ac.dropboxstatic.com
- Dropbox, Inc -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 0f:91:80:0f:31:b3:76:90:c6:35:15:4e:b0:34:74:a4 was issued on by DigiCert Inc.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Dropbox, Inc
Organization:
Dropbox, Inc
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:91:80:0f:31:b3:76:90:c6:35:15:4e:b0:34:74:a4Serial Number (int): 20693900333494716340288754466346529956
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: bd:87:b3:ff:2f:95:93:b6:47:dc:3a:f4:83:98:27:4b:93:8b:82:f5
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 7d:d9:0f:28:26:76:f2:1f:cf:a7:b2:dd:2c:55:77:a1:e0:5d:1e:d7
Fingerprint (sha256): 72:9d:24:f9:77:34:bb:7a:fd:6f:10:9e:3b:97:95:14:45:44:dd:03:42:c7:e6:79:d5:54:db:9f:6e:4d:d8:e6
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate ac.dropboxstatic.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ac.dropboxstatic.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ac.dropboxstatic.com
Other certificates including the domain name dropboxstatic.com
(limited to 100 certificates)
*.dropboxstatic.com
cf.dropboxstatic.com
*.dev.corp.dropbox.com
cfl.dropboxstatic.com
*.dropboxstatic.com
rebrand.dropboxstatic.com
customer-growth.dropboxstatic.com
healthcheck.dropboxstatic.com
*.dropboxstatic.com
flash.dropboxstatic.com
*.dropboxstatic.com
cf.dropboxstatic.com
paper.dropboxstatic.com
paper-desktop.dropboxstatic.com
ac.dropboxstatic.com
cf.dropboxstatic.com
paper-desktop.dropboxstatic.com
clientupdates.dropboxstatic.com
*.dev.corp.dropboxusercontent.com
clientupdates.dropboxstatic.com
fjord.dropboxstatic.com
*.dropboxstatic.com
flash.dropboxstatic.com
*.dev.corp.dropboxstatic.com
paper-attachments.dropboxstatic.com
ac.dropboxstatic.com
cfl.dropboxstatic.com
cf.dropboxstatic.com
clientupdates.dropboxstatic.com
paper.dropboxstatic.com
cfl.dropboxstatic.com
clientupdates.dropboxstatic.com
cf2.dropboxstatic.com
*.dropboxstatic.com
flash.dropboxstatic.com
ac.dropboxstatic.com
ac.dropboxstatic.com
cf.dropboxstatic.com
*.dropboxstatic.com
cf.dropboxstatic.com
clientupdates.dropboxstatic.com
flash.dropboxstatic.com
paper.dropboxstatic.com
clientupdates.dropboxstatic.com
rebrand.dropboxstatic.com
healthcheck.dropboxstatic.com
*.dev.corp.dropbox.com
*.dev.corp.dropboxstatic.com
showcase-marketing.dropboxstatic.com
*.dev.corp.dropbox.com
paper-attachments.dropboxstatic.com
*.dev.corp.dropbox.com
ac.dropboxstatic.com
customer-growth.dropboxstatic.com
paper.dropboxstatic.com
*.dropboxstatic.com
ac.dropboxstatic.com
*.dev.corp.dropbox.com
anti-abuse.dropboxstatic.com
*.dropboxstatic.com
ac.dropboxstatic.com
cfl.dropboxstatic.com
*.dev.corp.dropbox.com
cf.dropboxstatic.com
dropboxstatic.com
healthcheck.dropboxstatic.com
showcase-marketing.dropboxstatic.com
cfl.dropboxstatic.com
*.dev.corp.dropboxstatic.com
paper-attachments.dropboxstatic.com
paper-desktop.dropboxstatic.com
*.dev.corp.dropboxstatic.com
cf.dropboxstatic.com
clientupdates.dropboxstatic.com
*.dev.corp.dropboxusercontent.com
cf.dropboxstatic.com
*.dev.corp.dropbox.com
cfl.dropboxstatic.com
*.dropboxstatic.com
rebrand.dropboxstatic.com
customer-growth.dropboxstatic.com
healthcheck.dropboxstatic.com
*.dropboxstatic.com
flash.dropboxstatic.com
*.dropboxstatic.com
cf.dropboxstatic.com
paper.dropboxstatic.com
paper-desktop.dropboxstatic.com
ac.dropboxstatic.com
cf.dropboxstatic.com
