webvpn.mcs.k12.ny.us
- Massena Central School District -
Issued by DigiCert High Assurance CA-3
About this certificate
This digital certificate with serial number 0f:f5:27:16:c0:26:46:02:ca:34:26:58:db:24:1d:26 was issued on by DigiCert Inc.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
Massena Central School District
Organization:
Massena Central School District
Organization unit: Technology
Organization unit: Technology
State / Province:
New York
Locality: Massena
Country: US
Locality: Massena
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:f5:27:16:c0:26:46:02:ca:34:26:58:db:24:1d:26Serial Number (int): 21211325483576280275470249489537965350
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 32:0f:e1:5f:b9:03:fc:08:6c:a3:52:21:b3:94:a5:5a:e1:34:d6:7d
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7
Fingerprint (sha1): 42:84:a5:ef:46:0a:a8:f9:c7:e2:d2:6d:52:ed:48:08:85:49:d5:17
Fingerprint (sha256): 6d:6f:52:59:aa:13:f2:fa:85:fe:39:6b:af:49:d9:19:c1:65:75:c1:35:54:96:98:5d:fb:c9:52:e1:40:e7:40
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ca3-g3.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g3.crl
Check the revocation status for certificate webvpn.mcs.k12.ny.us
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for webvpn.mcs.k12.ny.us
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
webvpn.mcs.k12.ny.us
kvm.mcs.k12.ny.us
orion.mcs.k12.ny.us
pegasus.mcs.k12.ny.us
gemini.mcs.k12.ny.us
kvm.mcs.k12.ny.us
orion.mcs.k12.ny.us
pegasus.mcs.k12.ny.us
gemini.mcs.k12.ny.us
Other certificates including the domain name mcs.k12.ny.us
(limited to 100 certificates)
admin.bronxbetterlearning.net
ehkeys.ossdms.org
academy.pycsd.org
2.bronxbetterlearning.net
marvin.wisd.org
admin.southeast.varnett.org
2.bronxbetterlearning.net
academy.pycsd.org
webvpn.mcs.k12.ny.us
2.bronxbetterlearning.net
webvpn.mcs.k12.ny.us
academy.pycsd.org
2.bronxbetterlearning.net
mcs.k12.ny.us
2.bronxbetterlearning.org
admin.bcca.bibbed.org
mcs.k12.ny.us
olson.mpusd.net
admin.shackelford.wisd.org
stbern.net
2.bronxbetterlearning.net
wes.bibbed.org
admin.keillerleaders.org
admin.crumpton.mpusd.net
bronxbetterlearning.net
rsu14.org
2.bronxbetterlearning.net
es.glendaleacademy.org
admin.athletics.deperek12.org
mcs.k12.ny.us
3rcs.org
academy.pycsd.org
2.bronxbetterlearning.net
2.bronxbetterlearning.net
admin.elc.aacs.net
admin.mas.mpusd.net
webvpn.mcs.k12.ny.us
mcs.k12.ny.us
academy.pycsd.org
admin.delreywoods.mpusd.net
stnorbertschool.org
academy.pycsd.org
mcs.k12.ny.us
2.bronxbetterlearning.net
admin.pennekampschool.org
2.bronxbetterlearning.org
admin.stjoseph-school.org
2.bronxbetterlearning.net
mcs.k12.ny.us
mcs.k12.ny.us
www.stbern.net
admin.vapa.mvusd.net
mcs.k12.ny.us
2.bronxbetterlearning.org
admin.es.pycsd.org
academy.pycsd.org
admin.keillerleaders.org
webvpn.mcs.k12.ny.us
admin.cchs.mpusd.net
mcs.k12.ny.us
2.bronxbetterlearning.net
webvpn.mcs.k12.ny.us
2.bronxbetterlearning.org
2.bronxbetterlearning.org
2.bronxbetterlearning.net
mcs.k12.ny.us
stroseschoolwilmington.org
2.bronxbetterlearning.org
admin.casee.chebschools.org
2.bronxbetterlearning.org
academy.pycsd.org
academy.pycsd.org
wcms.mpusd.net
lennox.k12.ca.us
admin.stbern.net
2.bronxbetterlearning.org
admin.bes.lennox.k12.ca.us
mcs.k12.ny.us
