eservices-test.ncdor.gov
- Executive Office of the State of North Carolina -
Issued by DigiCert Global CA G2
About this certificate
This digital certificate with serial number 07:04:d9:9f:04:db:fa:84:73:61:f6:5a:5b:88:e1:b7 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Executive Office of the State of North Carolina
Organization:
Executive Office of the State of North Carolina
Organization unit: Revenue
Organization unit: Revenue
State / Province:
North Carolina
Locality: Raleigh
Country: US
Locality: Raleigh
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:04:d9:9f:04:db:fa:84:73:61:f6:5a:5b:88:e1:b7Serial Number (int): 9329779039594260430038561794466308535
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 0a:e7:d3:ed:83:2d:f2:5d:8d:5a:c6:ba:d2:7b:c7:63:00:d8:58:ca
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20
Fingerprint (sha1): c9:6c:c2:fc:7b:10:09:5f:c5:e0:b0:7d:f5:cb:5c:76:55:0b:eb:9f
Fingerprint (sha256): 5b:61:2b:3c:81:0c:a3:c6:c1:20:6a:45:b3:0a:d2:15:23:94:84:72:54:87:5b:8c:7f:f8:68:84:77:65:d9:72
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl
Check the revocation status for certificate eservices-test.ncdor.gov
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for eservices-test.ncdor.gov
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
eservices-test.ncdor.gov
Other certificates including the domain name ncdor.gov
(limited to 100 certificates)
files.nc.gov
prodwas4.ncdor.gov
edevtafsetof1.dev.ncdor.gov
misentry2.ncdor.gov
securemail.ncdor.gov
files.nc.gov
files.nc.gov
eprodasftp1.ncdor.gov
etestdaoenc3-1.prod.ncdor.gov
files.nc.gov
eprodasftp1.ncdor.gov
files.nc.gov
etestafsetof1.preprod.ncdor.gov
files.nc.gov
micore1.ncdor.gov
files.nc.gov
files.nc.gov
edevtasftp1.ncdor.gov
files.nc.gov
misentry1.ncdor.gov
etestafsetof1.preprod.ncdor.gov
sharefile.ncdor.gov
files.nc.gov
spradp1intftps.prod.ncdor.gov
securemail.ncdor.gov
files.nc.gov
files.nc.gov
securemail.ncdor.gov
ppradp2intftps.prod.ncdor.gov
files.nc.gov
files.nc.gov
micore1.ncdor.gov
files.nc.gov
files.nc.gov
etestaftp1.preprod.ncdor.gov
files.nc.gov
files.nc.gov
files.nc.gov
unityforms.ncdor.gov
files.nc.gov
ncdor.gov
files.nc.gov
files.nc.gov
files.nc.gov
files.nc.gov
files.nc.gov
ncdor.gov
misentry1.ncdor.gov
etrngafsetof1.preprod.ncdor.gov
sharefile.ncdor.gov
files.nc.gov
ncdor.gov
ncdor.gov
files.nc.gov
files.nc.gov
exchange.ncdor.gov
files.nc.gov
dot-6033-fw.ncdor.gov
files.nc.gov
eprodaftp1.prod.ncdor.gov
files.nc.gov
files.nc.gov
prodwas4.ncdor.gov
intune-dev.ncdor.gov
files.nc.gov
ncdor.gov
files.nc.gov
ncdor.gov
eprodasftp1.ncdor.gov
files.nc.gov
etrngafsetof1.preprod.ncdor.gov
ncdor.gov
etrngasftp1.ncdor.gov
eservices-test.ncdor.gov
files.nc.gov
eprodasftp1.ncdor.gov
edevtafsetof1.dev.ncdor.gov
misentry2.ncdor.gov
eservices-test.ncdor.gov
misentry2.ncdor.gov
misentry1.ncdor.gov
dornc.com
wdevtaftp1.dev.ncdor.gov
files.nc.gov
