remoteapps.heatcraft.com.au
- Heatcraft Australia Pty Ltd -
Issued by DigiCert SHA2 Extended Validation Server CA
About this certificate
This digital certificate with serial number 07:d9:bc:e6:fb:09:5d:ae:72:30:4c:9e:30:47:8f:3b was issued on by DigiCert Inc.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Heatcraft Australia Pty Ltd
Company registration number:
000 056 717
Organization: Heatcraft Australia Pty Ltd
Organization: Heatcraft Australia Pty Ltd
Address:
286 Horsley Road
Postal code: 2214
State / Province: New South Wales
Locality: Milperra
Country: AU
Postal code: 2214
State / Province: New South Wales
Locality: Milperra
Country: AU
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:d9:bc:e6:fb:09:5d:ae:72:30:4c:9e:30:47:8f:3bSerial Number (int): 10435155781971393696133796100217212731
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 2b:e7:96:65:10:c5:02:63:37:de:24:45:58:aa:a0:5d:f0:74:53:f8
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f
Fingerprint (sha1): a2:5a:bf:de:b9:5d:47:ba:c0:b9:7e:15:09:9b:bc:48:6c:8d:e8:7d
Fingerprint (sha256): 6e:7d:a0:4a:96:28:99:b8:5c:3e:b6:82:ab:a2:56:43:52:4a:09:84:10:ad:2a:cd:f2:48:38:ac:d4:6d:c9:ea
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g1.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g1.crl
Check the revocation status for certificate remoteapps.heatcraft.com.au
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for remoteapps.heatcraft.com.au
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
remoteapps.heatcraft.com.au
secure.heatcraft.com.au
discoverReceiver.heatcraft.com.au
mdm.heatcraft.com.au
secure.heatcraft.com.au
discoverReceiver.heatcraft.com.au
mdm.heatcraft.com.au
Other certificates including the domain name heatcraft.com.au
(limited to 100 certificates)
heatcraft-vpn.heatcraft.com.au
secure.heatcraft.com.au
secure.heatcraft.com.au
myapps.heatcraft.com.au
webmail.heatcraft.com.au
webmail.heatcraft.com.au
exchange.heatcraft.com.au
exchange.heatcraft.com.au
secure.heatcraft.com.au
heatcraft-vpn.heatcraft.com.au
exchange.heatcraft.com.au
storefront.aunz.lennoxintl.com
remoteapps.heatcraft.com.au
exchange.heatcraft.com.au
remoteapps.heatcraft.com.au
secure.heatcraft.com.au
secure.heatcraft.com.au
heatcraft-vpn.heatcraft.com.au
heatcraft-vpn.heatcraft.com.au
secure.heatcraft.com.au
milex13mbx01.aunz.lennoxintl.com
secure.heatcraft.com.au
secure.heatcraft.com.au
heatcraft-vpn.heatcraft.com.au
sslvpn.heatcraft.com.au
heatcraft-vpn.heatcraft.com.au
exchange.heatcraft.com.au
myapps.heatcraft.com.au
traveler.heatcraft.com.au
heatcraft-vpn.heatcraft.com.au
citrixgateway.heatcraft.com.au
secure.heatcraft.com.au
secure.heatcraft.com.au
myapps.heatcraft.com.au
webmail.heatcraft.com.au
webmail.heatcraft.com.au
exchange.heatcraft.com.au
exchange.heatcraft.com.au
secure.heatcraft.com.au
heatcraft-vpn.heatcraft.com.au
exchange.heatcraft.com.au
storefront.aunz.lennoxintl.com
remoteapps.heatcraft.com.au
exchange.heatcraft.com.au
remoteapps.heatcraft.com.au
secure.heatcraft.com.au
secure.heatcraft.com.au