paper-desktop.dropboxstatic.com
clientupdates.dropboxstatic.com
*.dev.corp.dropboxusercontent.com
clientupdates.dropboxstatic.com
fjord.dropboxstatic.com
*.dropboxstatic.com
flash.dropboxstatic.com
*.dev.corp.dropboxstatic.com
paper-attachments.dropboxstatic.com
ac.dropboxstatic.com
cfl.dropboxstatic.com
cf.dropboxstatic.com
clientupdates.dropboxstatic.com
paper.dropboxstatic.com
cfl.dropboxstatic.com
clientupdates.dropboxstatic.com
cf2.dropboxstatic.com
*.dropboxstatic.com
flash.dropboxstatic.com
ac.dropboxstatic.com
ac.dropboxstatic.com
cf.dropboxstatic.com
*.dropboxstatic.com
cf.dropboxstatic.com
clientupdates.dropboxstatic.com
flash.dropboxstatic.com
paper.dropboxstatic.com
clientupdates.dropboxstatic.com
rebrand.dropboxstatic.com
healthcheck.dropboxstatic.com
*.dev.corp.dropbox.com
*.dev.corp.dropboxstatic.com
showcase-marketing.dropboxstatic.com
*.dev.corp.dropbox.com
paper-attachments.dropboxstatic.com
*.dev.corp.dropbox.com
ac.dropboxstatic.com
customer-growth.dropboxstatic.com
paper.dropboxstatic.com
*.dropboxstatic.com
ac.dropboxstatic.com
*.dev.corp.dropbox.com
anti-abuse.dropboxstatic.com
*.dropboxstatic.com
ac.dropboxstatic.com
cfl.dropboxstatic.com
*.dev.corp.dropbox.com
cf.dropboxstatic.com
dropboxstatic.com
healthcheck.dropboxstatic.com
showcase-marketing.dropboxstatic.com
cfl.dropboxstatic.com
*.dev.corp.dropboxstatic.com
paper-attachments.dropboxstatic.com
paper-desktop.dropboxstatic.com
*.dev.corp.dropboxstatic.com
cf.dropboxstatic.com
clientupdates.dropboxstatic.com
*.dev.corp.dropboxusercontent.com
Certificate
The complete raw certificate details for ac.dropboxstatic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGxDCCBaygAwIBAgIQD5GADzGzdpDGNRVOsDR0pDANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzExMjgwMDAwMDBa Fw0yNDEyMjMyMzU5NTlaMHAxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9y bmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRUwEwYDVQQKEwxEcm9wYm94LCBJ bmMxHTAbBgNVBAMTFGFjLmRyb3Bib3hzdGF0aWMuY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAqxVsNE+wLnNUutVZlYUYbSyvNGEv7cFSerU6oIQq qPiyZSemAWkmWQExTXRlGP/zadLhIrHeppZkocwly+Jn/o/yyoclc6IyAxsIUwWL 5QM8ohClTvSdH1P5TtFYwDoNc36TOQ9LrA6HljvFK+DtycDCywfl3Vhvqa84sADk 4EajwEmJEuv/1ZyuLSoSX0v4d6HuCzHY+7zJBuEU3xK+L3ypP2ue93I9X+GrGERK nlRCGhrw5VN+M8PSnDyesmX8kxzEWSp+WuaJKAzpIW5wINP0Gh4S4MfoOMahCrCa +MyrKvolfK2ZyJoY9S8uFWygKEX91yo1avtgnwsZUqQOZwIDAQABo4IDeTCCA3Uw HwYDVR0jBBgwFoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0OBBYEFL2Hs/8v lZO2R9w69IOYJ0uTi4L1MB8GA1UdEQQYMBaCFGFjLmRyb3Bib3hzdGF0aWMuY29t MD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cu ZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMIGPBgNVHR8EgYcwgYQwQKA+oDyGOmh0dHA6Ly9jcmwz LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmww QKA+oDyGOmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNI QTI1NjIwMjBDQTEtNC5jcmwwfwYIKwYBBQUHAQEEczBxMCQGCCsGAQUFBzABhhho dHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSQYIKwYBBQUHMAKGPWh0dHA6Ly9jYWNl cnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtMS5j cnQwDAYDVR0TAQH/BAIwADCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHYA7s3Q ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGMFltBUQAABAMARzBFAiAI SQiXbWN7qZIe1CgP1b6hl+GpeRMi6zRBJmTqXrV7AAIhAN7hTAYJI2xLeHUkxakG yLLWh7fQMcDI5PcVSBBlBh9hAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/ qznYhHMAAAGMFltBaQAABAMASDBGAiEAn4PCXpBEfhP4JQA8+rhc+FwNQLjOGc1P