*.brazos.org
- Brazos River Authority -
Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 09:b6:d3:9a:5f:61:98:3d:ae:4f:92:31:9d:eb:7a:fc was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Brazos River Authority
Organization:
Brazos River Authority
State / Province:
Texas
Locality: Waco
Country: US
Locality: Waco
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:b6:d3:9a:5f:61:98:3d:ae:4f:92:31:9d:eb:7a:fcSerial Number (int): 12912341809400039858741860018946800380
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 2b:82:e4:d8:21:b8:3a:51:ca:03:32:dc:aa:f8:44:87:f6:00:cd:6d
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17
Fingerprint (sha1): 88:4b:9c:06:95:20:2b:dc:c9:ec:39:f3:d2:25:a3:25:ac:19:d0:9d
Fingerprint (sha256): 6e:c0:ec:bd:d9:33:d2:0d:64:1d:32:f3:96:b1:62:34:91:c2:ae:9c:0e:17:84:4b:d3:00:a3:1e:6e:14:86:21
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
Check the revocation status for certificate *.brazos.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.brazos.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.brazos.org
brazos.org
brazos.org
Other certificates including the domain name brazos.org
(limited to 100 certificates)
*.brazos.org
*.brazos.org
tickets.ec-comptech.com
*.brazos.org
webmail.brazos.org
webmail.brazos.org
*.brazos.org
webmail.brazos.org
helpdesk.brazos.org
helpdesk.porticopm.com
www.brazos.org
sft.brazos.org
sip.brazos.org
clfhelpdesk.clf.uk
*.brazos.org
*.brazos.org
*.brazos.org
mail.brazos.org
www.brazos.org
helpdesk.porticopm.com
*.brazos.org
helpdesk.brazos.org
www.brazos.org
*.brazos.org
www.brazos.org
helpdesk.brazos.org
directaccess.brazos.org
sip.brazos.org
*.brazos.org
helpdesk.porticopm.com
*.brazos.org
*.brazos.org
rdgw-srv.brazos.org
mail.brazos.org
*.brazos.org
helpdesk.brazos.org
tickets.ec-comptech.com
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
helpdesk.porticopm.com
*.brazos.org
*.brazos.org
*.brazos.org
sip.brazos.org
www.brazos.org
*.brazos.org
tickets.ec-comptech.com
*.brazos.org
mail2.brazos.org
tickets.ec-comptech.com
clfhelpdesk.clf.uk
www.brazos.org
mail.brazos.org
directaccess.brazos.org
*.brazos.org
sip.brazos.org
clfhelpdesk.clf.uk
clfhelpdesk.clf.uk
www.brazos.org
webmail.brazos.org
rpad1.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
legacy.brazos.org
*.brazos.org
tickets.ec-comptech.com
*.brazos.org
webmail.brazos.org
webmail.brazos.org
*.brazos.org
webmail.brazos.org
helpdesk.brazos.org
helpdesk.porticopm.com
www.brazos.org
sft.brazos.org
sip.brazos.org
clfhelpdesk.clf.uk
*.brazos.org
*.brazos.org
*.brazos.org
mail.brazos.org
www.brazos.org
helpdesk.porticopm.com
*.brazos.org
helpdesk.brazos.org
www.brazos.org
*.brazos.org
www.brazos.org
helpdesk.brazos.org
directaccess.brazos.org
sip.brazos.org
*.brazos.org
helpdesk.porticopm.com
*.brazos.org
*.brazos.org
rdgw-srv.brazos.org
mail.brazos.org
*.brazos.org
helpdesk.brazos.org
tickets.ec-comptech.com
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
helpdesk.porticopm.com
*.brazos.org
*.brazos.org
*.brazos.org
sip.brazos.org
www.brazos.org
*.brazos.org
tickets.ec-comptech.com
*.brazos.org
mail2.brazos.org
tickets.ec-comptech.com
clfhelpdesk.clf.uk
www.brazos.org
mail.brazos.org
directaccess.brazos.org
*.brazos.org
sip.brazos.org
clfhelpdesk.clf.uk
clfhelpdesk.clf.uk
www.brazos.org
webmail.brazos.org
rpad1.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
legacy.brazos.org
Certificate
The complete raw certificate details for *.brazos.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG2zCCBcOgAwIBAgIQCbbTml9hmD2uT5Ixnet6/DANBgkqhkiG9w0BAQsFADBZ MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjMw NTE4MDAwMDAwWhcNMjQwNDI2MjM1OTU5WjBkMQswCQYDVQQGEwJVUzEOMAwGA1UE CBMFVGV4YXMxDTALBgNVBAcTBFdhY28xHzAdBgNVBAoTFkJyYXpvcyBSaXZlciBB dXRob3JpdHkxFTATBgNVBAMMDCouYnJhem9zLm9yZzCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAMJfdMjk3byBU3Gp0pR1IGMrSJkOydEXUWersPEyd4t/ pgMOwEyOnBn+6dD1IbNAFy8FIYC5CbqVFk7qjYDL2JixDJpoZsyzZRj1wsDIxsL6 XLw6rIyNKWhaFIGokMca/oeDWn9MI/kApuh1c6ycphgt9vMgNzfuTe5Oqkick4HI ymfhSezETtXqZyX8qygXxchabjLJE9zDC+jSIhxLrhEpU+ECBe2gN0shkHATKofO