*.nchmd.org
- NCH Healthcare System, Inc. -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0f:1f:71:c6:3c:ab:cc:43:b8:7a:ca:fd:cd:b4:af:3e was issued on by DigiCert Inc.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
NCH Healthcare System, Inc.
Organization:
NCH Healthcare System, Inc.
State / Province:
Florida
Locality: Naples
Country: US
Locality: Naples
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:1f:71:c6:3c:ab:cc:43:b8:7a:ca:fd:cd:b4:af:3eSerial Number (int): 20101688757626499729560625351597797182
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 52:75:ed:36:f7:25:0f:a7:2b:f2:ee:6e:82:67:22:98:1f:2d:aa:17
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): e6:45:c9:0f:96:a3:64:28:cb:00:5c:72:3b:3b:09:6e:5c:77:8d:d7
Fingerprint (sha256): 5a:dc:82:84:b5:e8:4e:97:2f:da:23:18:a3:94:93:74:c6:e2:18:26:60:2e:ca:63:f0:2b:d8:5a:1d:a9:75:b7
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate *.nchmd.org
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.nchmd.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA512 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.nchmd.org
nchmd.org
tpa-vdicon01.lb.nchmd.org
lb.nchmd.org
tpa-vdicon01.nchmd.org
nchmd.org
tpa-vdicon01.lb.nchmd.org
lb.nchmd.org
tpa-vdicon01.nchmd.org
Other certificates including the domain name nchmd.org
(limited to 100 certificates)
*.nchmd.org
*.nchmd.org
*.nchmd.org
facilities.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
facilities.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
remote.nchmd.org
providers.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
itdesk.tropicknitsindia.com
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
wellnesspartners.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
NCH-EXPRESSE.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
nchmd.org
nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
facilities.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
NCH-EXPRESSE.nchmd.org
helpdesk.cdscorp.ca
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
csg.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
facilities.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
facilities.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
remote.nchmd.org
providers.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
itdesk.tropicknitsindia.com
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
wellnesspartners.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
NCH-EXPRESSE.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
nchmd.org
nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
facilities.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
NCH-EXPRESSE.nchmd.org
helpdesk.cdscorp.ca
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
csg.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
Certificate
The complete raw certificate details for *.nchmd.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgIQDx9xxjyrzEO4esr9zbSvPjANBgkqhkiG9w0BAQ0FADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjAwMzEwMDAwMDAwWhcN MjIwNDI3MTIwMDAwWjBsMQswCQYDVQQGEwJVUzEQMA4GA1UECBMHRmxvcmlkYTEP MA0GA1UEBxMGTmFwbGVzMSQwIgYDVQQKExtOQ0ggSGVhbHRoY2FyZSBTeXN0ZW0s IEluYy4xFDASBgNVBAMMCyoubmNobWQub3JnMIICIjANBgkqhkiG9w0BAQEFAAOC Ag8AMIICCgKCAgEAovLmStqQdAT/OO7qyAriQ5Wg6QnwZR6tQwF/q8s2VdppetMk Scf6RBPnHI+byKe5HR0kVrNZU6JuCPQaUJHFI0Ghae7qyTqRgFOK+Ygz24WpPQ2s wet1E5OqD21l0uy+Xysu691Rtkn2Q55kgMrSePXTux8DqbElhtr+nCFHZEmLhtJ2 q6fIQxwD+Am0jDBfZxjQnIkcdrILSeUfVRFdJ440s1W7fWXpMin+EeV7RYEtPJj/ TWmP6xzWoB/GsR+U2NMKz69lZTK3XIOKN6wFt4VUY6rAstCmtHYqFBAUgxvIe+5m RzDbr59pPxR8ACui0jhJs+BwtDvXrxcUgK40YvxHbn+NwG9j592S642c3hFZkhNY fH/flR3hvf8ja/0G4wtHIef4W5ajTh0td7fmwsE4hbvSpNzGrFJgqI9WdR/cBfOZ 6oenSEiXeWSRdZg9B/uKDbhBgmpXf/N7KOSNcz3aj6GyHcrLMNydXZbS9VbZsG5H mi2p6FI3UADz7dDzu83tAfF6tozByna537SkrWzHj5n6VxCaesYYsk52DIbZ0wVx xezaiAK7gZRc6ufGknDtmS5v50HP3Q84XtOkkMP2ogDJNBrCILSDDeXNQhMOLURx mxdEzUNe0IgQJwMI7UlvpENV2M1QeM+4r7TI++EEttnYkMR9ivLu8nEhRaMCAwEA AaOCAjMwggIvMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1Ud DgQWBBRSde029yUPpyvy7m6CZyKYHy2qFzBiBgNVHREEWzBZggsqLm5jaG1kLm9y Z4IJbmNobWQub3Jnghl0cGEtdmRpY29uMDEubGIubmNobWQub3JnggxsYi5uY2ht ZC5vcmeCFnRwYS12ZGljb24wMS5uY2htZC5vcmcwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilo dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4Yp aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0g BEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGln aWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUF BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6 Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJD QS5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG 9w0BAQ0FAAOCAQEAEUxXO0IX8XoXzwnKmIddSSDLElpPWefSW79EOBDECsjDouvA VP0z8FyKy2cKs1p0dyWh4Ewp+W1Sb8qK9isZCunvSJfYg3vXYutuCpgmp7CI3UZ7 Bo5+l1x7TVKYLdtHpU95BkbAoFPW181acOfNTMJACdC8SGbCTK2/Jgf7h6Vmv1C+ zSenzCCDcWFMeDeXzfnvqvTNOfORLMVQEhYZtI3q9dfRkjNNuDwYUXN14A+zhOeX Jr4qOVROLlfuIBhf6LHrpyDuNp/6r+zCzHmyHSfTKgk14s3zK6+Y4INPWr6WcKL/ 6Bb0rB92cxBQrioBT4Z0XWcy0KgFjjZlTRWV8A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAovLmStqQdAT/OO7qyAri Q5Wg6QnwZR6tQwF/q8s2VdppetMkScf6RBPnHI+byKe5HR0kVrNZU6JuCPQaUJHF I0Ghae7qyTqRgFOK+Ygz24WpPQ2swet1E5OqD21l0uy+Xysu691Rtkn2Q55kgMrS ePXTux8DqbElhtr+nCFHZEmLhtJ2q6fIQxwD+Am0jDBfZxjQnIkcdrILSeUfVRFd J440s1W7fWXpMin+EeV7RYEtPJj/TWmP6xzWoB/GsR+U2NMKz69lZTK3XIOKN6wF t4VUY6rAstCmtHYqFBAUgxvIe+5mRzDbr59pPxR8ACui0jhJs+BwtDvXrxcUgK40 YvxHbn+NwG9j592S642c3hFZkhNYfH/flR3hvf8ja/0G4wtHIef4W5ajTh0td7fm wsE4hbvSpNzGrFJgqI9WdR/cBfOZ6oenSEiXeWSRdZg9B/uKDbhBgmpXf/N7KOSN cz3aj6GyHcrLMNydXZbS9VbZsG5Hmi2p6FI3UADz7dDzu83tAfF6tozByna537Sk rWzHj5n6VxCaesYYsk52DIbZ0wVxxezaiAK7gZRc6ufGknDtmS5v50HP3Q84XtOk kMP2ogDJNBrCILSDDeXNQhMOLURxmxdEzUNe0IgQJwMI7UlvpENV2M1QeM+4r7TI ++EEttnYkMR9ivLu8nEhRaMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20101688757626499729560625351597797182 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-27 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Naples' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NCH Healthcare System, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nchmd.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 664773213352687395328507676044212211491526697566993045894271442634354637971248555057249378846157397544966260008909849281091734921052000064540452934248579655064796796923337420614311082244690125064419201752179122300723566797030739665982548931107971942655092156922592082816222377265490172900125523400909891364513166167448702216311027692616473796856859684295687538891651982374062829235450050869959507580482899722076437774768332009692383720130468839654675170976558145564759167614887711824443033392598607162229914881190803779332061661397152963124587701509523325192532647728037446425801397376697702416684257779902050771895567562543903404229238351506019248741087437459391094732631056639383155057184231655252966002485103180752297164235881144776964114834484564508985524868043836704992097770231552087126689136226933060437180349010287898094202505105738791741002398147536911586307136583205906165007625162899147969387211547306255710904729998164473989084288910384550379462722242698752690940133303413361921550545809400197454703471846084378750293214663374946719209040816492791731090905975879431991274665959086728091980049835201013289272614490319368464831126115802686075480997472178950528096584374051584833988219081021485278106262446822070471987643811 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5275ed36f7250fa72bf2ee6e826722981f2daa17 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nchmd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nchmd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpa-vdicon01.lb.nchmd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lb.nchmd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpa-vdicon01.nchmd.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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