misentry1.ncdor.gov
files.nc.gov
files.nc.gov
edevtafsetof1.dev.ncdor.gov
misentry2.ncdor.gov
ncdor.gov
misentry1.ncdor.gov
ncdor.gov
misentry2.ncdor.gov
files.nc.gov
etrngasftp1.ncdor.gov
files.nc.gov
ppradp2intftps.prod.ncdor.gov
files.nc.gov
edevtasftp1.ncdor.gov
files.nc.gov
prodwas4.ncdor.gov
edevtafsetof1.dev.ncdor.gov
misentry2.ncdor.gov
securemail.ncdor.gov
files.nc.gov
files.nc.gov
eprodasftp1.ncdor.gov
etestdaoenc3-1.prod.ncdor.gov
files.nc.gov
eprodasftp1.ncdor.gov
files.nc.gov
etestafsetof1.preprod.ncdor.gov
files.nc.gov
micore1.ncdor.gov
files.nc.gov
files.nc.gov
edevtasftp1.ncdor.gov
files.nc.gov
misentry1.ncdor.gov
etestafsetof1.preprod.ncdor.gov
sharefile.ncdor.gov
files.nc.gov
spradp1intftps.prod.ncdor.gov
securemail.ncdor.gov
files.nc.gov
files.nc.gov
securemail.ncdor.gov
ppradp2intftps.prod.ncdor.gov
files.nc.gov
files.nc.gov
micore1.ncdor.gov
files.nc.gov
files.nc.gov
etestaftp1.preprod.ncdor.gov
files.nc.gov
files.nc.gov
files.nc.gov
unityforms.ncdor.gov
files.nc.gov
ncdor.gov
files.nc.gov
files.nc.gov
files.nc.gov
files.nc.gov
files.nc.gov
ncdor.gov
misentry1.ncdor.gov
etrngafsetof1.preprod.ncdor.gov
sharefile.ncdor.gov
files.nc.gov
ncdor.gov
ncdor.gov
files.nc.gov
files.nc.gov
exchange.ncdor.gov
files.nc.gov
dot-6033-fw.ncdor.gov
files.nc.gov
eprodaftp1.prod.ncdor.gov
files.nc.gov
files.nc.gov
prodwas4.ncdor.gov
intune-dev.ncdor.gov
files.nc.gov
ncdor.gov
files.nc.gov
ncdor.gov
eprodasftp1.ncdor.gov
files.nc.gov
etrngafsetof1.preprod.ncdor.gov
ncdor.gov
etrngasftp1.ncdor.gov
eservices-test.ncdor.gov
files.nc.gov
eprodasftp1.ncdor.gov
edevtafsetof1.dev.ncdor.gov
misentry2.ncdor.gov
eservices-test.ncdor.gov
misentry2.ncdor.gov
misentry1.ncdor.gov
dornc.com
wdevtaftp1.dev.ncdor.gov
files.nc.gov
misentry1.ncdor.gov
files.nc.gov
files.nc.gov
edevtafsetof1.dev.ncdor.gov
misentry2.ncdor.gov
ncdor.gov
misentry1.ncdor.gov
ncdor.gov
misentry2.ncdor.gov
files.nc.gov
etrngasftp1.ncdor.gov
files.nc.gov
ppradp2intftps.prod.ncdor.gov
files.nc.gov
edevtasftp1.ncdor.gov
files.nc.gov
Certificate
The complete raw certificate details for eservices-test.ncdor.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIQBwTZnwTb+oRzYfZaW4jhtzANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTkwODA3MDAwMDAwWhcNMjAwODA3MTIw MDAwWjCBpzELMAkGA1UEBhMCVVMxFzAVBgNVBAgTDk5vcnRoIENhcm9saW5hMRAw DgYDVQQHEwdSYWxlaWdoMTgwNgYDVQQKEy9FeGVjdXRpdmUgT2ZmaWNlIG9mIHRo ZSBTdGF0ZSBvZiBOb3J0aCBDYXJvbGluYTEQMA4GA1UECxMHUmV2ZW51ZTEhMB8G A1UEAxMYZXNlcnZpY2VzLXRlc3QubmNkb3IuZ292MIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAt5ncpQqn4V6tFN5Yam5b5oiflMQcSyn+ft4yNRtRslaQ 1xXcy/Q9wQc7QC2Gb7rMSSXNCJ5RQ882hCCa+m6P8+LcaX+loYhiGHD2NqX3H2aP bCNU3CoPl+Qa5AsegArrU/CEzUrNCAPmlwwAqaAcUfVOJPpP7bS7pKkgy8kmMRd0 k7g73kCYEdE+c+QRFtn3o5WBfKK2S4SemgRpc7ttTfWVkJL9TPS+4/mjYArVCpdV dTtKrRPWBDI5K4u7nIRYqRnLzVnCHUB5MfXU92slq7CaE+dfRTXaclHz4B0hUQ3x sB3qBvGDmFESrrESbRutV4UF7PmT8bLLhOw6BpVFWQIDAQABo4IB9TCCAfEwHwYD