2.bronxbetterlearning.net
mcs.k12.ny.us
admin.stbern.net
ehkeys.ossdms.org
academy.pycsd.org
2.bronxbetterlearning.net
marvin.wisd.org
admin.southeast.varnett.org
2.bronxbetterlearning.net
academy.pycsd.org
webvpn.mcs.k12.ny.us
2.bronxbetterlearning.net
webvpn.mcs.k12.ny.us
academy.pycsd.org
2.bronxbetterlearning.net
mcs.k12.ny.us
2.bronxbetterlearning.org
admin.bcca.bibbed.org
mcs.k12.ny.us
olson.mpusd.net
admin.shackelford.wisd.org
stbern.net
2.bronxbetterlearning.net
wes.bibbed.org
admin.keillerleaders.org
admin.crumpton.mpusd.net
bronxbetterlearning.net
rsu14.org
2.bronxbetterlearning.net
es.glendaleacademy.org
admin.athletics.deperek12.org
mcs.k12.ny.us
3rcs.org
academy.pycsd.org
2.bronxbetterlearning.net
2.bronxbetterlearning.net
admin.elc.aacs.net
admin.mas.mpusd.net
webvpn.mcs.k12.ny.us
mcs.k12.ny.us
academy.pycsd.org
admin.delreywoods.mpusd.net
stnorbertschool.org
academy.pycsd.org
mcs.k12.ny.us
2.bronxbetterlearning.net
admin.pennekampschool.org
2.bronxbetterlearning.org
admin.stjoseph-school.org
2.bronxbetterlearning.net
mcs.k12.ny.us
mcs.k12.ny.us
www.stbern.net
admin.vapa.mvusd.net
mcs.k12.ny.us
2.bronxbetterlearning.org
admin.es.pycsd.org
academy.pycsd.org
admin.keillerleaders.org
webvpn.mcs.k12.ny.us
admin.cchs.mpusd.net
mcs.k12.ny.us
2.bronxbetterlearning.net
webvpn.mcs.k12.ny.us
2.bronxbetterlearning.org
2.bronxbetterlearning.org
2.bronxbetterlearning.net
mcs.k12.ny.us
stroseschoolwilmington.org
2.bronxbetterlearning.org
admin.casee.chebschools.org
2.bronxbetterlearning.org
academy.pycsd.org
academy.pycsd.org
wcms.mpusd.net
lennox.k12.ca.us
admin.stbern.net
2.bronxbetterlearning.org
admin.bes.lennox.k12.ca.us
mcs.k12.ny.us
2.bronxbetterlearning.net
mcs.k12.ny.us
admin.stbern.net
Certificate
The complete raw certificate details for webvpn.mcs.k12.ny.us in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIQD/UnFsAmRgLKNCZY2yQdJjANBgkqhkiG9w0BAQUFADBm MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSUwIwYDVQQDExxEaWdpQ2VydCBIaWdoIEFzc3VyYW5j ZSBDQS0zMB4XDTEyMDExNzAwMDAwMFoXDTE1MDEyMTEyMDAwMFowgZAxCzAJBgNV BAYTAlVTMREwDwYDVQQIEwhOZXcgWW9yazEQMA4GA1UEBxMHTWFzc2VuYTEoMCYG A1UEChMfTWFzc2VuYSBDZW50cmFsIFNjaG9vbCBEaXN0cmljdDETMBEGA1UECxMK VGVjaG5vbG9neTEdMBsGA1UEAxMUd2VidnBuLm1jcy5rMTIubnkudXMwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaLBpPPggUhF9Vv6axK3jwQO2smLRk xHsSNVF5Jg1XH8x1M3ufU58dj6ObBJ9e7PqZzlaFvjOUAfw//vDYOANXWQbOviyT 7uyFZHglAYZEYwCbwsSDLZCoB/8ZnDAXHIRkxlXnNz535on6Jlo8TgUlNk9uREoj o7K5NCetvjUGJp5K3VIWNZLCs84L/bVG43pCnXFP20WtgQ05TUIFI9Z690fRppnm 1Uf+1qRXYucL1SLMTwNpXzrEL5u1GVyNbbNSmsTkCoF+9DZ/T7MQSiQ7OvfSDVL6 4aS9S6s1tINcOrKgTfJ0W+uYPtn0rx31WTmcAYoqKKwU2J1BrbzNVbMTAgMBAAGj ggOdMIIDmTAfBgNVHSMEGDAWgBRQ6nOJ2yn7EI+e5QEg1N55mUiD9zAdBgNVHQ4E FgQUMg/hX7kD/Ahso1Ihs5SlWuE01n0wdAYDVR0RBG0wa4IUd2VidnBuLm1jcy5r MTIubnkudXOCEWt2bS5tY3MuazEyLm55LnVzghNvcmlvbi5tY3MuazEyLm55LnVz ghVwZWdhc3VzLm1jcy5rMTIubnkudXOCFGdlbWluaS5tY3MuazEyLm55LnVzMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwXwYD VR0fBFgwVjApoCegJYYjaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL2NhMy1nMy5j cmwwKaAnoCWGI2h0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9jYTMtZzMuY3JsMIIB xAYDVR0gBIIBuzCCAbcwggGzBglghkgBhv1sAQEwggGkMDoGCCsGAQUFBwIBFi5o dHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9zc2wtY3BzLXJlcG9zaXRvcnkuaHRtMIIB ZAYIKwYBBQUHAgIwggFWHoIBUgBBAG4AeQAgAHUAcwBlACAAbwBmACAAdABoAGkA cwAgAEMAZQByAHQAaQBmAGkAYwBhAHQAZQAgAGMAbwBuAHMAdABpAHQAdQB0AGUA cwAgAGEAYwBjAGUAcAB0AGEAbgBjAGUAIABvAGYAIAB0AGgAZQAgAEQAaQBnAGkA QwBlAHIAdAAgAEMAUAAvAEMAUABTACAAYQBuAGQAIAB0AGgAZQAgAFIAZQBsAHkA aQBuAGcAIABQAGEAcgB0AHkAIABBAGcAcgBlAGUAbQBlAG4AdAAgAHcAaABpAGMA aAAgAGwAaQBtAGkAdAAgAGwAaQBhAGIAaQBsAGkAdAB5ACAAYQBuAGQAIABhAHIA ZQAgAGkAbgBjAG8AcgBwAG8AcgBhAHQAZQBkACAAaABlAHIAZQBpAG4AIABiAHkA IAByAGUAZgBlAHIAZQBuAGMAZQAuMHsGCCsGAQUFBwEBBG8wbTAkBggrBgEFBQcw AYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEUGCCsGAQUFBzAChjlodHRwOi8v Y2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRIaWdoQXNzdXJhbmNlQ0EtMy5j cnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQUFAAOCAQEABK4veQVglLDwg2PA o0gLCG5zh81HlzA1BK8j5oxcqidYJXq90yQK5/c2TvnMnKo8Th1auIkDWaH6S2J2 yB5XmOaAVcZASrgy+7V8tMe1qQH35J8Qwob3buvox/73/0aoTNkLNQOc/PkaF0/I lai2a6rpdyv4HUK5qi4AHKJw2cWip9K7qprRHsGZpzk4fmty+EJ+iN1lz7a6dJ5/ tf7YrZIJ26Qnvs22npSAtEjs++iTv/kX0uhAH240XdIOT7jqzXR2hX3+Cm7kGEV7 xqe6ndeKgseqzcESKpd4qe4HTvLbHj6ZtPG70O6BrjvIT6H8mqvbcJU7CfjwM2BQ X3kFoA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iwaTz4IFIRfVb+msSt4 8EDtrJi0ZMR7EjVReSYNVx/MdTN7n1OfHY+jmwSfXuz6mc5Whb4zlAH8P/7w2DgD V1kGzr4sk+7shWR4JQGGRGMAm8LEgy2QqAf/GZwwFxyEZMZV5zc+d+aJ+iZaPE4F JTZPbkRKI6OyuTQnrb41BiaeSt1SFjWSwrPOC/21RuN6Qp1xT9tFrYENOU1CBSPW evdH0aaZ5tVH/takV2LnC9UizE8DaV86xC+btRlcjW2zUprE5AqBfvQ2f0+zEEok Ozr30g1S+uGkvUurNbSDXDqyoE3ydFvrmD7Z9K8d9Vk5nAGKKiisFNidQa28zVWz EwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21211325483576280275470249489537965350 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-01-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-21 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massena' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massena Central School District' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technology' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webvpn.mcs.k12.ny.us' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27541698369852162565890514836091145401132604877020677470079857138573759295516397014525497438105946980257198435609164492512946021417514390625664275794175424633353062501366390074511494038951420370857170871841851619593895778157209105653696490587408373298965452296433220135565034683209082716593575697049969992417134048404511053569603046581543100057051994688984466681600564154907875695324568546401449152333521222058382416670219237552929137725611880970986331151650942304735308983750935924702419594296412489501056482874886729173587729059654534045320624058478541015014184025382189367295961339888712036638145468951253854040851 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 320fe15fb903fc086ca35221b394a55ae134d67d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webvpn.mcs.k12.ny.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kvm.mcs.k12.ny.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orion.mcs.k12.ny.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pegasus.mcs.k12.ny.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemini.mcs.k12.ny.us' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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