e:ff:7f:2f:0d:f7:e0:27:d4:e9:53:da:12:73:20:4a
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl
Check the revocation status for certificate mail.bronxbetterlearning.org
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.bronxbetterlearning.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.bronxbetterlearning.org
AutoDiscover.bronxbetterlearning.org
bronxbetterlearning.org
AutoDiscover.bronxbetterlearning.org
bronxbetterlearning.org
Other certificates including the domain name bronxbetterlearning.org
(limited to 100 certificates)
ninth.frenship.net
admin.adulted.mvusd.net
acrma5.org
ehkeys.ossdms.org
admin.athlosindiana.org
highland.crenshaw-schools.org
admin.adulted.mvusd.net
admin.athlosindiana.org
admin.bronxbetterlearning.org
admin.aes.benton.k12.ms.us
2.bronxbetterlearning.org
admin.adulted.mvusd.net
admin.adulted.mvusd.net
admin.elementary.marsk12.org
2.bronxbetterlearning.org
admin.marchvalley.mvusd.net
mail.bronxbetterlearning.org
admin.chaparralhills.mvusd.net
bronxbetterlearning.org
bronxbetterlearning.org
benjamin.bendist25.org
mail.bronxbetterlearning.org
admin.adulted.mvusd.net
acrma5.org
acrma5.org
acrma5.org
pearsallhs.org
acrma5.org
admin.adulted.mvusd.net
mail.bronxbetterlearning.org
mail.bronxbetterlearning.org
mail.bronxbetterlearning.org
ivm.edu.mx
www.athlosindiana.org
mail.bronxbetterlearning.org
admin.bb.wusd1.org
mail.bronxbetterlearning.org
2.bronxbetterlearning.org
stnorbertschool.org
lincolnhornets.org
admin.adulted.mvusd.net
2.bronxbetterlearning.org
admin.mlsd161.org
www.bronxbetterlearning.org
2.bronxbetterlearning.org
admin.hps.aacs.net
2.bronxbetterlearning.org
2.bronxbetterlearning.org
bronxbetterlearning.org
admin.wuhsd.org
admin.primarycenter.marsk12.org
2.bronxbetterlearning.org
admin.adulted.mvusd.net
admin.wuhsd.org
ramona.mvusd.net
2.bronxbetterlearning.org
mail.bronxbetterlearning.org
bronxbetterlearning.org
admin.llhs.org
2.bronxbetterlearning.org
aacs.net
admin.vapa.mvusd.net
2.bronxbetterlearning.org
admin.ces.columbusisd.org
2.bronxbetterlearning.org
admin.adulted.mvusd.net
admin.athlosindiana.org
2.bronxbetterlearning.org
2.bronxbetterlearning.org
admin.mvusd.net
admin.adulted.mvusd.net
acrma5.org
ehkeys.ossdms.org
admin.athlosindiana.org
highland.crenshaw-schools.org
admin.adulted.mvusd.net
admin.athlosindiana.org
admin.bronxbetterlearning.org
admin.aes.benton.k12.ms.us
2.bronxbetterlearning.org
admin.adulted.mvusd.net
admin.adulted.mvusd.net
admin.elementary.marsk12.org
2.bronxbetterlearning.org
admin.marchvalley.mvusd.net
mail.bronxbetterlearning.org
admin.chaparralhills.mvusd.net
bronxbetterlearning.org
bronxbetterlearning.org
benjamin.bendist25.org
mail.bronxbetterlearning.org
admin.adulted.mvusd.net
acrma5.org
acrma5.org
acrma5.org
pearsallhs.org
acrma5.org
admin.adulted.mvusd.net
mail.bronxbetterlearning.org
mail.bronxbetterlearning.org
mail.bronxbetterlearning.org
ivm.edu.mx
www.athlosindiana.org
mail.bronxbetterlearning.org
admin.bb.wusd1.org
mail.bronxbetterlearning.org
2.bronxbetterlearning.org
stnorbertschool.org
lincolnhornets.org
admin.adulted.mvusd.net
2.bronxbetterlearning.org
admin.mlsd161.org
www.bronxbetterlearning.org
2.bronxbetterlearning.org
admin.hps.aacs.net
2.bronxbetterlearning.org
2.bronxbetterlearning.org
bronxbetterlearning.org
admin.wuhsd.org
admin.primarycenter.marsk12.org
2.bronxbetterlearning.org
admin.adulted.mvusd.net
admin.wuhsd.org
ramona.mvusd.net
2.bronxbetterlearning.org
mail.bronxbetterlearning.org
bronxbetterlearning.org
admin.llhs.org
2.bronxbetterlearning.org
aacs.net
admin.vapa.mvusd.net
2.bronxbetterlearning.org
admin.ces.columbusisd.org
2.bronxbetterlearning.org
admin.adulted.mvusd.net
admin.athlosindiana.org
2.bronxbetterlearning.org
2.bronxbetterlearning.org
admin.mvusd.net
Certificate
