mavent.com
- Ellie Mae Inc. -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0c:63:69:5c:3c:58:7b:0b:47:d1:03:89:13:c1:da:4a was issued on by DigiCert Inc.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Ellie Mae Inc.
Organization:
Ellie Mae Inc.
State / Province:
California
Locality: Pleasanton
Country: US
Locality: Pleasanton
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:63:69:5c:3c:58:7b:0b:47:d1:03:89:13:c1:da:4aSerial Number (int): 16466910299089340268357067529515031114
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: d5:37:11:ca:e7:5b:e1:30:e1:d3:29:5e:b3:92:9c:3a:5a:82:11:5f
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 4c:ac:22:dd:b5:17:94:e8:76:5e:09:0d:a5:0b:53:11:d5:27:c1:8d
Fingerprint (sha256): 65:a2:65:53:a4:df:74:9f:d4:63:21:0e:45:84:f3:c2:4c:f6:c3:ed:36:ac:6f:b8:44:e5:63:70:7b:3c:7b:dc
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate mavent.com
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mavent.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mavent.com
dcui-customer.int2.datalake.rd.elliemae.io
portalui.data.elliemae.com
service.elliemae.com
comply01.mavent.com
comply06bcptest.mavent.com
comply05bcptest.mavent.com
comply05.mavent.com
portal1.data.elliemae.com
dcui-customer.dsint2.datalake.rd.elliemae.io
dcui-customer.qa.datalake.rd.elliemae.io
comply07bcptest.mavent.com
portalapi.data.elliemae.com
comply07.mavent.com
comply01bcptest.mavent.com
comply06.mavent.com
dcui-customer.dsqa.datalake.rd.elliemae.io
pilot01.mavent.com
dcui-customer.int2.datalake.rd.elliemae.io
portalui.data.elliemae.com
service.elliemae.com
comply01.mavent.com
comply06bcptest.mavent.com
comply05bcptest.mavent.com
comply05.mavent.com
portal1.data.elliemae.com
dcui-customer.dsint2.datalake.rd.elliemae.io
dcui-customer.qa.datalake.rd.elliemae.io
comply07bcptest.mavent.com
portalapi.data.elliemae.com
comply07.mavent.com
comply01bcptest.mavent.com
comply06.mavent.com
dcui-customer.dsqa.datalake.rd.elliemae.io
pilot01.mavent.com
Other certificates including the domain name mavent.com
(limited to 100 certificates)
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
*.mavent.com
*.mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
*.mavent.com
mavent.com
*.mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
*.mavent.com
*.mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
*.mavent.com
mavent.com
*.mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
Certificate
The complete raw certificate details for mavent.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIQDGNpXDxYewtH0QOJE8HaSjANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwNjEwMDAwMDAwWhcN MjAwNTA3MTIwMDAwWjBlMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p YTETMBEGA1UEBxMKUGxlYXNhbnRvbjEXMBUGA1UEChMORWxsaWUgTWFlIEluYy4x EzARBgNVBAMTCm1hdmVudC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDOMROR62XLWWY3jbj/Oa3zhCjvhXJKF2nzV+PIxV8Y2sHlRsbpEK5Zp6B1 DfMWjmefWsRrTk8No2QJWRUHYcJnHrWDucOMA8kmT6W0U5rw5bMTQLxfo1bi9GE3 s4VBu6/Vg+ITxsXORtwqz+yNYD7iaD4bgnFDXGoVSg4rPnQQKDKMoyDLKvtl1VDq 8Fqm4ZJZOMF4a6E3qDNxV4zufxHdOFrU9wUV9pb/Hr5aGif7RCHvenvQ+SYtP8+B zDICDLyNbOmQYzD9outnFRGt00TZJVDmWAhfDbOeJw9S0VNeGks0iyPfmq26I/3g wt8zJK0x0BUwEwwPfR3JwOnisMoPAgMBAAGjggPbMIID1zAfBgNVHSMEGDAWgBQP gGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQU1TcRyudb4TDh0yles5KcOlqC EV8wggILBgNVHREEggICMIIB/oIKbWF2ZW50LmNvbYIqZGN1aS1jdXN0b21lci5p bnQyLmRhdGFsYWtlLnJkLmVsbGllbWFlLmlvghpwb3J0YWx1aS5kYXRhLmVsbGll bWFlLmNvbYIUc2VydmljZS5lbGxpZW1hZS5jb22CE2NvbXBseTAxLm1hdmVudC5j b22CGmNvbXBseTA2YmNwdGVzdC5tYXZlbnQuY29tghpjb21wbHkwNWJjcHRlc3Qu bWF2ZW50LmNvbYITY29tcGx5MDUubWF2ZW50LmNvbYIZcG9ydGFsMS5kYXRhLmVs bGllbWFlLmNvbYIsZGN1aS1jdXN0b21lci5kc2ludDIuZGF0YWxha2UucmQuZWxs aWVtYWUuaW+CKGRjdWktY3VzdG9tZXIucWEuZGF0YWxha2UucmQuZWxsaWVtYWUu