edge_uc1.peopleadmin.ca
- PeopleAdmin, Inc. -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 0c:94:9d:99:76:5d:59:9c:52:8d:fb:9b:66:d0:18:3d was issued on by DigiCert Inc.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- The DNS name 'edge_uc1.peopleadmin.ca' contains an underscore (_) character Before explicitly stating as such in CABF 1.6.2, the stance of RFC5280 is adopted that DNSNames MUST NOT contain an underscore character. (BR 7.1.4.2.1)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- DNSName MUST NOT contain underscore characters (BRs: 7.1.4.2.1)
- DNSName MUST NOT contain underscore characters (RFC5280: 4.1.2.6)
PeopleAdmin, Inc.
Organization:
PeopleAdmin, Inc.
Organization unit: HR
Organization unit: HR
State / Province:
Texas
Locality: Austin
Country: US
Locality: Austin
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:94:9d:99:76:5d:59:9c:52:8d:fb:9b:66:d0:18:3dSerial Number (int): 16722392381330867392969026558340634685
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 0e:93:fb:23:8d:d2:06:ba:2c:53:32:2d:29:62:ec:ef:c8:11:e2:aa
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 01:c4:e0:1d:1d:4e:a4:25:f9:c2:65:3c:4e:29:93:d6:47:91:de:ae
Fingerprint (sha256): 59:f8:25:63:d2:32:80:71:31:a4:f6:6a:ec:33:4a:9a:9b:b5:df:7d:11:3d:9d:84:d1:5a:7c:e3:c1:21:51:23
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl
Check the revocation status for certificate edge_uc1.peopleadmin.ca
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for edge_uc1.peopleadmin.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
edge_uc1.peopleadmin.ca
test1.peopleadmin.ca
test2.peopleadmin.ca
careeropportunities.kelowna.ca
www.employmentopportunities.okanagan.bc.ca
uleth.peopleadmin.ca
test1.peopleadmin.ca
test2.peopleadmin.ca
careeropportunities.kelowna.ca
www.employmentopportunities.okanagan.bc.ca
uleth.peopleadmin.ca
Other certificates including the domain name peopleadmin.ca
(limited to 100 certificates)
*.tedk12.ca
*.tedk12.ca
*.peopleadmin.ca
imperva.com
imperva.com
*.tedk12.ca
edge-uc1.peopleadmin.ca
*.tedk12.ca
imperva.com
*.peopleadmin.ca
edge_uc1.peopleadmin.ca
edge-uc1.peopleadmin.ca
imperva.com
edge_uc1.peopleadmin.ca
*.tedk12.ca
edge_uc1.peopleadmin.ca
edge-uc1.peopleadmin.ca
edge_uc1.peopleadmin.ca
imperva.com
imperva.com
edge_uc1.peopleadmin.ca
edge_uc1.peopleadmin.ca
edge-uc1.peopleadmin.ca
edge-uc1.peopleadmin.ca
edge-uc1.peopleadmin.ca
imperva.com
edge_uc1.peopleadmin.ca
*.tedk12.ca
edge_uc1.peopleadmin.ca
*.tedk12.ca
edge_uc1.peopleadmin.ca
edge_uc1.peopleadmin.ca
*.peopleadmin.ca
imperva.com
edge-uc1.peopleadmin.ca
edge_uc1.peopleadmin.ca
*.tedk12.ca
*.peopleadmin.ca
imperva.com
imperva.com
*.tedk12.ca
edge-uc1.peopleadmin.ca
*.tedk12.ca
imperva.com
*.peopleadmin.ca
edge_uc1.peopleadmin.ca
edge-uc1.peopleadmin.ca
imperva.com
edge_uc1.peopleadmin.ca
*.tedk12.ca
edge_uc1.peopleadmin.ca
edge-uc1.peopleadmin.ca
edge_uc1.peopleadmin.ca
imperva.com
imperva.com
edge_uc1.peopleadmin.ca
edge_uc1.peopleadmin.ca
edge-uc1.peopleadmin.ca
edge-uc1.peopleadmin.ca
edge-uc1.peopleadmin.ca
imperva.com
edge_uc1.peopleadmin.ca
*.tedk12.ca
edge_uc1.peopleadmin.ca
*.tedk12.ca
edge_uc1.peopleadmin.ca
edge_uc1.peopleadmin.ca
*.peopleadmin.ca
imperva.com
edge-uc1.peopleadmin.ca
edge_uc1.peopleadmin.ca
Certificate