The complete raw certificate details for mail.bronxbetterlearning.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgIQAtJCYwl5Awsd9WjvLvTYTTANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTYxMDA3MDAwMDAwWhcN MTkxMDE2MTIwMDAwWjCBlzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCE5ldyBZb3Jr MQ4wDAYDVQQHEwVCcm9ueDExMC8GA1UEChMoQnJvbnggQ2hhcnRlciBTY2hvb2wg Zm9yIEJldHRlciBMZWFybmluZzELMAkGA1UECxMCSVQxJTAjBgNVBAMTHG1haWwu YnJvbnhiZXR0ZXJsZWFybmluZy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC6B+3+cD7usVKgM0J5ITNdNytfH4kAqBNtNsZkcvAy79Kb/rsxtIxj h8WMv4yU94BOSd1qiLaBze2SIrzfYTwTSEvl/l21bOVBezIzWvC6PviQ1OpgPzxy vLmC+9PF9CcqSMxIwXYr9Q5bpc45K7jfk1NMlYwYuS1bVGEPuSzjhTmJtDX2HYdi KLu3DQVEBOrYbL8T7A+gUAIt7KsEFkjLbwxFkhSsYi2xX8R3EmzBJ+hCpuYAtCHh 0RzaBT5wqf4iGYaPWdjfGzhBEDN9mSJIuYJ4lKpBqDttDd11insiIAqBVr8snINr 3OFJLaV0QxZDggciXi17YDH14/HEXtc/AgMBAAGjggIiMIICHjAfBgNVHSMEGDAW gBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQU18bqToq97U6xOSpoYE+c bYoYV6UwZgYDVR0RBF8wXYIcbWFpbC5icm9ueGJldHRlcmxlYXJuaW5nLm9yZ4Ik QXV0b0Rpc2NvdmVyLmJyb254YmV0dGVybGVhcm5pbmcub3Jnghdicm9ueGJldHRl cmxlYXJuaW5nLm9yZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2lj ZXJ0LmNvbS9zc2NhLXNoYTItZzUuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdp Y2VydC5jb20vc3NjYS1zaGEyLWc1LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwB ATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgG BmeBDAECAjB8BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw LmRpZ2ljZXJ0LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNl cnQuY29tL0RpZ2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAMBgNVHRMBAf8E AjAAMA0GCSqGSIb3DQEBCwUAA4IBAQAgLLNwcaxx7GvFp/Nulr5T5DJtrTqpcaBf 2MYCQepl5djqLQjuZmfqQ0CY6AIsUJ0pr7c4q2W8imr8k+peoA0H20mb2JIqMIcw zU4dNgcxZGHef4IeoekgCZeo+5/umv/2OaJ7YtjiLyE0CRs8uRlf0y/Yi0T8uyRL Lls4JFEPCiPSuatwIlBfR61J2G22n4spWZXfKoFEW8b0mW13uVtHe2cPzP2xIfDh WdveMY683ygMcupDkKzG7ehruD8cd6h5/99R/xz7B/Y0jTdsSaeK1fZWEdcRWiGd dBTno5YFWxZj4DlLinRGQsk4YErkAea+nuE3BrBSXtvJWqCPQO9m -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugft/nA+7rFSoDNCeSEz XTcrXx+JAKgTbTbGZHLwMu/Sm/67MbSMY4fFjL+MlPeATkndaoi2gc3tkiK832E8 E0hL5f5dtWzlQXsyM1rwuj74kNTqYD88cry5gvvTxfQnKkjMSMF2K/UOW6XOOSu4 35NTTJWMGLktW1RhD7ks44U5ibQ19h2HYii7tw0FRATq2Gy/E+wPoFACLeyrBBZI y28MRZIUrGItsV/EdxJswSfoQqbmALQh4dEc2gU+cKn+IhmGj1nY3xs4QRAzfZki SLmCeJSqQag7bQ3ddYp7IiAKgVa/LJyDa9zhSS2ldEMWQ4IHIl4te2Ax9ePxxF7X PwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3750184817415734954954276770424346701 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bronx' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bronx Charter School for Better Learning' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.bronxbetterlearning.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23484234986581452692077374435453127246867409018826788012676845472811520826528255175684209347635354637547290979143273972479819130557651121825268522508779089816849996654975428278340319590665127835082462537770616376121201059472506512049420111072512291455391118524036513922534792048728943215893704818702192679990020078161156186503435643413717778705286675974925214935837389949202616551705296761601628044461910282530758537401349960511453892335314274318495288796790957805109996358491593824711601260372215046850967687037731738780355733226973008418988554857330533451961863435090583505859501483939563204518132680784312732145471 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d7c6ea4e8abded4eb1392a68604f9c6d8a1857a5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bronxbetterlearning.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.bronxbetterlearning.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bronxbetterlearning.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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