heatcraft-vpn.heatcraft.com.au
heatcraft-vpn.heatcraft.com.au
secure.heatcraft.com.au
milex13mbx01.aunz.lennoxintl.com
secure.heatcraft.com.au
secure.heatcraft.com.au
heatcraft-vpn.heatcraft.com.au
sslvpn.heatcraft.com.au
heatcraft-vpn.heatcraft.com.au
exchange.heatcraft.com.au
myapps.heatcraft.com.au
traveler.heatcraft.com.au
heatcraft-vpn.heatcraft.com.au
citrixgateway.heatcraft.com.au
Certificate
The complete raw certificate details for remoteapps.heatcraft.com.au in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHyjCCBrKgAwIBAgIQB9m85vsJXa5yMEyeMEePOzANBgkqhkiG9w0BAQsFADB1 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTE1MTAwODAwMDAwMFoXDTE3MTEwODEy MDAwMFowgfoxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYB BAGCNzwCAQMTAkFVMRQwEgYDVQQFEwswMDAgMDU2IDcxNzEZMBcGA1UECRMQMjg2 IEhvcnNsZXkgUm9hZDENMAsGA1UEERMEMjIxNDELMAkGA1UEBhMCQVUxGDAWBgNV BAgTD05ldyBTb3V0aCBXYWxlczERMA8GA1UEBxMITWlscGVycmExJDAiBgNVBAoT G0hlYXRjcmFmdCBBdXN0cmFsaWEgUHR5IEx0ZDEkMCIGA1UEAxMbcmVtb3RlYXBw cy5oZWF0Y3JhZnQuY29tLmF1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4w0f38411kKuXlwx1wqLCGW5V5r7SKEhMe6AIgT2xz4q5ZOqa3JkRgnv/BO6 MjQJeqqt2V1m/I2GbwQcIPp+nceCCeUN9gZyQCQhBg2sQTBocc8DDFXXfYdkcEyn W9CA+9mijE+q3q+sz9bblGtA3XoDJmOE4CTKUuoAZvEPQBp6w8fGwQB17/s39ZXI lfNW2nfF4WGPB4kfoaxyrJ4iR22MdxL3AiuiXRdvGk2Dk/sA+/D/UixryEWm7cbC jqNIA69VLXn0XHnHcyBfCAlgUT9TGJL49V6Ij2naIewBgda59qCYWRJuRU6ZkZ1o 6P0mm4ikQTuBIyOEvju4cip+awIDAQABo4IDzjCCA8owHwYDVR0jBBgwFoAUPdNQ pdagre7zSmAKZdMh1Pj41g8wHQYDVR0OBBYEFCvnlmUQxQJjN94kRViqoF3wdFP4 MHgGA1UdEQRxMG+CG3JlbW90ZWFwcHMuaGVhdGNyYWZ0LmNvbS5hdYIXc2VjdXJl LmhlYXRjcmFmdC5jb20uYXWCIWRpc2NvdmVyUmVjZWl2ZXIuaGVhdGNyYWZ0LmNv bS5hdYIUbWRtLmhlYXRjcmFmdC5jb20uYXUwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5odHRw Oi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1ldi1zZXJ2ZXItZzEuY3JsMDSgMqAw hi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1ldi1zZXJ2ZXItZzEuY3Js MEsGA1UdIAREMEIwNwYJYIZIAYb9bAIBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwBwYFZ4EMAQEwgYgGCCsGAQUFBwEBBHwwejAk BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFIGCCsGAQUFBzAC hkZodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyRXh0ZW5k ZWRWYWxpZGF0aW9uU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwggGABgorBgEE AdZ5AgQCBIIBcASCAWwBagB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7I DdwQAAABUKLL69cAAAQDAEcwRQIgdB+K2emxlabgb/t8CMkvOTxc0d9GOyf73j9f xNpKw8kCIQDx/9are00AJ7s12xw4ZZ4heRiI952MUtOZ2TNS6P2LsAB3AGj2mPgf ZIK+OozuuSgdTPxxUV1nk9RE0QpnrLtPT/vEAAABUKLL7AoAAAQDAEgwRgIhAMFV mnuepgF2swuuAzB+iouY20LCj5MwR7Ww8i/hNtbeAiEAimUzLm1Sa3WarToDZW4h F8YDqqQ3152FZgxkFsQ44isAdwBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDvlJhV 1onQ3QAAAVCiy+z+AAAEAwBIMEYCIQDpzQztj6yiMM3vab5sM8NcOHY6CVojdiKr mBdJsWpIOgIhALuSkLVqwIdK0PBL+R9U8j3gklXP/key/6ioalP3lnA/MA0GCSqG SIb3DQEBCwUAA4IBAQBsaJyZJdSd/1Jr+PRQ4qGtEbf0IPIfcIH9Gl1Net6Ppl4q 616yZFDq/VMWhOXWe8m96fBQ4r0T0TBzw6/upAxqcYYK4DGoIbKiet7wIKawj8EJ mp70nGJlYQNRd9W4gOlOMUUz1mb/9f4pu+Tw0qujEpwlwckrUKmQ4Z7WsB66F71d J1XsBU1+W34e2Y7abNWjSHavdhnUQXLZ43xIxYayJRMus8/lYHod+FPNrW3/Z+iV