ofIEthzgQHY9vvjuKHE542Q6+H36QRBDR4MtwDDoitoM5ADm1fcwJiuSG7hykxrY PRveEIgFb1kGLss5eqEaLKQs+n6NqSGJlI0BZObil3UCAwEAAaOCA5IwggOOMB8G A1UdIwQYMBaAFHSFgMBmx9833s+9KTeqAx2+7c0XMB0GA1UdDgQWBBQrguTYIbg6 UcoDMtyq+ESH9gDNbTAjBgNVHREEHDAaggwqLmJyYXpvcy5vcmeCCmJyYXpvcy5v cmcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjCBnwYDVR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20v RGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcmwwSKBGoESG Qmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcyVExTUlNB U0hBMjU2MjAyMENBMS0xLmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsG AQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYcGCCsGAQUFBwEB BHsweTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsG AQUFBzAChkVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9i YWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwCQYDVR0TBAIwADCCAX8GCisG AQQB1nkCBAIEggFvBIIBawFpAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZ RnEftZsAAAGIL6XXRAAABAMASDBGAiEAniPax/wpFLXuvovf0MzeLzYg1HguQUnG vTGkcKQsnBMCIQDhkqOIt54em6mZN3+reFpSRmcKS+Rs0VGC5x8e9DxIUQB3AEiw 42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiC+l1w0AAAQDAEgwRgIh AIWqEgsJzXrXDuHjoANI9q4gBC8oBtKlmXuNfPQT6qw9AiEAhAsWdL8/eENu1EB5 UqcjKxW3tU1a/1jDacsngyPiU5AAdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9 pD0wSNf7qwAAAYgvpdbjAAAEAwBGMEQCIBXwyNzNbmo6FLrNSKsMpuk69moWwyHc DOpVsK/xz5iFAiAuZ01D2cOYTz5Ky3uth36Lx+LIF/Rv37xjTAPphMerpzANBgkq hkiG9w0BAQsFAAOCAQEAh3pW1hKToJQ8IgmGD82YM1ENjfxLMuqLYKQ2Qm2nDPj3 vF+9osRuMxCCOVBaaQShd+FjjcV4TtLmzuoYFAFdVuUFfvgXVueARKHpGAq1ihTh k7mf67t2TUrHFq8KzMYlWQrJEl+DxU4t2X73CxrObG4CpQRVKxrSEV1mua+E25JU hULQfb+nKxVMwUjXpnrbnWViDr6+DPj1A/FGl4Ypl0RJuNjmpcqD62rzqT4yW39Z mLS2UjIYPfHDUM4+pd5v6SB09JpF4aLDl0AOcicCzxolA0QjBR34jC7eB9KEZ3Tn 5Z17fR+q7diobK7ir0qG6VPkcPt6E/XUZr1fupW6bw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl90yOTdvIFTcanSlHUg YytImQ7J0RdRZ6uw8TJ3i3+mAw7ATI6cGf7p0PUhs0AXLwUhgLkJupUWTuqNgMvY mLEMmmhmzLNlGPXCwMjGwvpcvDqsjI0paFoUgaiQxxr+h4Naf0wj+QCm6HVzrJym GC328yA3N+5N7k6qSJyTgcjKZ+FJ7MRO1epnJfyrKBfFyFpuMskT3MML6NIiHEuu ESlT4QIF7aA3SyGQcBMqh86h8gS2HOBAdj2++O4ocTnjZDr4ffpBEENHgy3AMOiK 2gzkAObV9zAmK5IbuHKTGtg9G94QiAVvWQYuyzl6oRospCz6fo2pIYmUjQFk5uKX dQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12912341809400039858741860018946800380 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brazos River Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.brazos.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24537302365268985237388539479395271184256747567433538045653579594183131384859004525839628417054323001163926452241292302949935406583456980271427970504817763827901894493277798054993940786913376460898890488822956606234791370213501186416561020010510531332105884823086055353110954508248964330712368805838583078294737464691065519021052680007286899300741242137913003453031772995292977069889740713645021696230950926655429125710651650443450696983400434764344022918635130316476660776070483537829443983293550461494756259349257964830451393848850317792736615216549793665356316579813288627616751919311119089166993843229639378638709 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2b82e4d821b83a51ca0332dcaaf84487f600cd6d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brazos.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazos.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 0169007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001882fa5d74400000403004830460221009e23dac7fc2914b5eebe8bdfd0ccde2f3620d4782e4149c6bd31a470a42c9c13022100e192a388b79e1e9ba999377fab785a5246670a4be46cd15182e71f1ef43c485100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001882fa5d70d000004030048304602210085aa120b09cd7ad70ee1e3a00348f6ae20042f2806d2a5997b8d7cf413eaac3d022100840b1674bf3f78436ed4407952a7232b15b7b54d5aff58c369cb278323e25390007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001882fa5d6e30000040300463044022015f0c8dccd6e6a3a14bacd48ab0ca6e93af66a16c321dc0cea55b0aff1cf988502202e674d43d9c3984f3e4acb7bad877e8bc7e2c817f46fdfbc634c03e984c7aba7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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