The complete raw certificate details for edge_uc1.peopleadmin.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgIQDJSdmXZdWZxSjfubZtAYPTANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xNDEwMzAwMDAwMDBaFw0xNzExMDMxMjAwMDBa MHkxCzAJBgNVBAYTAlVTMQ4wDAYDVQQIEwVUZXhhczEPMA0GA1UEBxMGQXVzdGlu MRowGAYDVQQKExFQZW9wbGVBZG1pbiwgSW5jLjELMAkGA1UECxMCSFIxIDAeBgNV BAMMF2VkZ2VfdWMxLnBlb3BsZWFkbWluLmNhMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAtnOQO8d3pbp9jK5O6lQY8zG8xXHrjU52XKAk5EGNhy6tRoY+ EC8S6FM+Sp0aZDcBftWDBPMEvBPQw0KpnzmUYaXtHIbZAVXJocUDTFAg2KKtClRE WGpWjH3av4MsFHcVFjAK6WvugRzhjP7Y5VTv2+Kwho0uIL1+55Tv1TJEVYvwubZi SnvrdgGqqqG2PPfG4MEZMBzY1B0+sVqNIOEsTkn6DCzsEox7kShtnOhBGhHMa1qO 15VMcRB0GzHVPZRJmknbxtbeu4UWEOKTj7ivzMoDByhLv4N0w/ef+OR/9iAUYqQj lrCvQBSKScynhJWMj7JoT6e58F/dqOs5hxTlBQIDAQABo4ICgTCCAn0wHwYDVR0j BBgwFoAUUWj/kK8CB3U8zNllZGKiErhZcjswHQYDVR0OBBYEFA6T+yON0ga6LFMy LSli7O/IEeKqMIGyBgNVHREEgaowgaeCF2VkZ2VfdWMxLnBlb3BsZWFkbWluLmNh ghR0ZXN0MS5wZW9wbGVhZG1pbi5jYYIUdGVzdDIucGVvcGxlYWRtaW4uY2GCHmNh cmVlcm9wcG9ydHVuaXRpZXMua2Vsb3duYS5jYYIqd3d3LmVtcGxveW1lbnRvcHBv cnR1bml0aWVzLm9rYW5hZ2FuLmJjLmNhghR1bGV0aC5wZW9wbGVhZG1pbi5jYTAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUG A1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhh LXNlcnZlci1nNS5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9z aGEyLWhhLXNlcnZlci1nNS5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAo BggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwB AgIwgYMGCCsGAQUFBwEBBHcwdTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGln aWNlcnQuY29tME0GCCsGAQUFBzAChkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5j b20vRGlnaUNlcnRTSEEySGlnaEFzc3VyYW5jZVNlcnZlckNBLmNydDAMBgNVHRMB Af8EAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQCbCZQfSTJvKAn98x65enLInpdS2vTg D8EO9lBirB3ZCq/UL05ZDxl5QSLjcpV7Bj/XC7D/Gx2dNrN04Z5pWTgUjcZJfsBr sdKJJa4n9y2roe8p/TDiXm+qpbv/LFPlrmLV/2MzpbkdgYOvv8qFLr1slQ8JGlDE jpGDnjUaR/1FHQblEOSk9M0zKwBuzViQbd6bkV0C1+reUPqEfAlLtlxfNEdYIHsO cJ3YR0z+eAy915A20aMITqSH6PJBUvC69u4M66M+FzJkVxaCwdJWxhbDZJERt6Ub 1eqro9HfA9ZBMrIlYW+o9j4OxWpX1shQPfvbGRG0rjEFjxPVoFPnUuwm -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnOQO8d3pbp9jK5O6lQY 8zG8xXHrjU52XKAk5EGNhy6tRoY+EC8S6FM+Sp0aZDcBftWDBPMEvBPQw0KpnzmU YaXtHIbZAVXJocUDTFAg2KKtClREWGpWjH3av4MsFHcVFjAK6WvugRzhjP7Y5VTv 2+Kwho0uIL1+55Tv1TJEVYvwubZiSnvrdgGqqqG2PPfG4MEZMBzY1B0+sVqNIOEs Tkn6DCzsEox7kShtnOhBGhHMa1qO15VMcRB0GzHVPZRJmknbxtbeu4UWEOKTj7iv zMoDByhLv4N0w/ef+OR/9iAUYqQjlrCvQBSKScynhJWMj7JoT6e58F/dqOs5hxTl BQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16722392381330867392969026558340634685 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-03 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Austin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PeopleAdmin, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'edge_uc1.peopleadmin.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23032357946271445331992774727107933274354580757431026234508182637508832632520972340472432017449292769677366095449693799990972857032137740092765975738659922444387913315422134079497903979649183477135436865924964746891103073537288328641837810718914608558210697323409828089158280428351649432683879041687776601988769354667626728210771459568034500878897260954454620569484824911885489458640466897100338922292073345420229603930520462979119575480381090665117421717596847252975213850065340973799445678827591063726943365085476294512302069856102668500467377857998447403786038946712057785665691332285669432671979944087905268720901 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0e93fb238dd206ba2c53322d2962ecefc811e2aa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (170 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge_uc1.peopleadmin.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.peopleadmin.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.peopleadmin.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careeropportunities.kelowna.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.employmentopportunities.okanagan.bc.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uleth.peopleadmin.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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