jGzAENQUYGWBWS7nT91LQw+T1UIe/oHNVhHam1zFZK0+JSpA3Sp3qYl9v4UFcnY/ QO+qf2FSrViJq9KozdQJkZpq9ua4j+76ncMV9hfP -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4w0f38411kKuXlwx1wqL CGW5V5r7SKEhMe6AIgT2xz4q5ZOqa3JkRgnv/BO6MjQJeqqt2V1m/I2GbwQcIPp+ nceCCeUN9gZyQCQhBg2sQTBocc8DDFXXfYdkcEynW9CA+9mijE+q3q+sz9bblGtA 3XoDJmOE4CTKUuoAZvEPQBp6w8fGwQB17/s39ZXIlfNW2nfF4WGPB4kfoaxyrJ4i R22MdxL3AiuiXRdvGk2Dk/sA+/D/UixryEWm7cbCjqNIA69VLXn0XHnHcyBfCAlg UT9TGJL49V6Ij2naIewBgda59qCYWRJuRU6ZkZ1o6P0mm4ikQTuBIyOEvju4cip+ awIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10435155781971393696133796100217212731 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-08 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '000 056 717' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '286 Horsley Road' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2214' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New South Wales' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milperra' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Heatcraft Australia Pty Ltd' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'remoteapps.heatcraft.com.au' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28662567163772827138178593291586701124261188017264980053370887532088686224136846206994444493885964816572031396484435339040425819921460539286800206522190607797527102281936508308766524269468871342695045311060158769473657920531713107409456437141916300993407771699825906357838755394745370488391861193752512667067861254345348739801291645124667050864205081182340299355670195691451492143632303134330987947079603875180754428421626492007634485674008244785746820669469551981978794809546280809242247435030440310206800159971208634460902722838154528201343179419147046334969379826760197688100196506371535081180778592726539347590763 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2be7966510c5026337de244558aaa05df07453f8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remoteapps.heatcraft.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.heatcraft.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverReceiver.heatcraft.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdm.heatcraft.com.au' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 016a007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000150a2cbebd700000403004730450220741f8ad9e9b195a6e06ffb7c08c92f393c5cd1df463b27fbde3f5fc4da4ac3c9022100f1ffd6ab7b4d0027bb35db1c38659e21791888f79d8c52d399d93352e8fd8bb000770068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000150a2cbec0a0000040300483046022100c1559a7b9ea60176b30bae03307e8a8b98db42c28f933047b5b0f22fe136d6de0221008a65332e6d526b759aad3a03656e2117c603aaa437d79d85660c6416c438e22b0077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000150a2cbecfe0000040300483046022100e9cd0ced8faca230cdef69be6c33c35c38763a095a237622ab981749b16a483a022100bb9290b56ac0874ad0f04bf91f54f23de09255cffe47b2ffa8a86a53f796703f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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