aW+CGmNvbXBseTA3YmNwdGVzdC5tYXZlbnQuY29tghtwb3J0YWxhcGkuZGF0YS5l bGxpZW1hZS5jb22CE2NvbXBseTA3Lm1hdmVudC5jb22CGmNvbXBseTAxYmNwdGVz dC5tYXZlbnQuY29tghNjb21wbHkwNi5tYXZlbnQuY29tgipkY3VpLWN1c3RvbWVy LmRzcWEuZGF0YWxha2UucmQuZWxsaWVtYWUuaW+CEnBpbG90MDEubWF2ZW50LmNv bTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2Nh LXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc3Nj YS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUF BwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB8Bggr BgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNv bTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lD ZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkC BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyqq3s8DS/cKolhybs3e5aII4E ub1ZLfBSpApnT5kFk8BYKffOl4xhE3rVsEeJUF/qbXLOb8kz50pfBQU6Llb589y/ ByQNFJzbH2rawoYgMD59bUGcMge1m+s68vMISHGdaPV9IsoBCYtp5Xft5ZzGry+1 PTs9mBkqBtjR1tFn0eoZn+8ii/4Y7VvmrKElWD0t7lBAXGsDnJWwRCJom45j5YQG Be8mw3Mb/uPvgg8nJYHJyeobLvhkZE4XJDGxRlKpaV1lEOnMYh/rZAtLpGRJSC7X 54+QLc3TDfuqmO8wXpLJRFXQUstIMNUxVsQQlp0SB4F+nZ5kKfJ4mKeLRyXa -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjETketly1lmN424/zmt 84Qo74VyShdp81fjyMVfGNrB5UbG6RCuWaegdQ3zFo5nn1rEa05PDaNkCVkVB2HC Zx61g7nDjAPJJk+ltFOa8OWzE0C8X6NW4vRhN7OFQbuv1YPiE8bFzkbcKs/sjWA+ 4mg+G4JxQ1xqFUoOKz50ECgyjKMgyyr7ZdVQ6vBapuGSWTjBeGuhN6gzcVeM7n8R 3Tha1PcFFfaW/x6+Whon+0Qh73p70PkmLT/PgcwyAgy8jWzpkGMw/aLrZxURrdNE 2SVQ5lgIXw2znicPUtFTXhpLNIsj35qtuiP94MLfMyStMdAVMBMMD30dycDp4rDK DwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16466910299089340268357067529515031114 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ellie Mae Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mavent.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26029291320152954095766778260490551173300848112411529588263978363069403238786056622025145841430350833840164815001997915747823313256487986185078090270053654746150241488664472832824200006851515701291864733377801005663844993326387103911600047923572002768741008909509545068482772842464809665876610647729553211878967069980443202550071429855970254104624352869514784695641123725736631680136595100512278374711373118297603419765847698821041031423191503605765016035769516667659848397660206293374912786222840473067247971684283057632221761393969112965522898222444676218440835204804744572745421291342115856566366861154584938727951 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d53711cae75be130e1d3295eb3929c3a5a82115f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (514 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcui-customer.int2.datalake.rd.elliemae.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalui.data.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply01.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply06bcptest.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply05bcptest.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply05.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal1.data.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcui-customer.dsint2.datalake.rd.elliemae.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcui-customer.qa.datalake.rd.elliemae.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply07bcptest.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalapi.data.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply07.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply01bcptest.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply06.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcui-customer.dsqa.datalake.rd.elliemae.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot01.mavent.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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