VR0jBBgwFoAUJG4rLdBqklFRJWkBqppHponnQCAwHQYDVR0OBBYEFArn0+2DLfJd jVrGutJ7x2MA2FjKMCMGA1UdEQQcMBqCGGVzZXJ2aWNlcy10ZXN0Lm5jZG9yLmdv djAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MHcGA1UdHwRwMG4wNaAzoDGGL2h0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdp Q2VydEdsb2JhbENBRzIuY3JsMDWgM6Axhi9odHRwOi8vY3JsNC5kaWdpY2VydC5j b20vRGlnaUNlcnRHbG9iYWxDQUcyLmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwB ATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgG BmeBDAECAjB0BggrBgEFBQcBAQRoMGYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw LmRpZ2ljZXJ0LmNvbTA+BggrBgEFBQcwAoYyaHR0cDovL2NhY2VydHMuZGlnaWNl cnQuY29tL0RpZ2lDZXJ0R2xvYmFsQ0FHMi5jcnQwCQYDVR0TBAIwADATBgorBgEE AdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWrrwAvbuQUPEVjb5WGv iJJA6xHBnz9ur50sz1tS337PXpsoLxVXoEGfWYYAkA+GW3h+w5AZVUtTt63M4LRP gXsYGiRwU6UBN3RAGCoseLAehl6BK5zbWhQb4uuYicj8cMG5VZ3HPtOTDpEqtLm2 xBiaBi+A9lOsalsccodEJyNt67KxVP4Lu81zgah1SwPEwrnvn2Wf/p0AuJ476E0M VgbwRyzsInmEGcx65nlMDfET0VZD/YXlaOxxt1OGTLAny6KVYZBDYMNyMVve26n7 guCSpLkTQgncs6SJoGDac6w6NjNUIMpja+GBCLF48D+n7UYgXtQtcV7G+zYX5ZbF Fw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5ncpQqn4V6tFN5Yam5b 5oiflMQcSyn+ft4yNRtRslaQ1xXcy/Q9wQc7QC2Gb7rMSSXNCJ5RQ882hCCa+m6P 8+LcaX+loYhiGHD2NqX3H2aPbCNU3CoPl+Qa5AsegArrU/CEzUrNCAPmlwwAqaAc UfVOJPpP7bS7pKkgy8kmMRd0k7g73kCYEdE+c+QRFtn3o5WBfKK2S4SemgRpc7tt TfWVkJL9TPS+4/mjYArVCpdVdTtKrRPWBDI5K4u7nIRYqRnLzVnCHUB5MfXU92sl q7CaE+dfRTXaclHz4B0hUQ3xsB3qBvGDmFESrrESbRutV4UF7PmT8bLLhOw6BpVF WQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9329779039594260430038561794466308535 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-07 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Raleigh' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Executive Office of the State of North Carolina' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Revenue' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eservices-test.ncdor.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23177481936185292335261151722837826052473642289305788908570281285480607882155663723175058835251305254143366212798484582201303482948524805044446918945734980325388551192610529669933802069411609646971841783538404776144598274606916270730057272979714343637173137098510371744354056117441189698978278478215334063779176848476674106703546213744322429766016210491917417446211586883420196530471964040457065773471193697412769673108532632420283437960114962660458520591837037486781010655545176982365641756634850514376818362555115048297606856863181547711644181586471702586614629902601128445410032420655096753644560982464116026590553 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0ae7d3ed832df25d8d5ac6bad27bc76300d858ca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices-test.ncdor.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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