iDvkWlxnSkMCIQDLE0zNgG+kZvIiGIuWnvZQqtelY1Xr+TbM8DdtENpKFgB3AD8X S0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABjBZbQZ8AAAQDAEgwRgIh ALZiLp6UMSpml79dKOPe3rIVJdiBDzHUpFYRlzduJsHtAiEAzkDUgLVZMXcE17Zl ICebUpPpKlFoy/hLQUPtAzlqtqYwDQYJKoZIhvcNAQELBQADggEBAIXLkshZYwdF m/UEZ23pfelHjX7K/z3bBIm7CyLutZsf9rzDqeC2nUnNa+mMTCpQBYg5icFDaL7Z RwNRnG/qfzbtHg+zVfvmw/ew/KZ26E5CKIGy+7JLBBaDr12kXynxRHIAYRzKPyzn QcSqz6ZLg98+fSGiz8KxEXmHY1XIKvWcogvip7q3/yD4mYhXdU1J5nf8+sjKXMWV u7y7g9bIjmWXjAUE3Di7NsO2ybp41W5moEnJ/LXlew4KprJa4LKV//0lfjkVW3m6 SWEekRanjLO5k0VYVHvGzUl3LBu+oMDJgucnYbhJblxXpLdK0aMnYGSNm3nKppZF LMZlJZy4mpY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxVsNE+wLnNUutVZlYUY bSyvNGEv7cFSerU6oIQqqPiyZSemAWkmWQExTXRlGP/zadLhIrHeppZkocwly+Jn /o/yyoclc6IyAxsIUwWL5QM8ohClTvSdH1P5TtFYwDoNc36TOQ9LrA6HljvFK+Dt ycDCywfl3Vhvqa84sADk4EajwEmJEuv/1ZyuLSoSX0v4d6HuCzHY+7zJBuEU3xK+ L3ypP2ue93I9X+GrGERKnlRCGhrw5VN+M8PSnDyesmX8kxzEWSp+WuaJKAzpIW5w INP0Gh4S4MfoOMahCrCa+MyrKvolfK2ZyJoY9S8uFWygKEX91yo1avtgnwsZUqQO ZwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20693900333494716340288754466346529956 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dropbox, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ac.dropboxstatic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21597314063076768872257828163620819987931611729989222121177096313441565923379744996181294483010878370578828002544539708112539799758560616113027154173651704554031164944259138729911982730183016217867789500141134073420469085311187373692017776982978303250057216110778271676342265285895803686122917761818313735007711791826764645127579019618325770373787870609179501650071497937444386212825068068186040644835804150827819959886063524037050469957103732275935211869499942374843740484456791395260345919393082636937474682694750495191872963399176056785423909499953780948346902248757058009110746772843868075243595890776420804464231 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bd87b3ff2f9593b647dc3af48398274b938b82f5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac.dropboxstatic.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 016a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c165b415100000403004730450220084908976d637ba9921ed4280fd5bea197e1a9791322eb34412664ea5eb57b00022100dee14c0609236c4b787524c5a906c8b2d687b7d031c0c8e4f715481065061f6100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c165b416900000403004830460221009f83c25e90447e13f825003cfab85cf85c0d40b8ce19cd4f883be45a5c674a43022100cb134ccd806fa466f222188b969ef650aad7a56355ebf936ccf0376d10da4a160077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018c165b419f0000040300483046022100b6622e9e94312a6697bf5d28e3dedeb21525d8810f31d4a4561197376e26c1ed022100ce40d480b559317704d7b66520279b5293e92a5168cbf84b4143ed03396ab6a6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0085cb92c8596307459bf504676de97de9478d7ecaff3ddb0489bb0b22eeb59b1ff6bcc3a9e0b69d49cd6be98c4c2a5005883989c14368bed94703519c6fea7f36ed1e0fb355fbe6c3f7b0fca676e84e422881b2fbb24b041683af5da45f29f1447200611cca3f2ce741c4aacfa64b83df3e7d21a2cfc2b11179876355c82af59ca20be2a7bab7ff20f8998857754d49e677fcfac8ca5cc595bbbcbb83d6c88e65978c0504dc38bb36c3b6c9ba78d56e66a049c9fcb5e57b0e0aa6b25ae0b295fffd257e39155b79ba49611e9116a78cb3b9934558547bc6cd49772c1bbea0c0c982e72761b8496e5c57a4b74ad1a32760648d9b79caa696452cc665259cb89a96