checkoutuat.gendigital.com
- Gen Digital Inc. -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 01:79:11:8f:50:83:a1:03:55:b2:07:f1:ff:bc:56:e4 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Gen Digital Inc.
Organization:
Gen Digital Inc.
State / Province:
Arizona
Locality: Tempe
Country: US
Locality: Tempe
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 01:79:11:8f:50:83:a1:03:55:b2:07:f1:ff:bc:56:e4Serial Number (int): 1957852071176062064749583025087207140
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 00:1d:d8:5f:67:03:ca:d4:c0:46:ae:97:c3:09:e9:78:8d:7e:81:dd
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 53:3d:f3:c8:dc:88:70:a2:96:31:5f:23:13:de:d7:30:bc:8c:82:7b
Fingerprint (sha256): 6a:a5:6e:e4:9f:b2:5e:b4:50:02:1d:6a:bc:b7:ec:c7:8f:29:2d:6a:df:9c:f7:b6:04:4b:b9:c1:c0:b7:25:ff
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate checkoutuat.gendigital.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for checkoutuat.gendigital.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
checkoutuat.gendigital.com
checkout.nortonlifelock.com
checkout.nortonlifelock.com
Other certificates including the domain name gendigital.com
(limited to 100 certificates)
biz.gendigital.com
nlok-guest.nortonlifelock.com
geo-preview.gendigital.com
bizblog.gendigital.com
dev.gendigital.com
avastemail.gendigital.com
gencentral-cms.gendigital.com
gencentral.gendigital.com
gendigital.com
gencentral.gendigital.com
gencentral-cms.gendigital.com
bizemail.gendigital.com
avastlanding.gendigital.com
bizblog.gendigital.com
prod.gendigital.com
as2p.gendigital.com
qa.gendigital.com
greenhopper.gendigital.com
gencentral.gendigital.com
guidelines.gendigital.com
mft.gendigital.com
gms-qa.nortonlifelock.com
checkoutuat.gendigital.com
pub.gendigital.com
guidelines.gendigital.com
checkoutuat.gendigital.com
checkoutuat.gendigital.com
avastinfo.gendigital.com
greenhopper.gendigital.com
avastblog.gendigital.com
bizblog.gendigital.com
bizemail.gendigital.com
checkout.gendigital.com
stg.gendigital.com
benefits.gendigital.com
ideabox.gendigital.com
gendigital.com
checkout.gendigital.com
prod2.gendigital.com
checkoutdev.nortonlifelock.com
mft.gendigital.com
avastblog.gendigital.com
avastlanding.gendigital.com
prod.gendigital.com
dev.gendigital.com
investor.gendigital.com
mft-stg.gendigital.com
checkoutdev.nortonlifelock.com
dr.gendigital.com
gencentral.gendigital.com
mft-dev.gendigital.com
gencentral-cms.gendigital.com
newsroom.gendigital.com
avastbusiness.gendigital.com
avastlanding.gendigital.com
mft-stg.gendigital.com
avastbusiness.gendigital.com
biz.gendigital.com
newsroom.gendigital.com
avastportal.gendigital.com
nlok-guest.nortonlifelock.com
geo-preview.gendigital.com
bizblog.gendigital.com
dev.gendigital.com
avastemail.gendigital.com
gencentral-cms.gendigital.com
gencentral.gendigital.com
gendigital.com
gencentral.gendigital.com
gencentral-cms.gendigital.com
bizemail.gendigital.com
avastlanding.gendigital.com
bizblog.gendigital.com
prod.gendigital.com
as2p.gendigital.com
qa.gendigital.com
greenhopper.gendigital.com
gencentral.gendigital.com
guidelines.gendigital.com
mft.gendigital.com
gms-qa.nortonlifelock.com
checkoutuat.gendigital.com
pub.gendigital.com
guidelines.gendigital.com
checkoutuat.gendigital.com
checkoutuat.gendigital.com
avastinfo.gendigital.com
greenhopper.gendigital.com
avastblog.gendigital.com
bizblog.gendigital.com
bizemail.gendigital.com
checkout.gendigital.com
stg.gendigital.com
benefits.gendigital.com
ideabox.gendigital.com
gendigital.com
checkout.gendigital.com
prod2.gendigital.com
checkoutdev.nortonlifelock.com
mft.gendigital.com
avastblog.gendigital.com
avastlanding.gendigital.com
prod.gendigital.com
dev.gendigital.com
investor.gendigital.com
mft-stg.gendigital.com
checkoutdev.nortonlifelock.com
dr.gendigital.com
gencentral.gendigital.com
mft-dev.gendigital.com
gencentral-cms.gendigital.com
newsroom.gendigital.com
avastbusiness.gendigital.com
avastlanding.gendigital.com
mft-stg.gendigital.com
avastbusiness.gendigital.com
biz.gendigital.com
newsroom.gendigital.com
avastportal.gendigital.com
Certificate
The complete raw certificate details for checkoutuat.gendigital.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIQAXkRj1CDoQNVsgfx/7xW5DANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzExMjEwMDAwMDBa Fw0yNDExMjAyMzU5NTlaMG8xCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25h MQ4wDAYDVQQHEwVUZW1wZTEZMBcGA1UEChMQR2VuIERpZ2l0YWwgSW5jLjEjMCEG A1UEAxMaY2hlY2tvdXR1YXQuZ2VuZGlnaXRhbC5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQC07j4ie+vZxGfn5HziTWm6E4P+Fvh3E2Dipf2wWNom 8Y/28z+ssXg8hFBhqkSzbfKiray1c9LhLgl4q8V2XyJ7xWjFrX6/DTVgx19bie60 capPt1x4zXMtbr9yEKie2OpZZA2hwCUrQR1TkcCo0O2JFAqPoU+GLNfCjXNzPiqP gFSqnrJcVHPd/IcbtRD1Xz/2LCVQfsd82JBINQxa7QcNrhSFAFx/UZNjSMAMcNVt 48RlLdVogmfzM/v3Jy37yNe+92ySXBFJ8k0AUbIjmfUmvRroYPFO1iZijccfE61z ULa7S1Kbno7ds2KMEcPax1eK8MDFbWt5Pzth/XdQbYpjAgMBAAGjggItMIICKTAf BgNVHSMEGDAWgBS3a6LqqKqEjHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQUAB3YX2cD ytTARq6XwwnpeI1+gd0wQgYDVR0RBDswOYIaY2hlY2tvdXR1YXQuZ2VuZGlnaXRh bC5jb22CG2NoZWNrb3V0Lm5vcnRvbmxpZmVsb2NrLmNvbTA+BgNVHSAENzA1MDMG BmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9D UFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20v RGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpodHRwOi8v Y3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQu Y3JsMH8GCCsGAQUFBwEBBHMwcTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGln aWNlcnQuY29tMEkGCCsGAQUFBzAChj1odHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5j b20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3J0MAwGA1UdEwEB/wQC MAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAG7yYMvy 6a1vcwMfNuAlYFRjvjj4xAPV1+ESFr9zwbrMCHti28c8WzBthbhsfQFS9Cbs5Izm s5vnDw33yUFjhW2csk+r/xksmeMm84GGdIX1UdcsLVyw16kYNri9MPEhdhH6eRNM sp3YcSgyRfirm5U4VFxFkDfuG6aK867K9rG8vdNvsPMMNLh5J0JXqqLeacs5QAeJ vA3jvpI9XFfNYgaEQAYnEdZ5hkeW+91GwZ9ROG6Sz7Hg1khrH8faeW1IEHXFR24C kfuOP/sUvrWQXVXqLkULUDaQHXGbu7c/sWygdIrcx3kduv6oC659xV8d2IU8YWyY lNiGgPGtzmiKWXY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO4+Invr2cRn5+R84k1p uhOD/hb4dxNg4qX9sFjaJvGP9vM/rLF4PIRQYapEs23yoq2stXPS4S4JeKvFdl8i e8Voxa1+vw01YMdfW4nutHGqT7dceM1zLW6/chContjqWWQNocAlK0EdU5HAqNDt iRQKj6FPhizXwo1zcz4qj4BUqp6yXFRz3fyHG7UQ9V8/9iwlUH7HfNiQSDUMWu0H Da4UhQBcf1GTY0jADHDVbePEZS3VaIJn8zP79yct+8jXvvdsklwRSfJNAFGyI5n1 Jr0a6GDxTtYmYo3HHxOtc1C2u0tSm56O3bNijBHD2sdXivDAxW1reT87Yf13UG2K YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1957852071176062064749583025087207140 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tempe' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gen Digital Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'checkoutuat.gendigital.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22840376754617593586456799803515267294372056633726018035543010713125670581586967804036751565644787980621594707284622028844068887704429420440148737856136965245386719915602851824500631470601193250344460350018346263386266531716173695668638523571656916492072836143870024534505397775297847332994582698419656112855514612674341149659059816617492523263399119829618160607620973171520489178535630999493502525018582522923878024431538247181027008592187900427322109492998797139154335052691711472783324526235929642559771254574413838877802990483753908393796858094995412063602962318346149315892153375013410851879185494583037376957027 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 001dd85f6703cad4c046ae97c309e9788d7e81dd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkoutuat.gendigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.nortonlifelock.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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