corp.pqm.net
- HubSpot, Inc. -
Issued by CloudFlare Inc RSA CA-1
About this certificate
This digital certificate with serial number 08:27:06:fb:55:36:75:47:65:b2:a5:95:4a:27:50:da was issued on by CloudFlare, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
HubSpot, Inc.
Organization:
HubSpot, Inc.
State / Province:
MA
Locality: Cambridge
Country: US
Locality: Cambridge
Country: US
CloudFlare, Inc.
Organization:
CloudFlare, Inc.
State / Province:
CA
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:27:06:fb:55:36:75:47:65:b2:a5:95:4a:27:50:daSerial Number (int): 10836465150860659914113372905328300250
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: f6:a8:f3:5f:3c:99:18:d8:0d:6b:6e:2a:a4:4f:12:ab:07:12:ff:bc
AuthorityKeyId: 91:05:8a:df:4c:22:c6:6d:8b:94:4c:16:45:7e:ee:6f:02:fb:b7:c0
Fingerprint (sha1): 36:54:d8:0f:74:16:32:b3:2c:8e:20:89:74:4c:5f:c9:bf:02:09:84
Fingerprint (sha256): 73:a6:ae:99:5a:9f:8f:f4:06:13:18:45:a2:a3:09:5b:ec:bb:13:82:b4:ff:9d:cd:45:18:37:b5:57:6c:4a:12
Issuing Certificate URL: http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/CloudFlareIncRSACA1.crl
CRL Distribution Point: http://crl4.digicert.com/CloudFlareIncRSACA1.crl
Check the revocation status for certificate corp.pqm.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for corp.pqm.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
corp.pqm.net
Other certificates including the domain name pqm.net
(limited to 100 certificates)
facteuriel.pqm.net
isaca.pqm.net
www.pqm.net
corp.pqm.net
blog.pqm.net
facteuriel.pqm.net
corp.pqm.net
otstcfq.pqm.net
*.pqm.net
facteuriel.pqm.net
mx04.pqm.net
ssl.pqm.net
webcasts.pqm.net
blog.pqm.net
secure.pqm.net
mx04.pqm.net
mx02.pqm.net
mx04.pqm.net
temps.pqm.net
isaca.pqm.net
isaca.pqm.net
isaca.pqm.net
webcasts.pqm.net
temps.pqm.net
ssl.pqm.net
webcasts.pqm.net
mx03.pqm.net
isaca.pqm.net
secure.pqm.net
blog.pqm.net
www.pqm.net
corp.pqm.net
hubspot.pqm.net
hdondemand.pqm.net
blog.pqm.net
*.pqm.net
blog.pqm.net
www.pqm.net
hubspot.pqm.net
isaca.pqm.net
corp.pqm.net
blog.pqm.net
ssl.pqm.net
blog.pqm.net
SECURE.PQM.NET
secure.pqm.net
temps.pqm.net
pqm.net
pqm.net
secure.pqm.net
SECURE.PQM.NET
pqm.net
hubspot.pqm.net
hubspot.pqm.net
otstcfq.pqm.net
hubspot.pqm.net
blog.pqm.net
*.pqm.net
postfix.mx03.pqm.net
www.pqm.net
ssl.pqm.net
corp.pqm.net
webcasts.pqm.net
SSL.PQM.NET
corp.pqm.net
webcasts.pqm.net
webcasts.pqm.net
secure.pqm.net
temps.pqm.net
hubspot.pqm.net
otstcfq.pqm.net
mx04.pqm.net
ssl.pqm.net
hubspot.pqm.net
otstcfq.pqm.net
SSL.PQM.NET
secure.pqm.net
corp.pqm.net
www.pqm.net
otstcfq.pqm.net
secure.pqm.net
secure.pqm.net
SECURE.PQM.NET
mail.pqm.net
hubspot.pqm.net
corp.pqm.net
secure.pqm.net
blog.pqm.net
mx04.pqm.net
blog.pqm.net
hubspot.pqm.net
pqm.net
webcasts.pqm.net
mx04.pqm.net
isaca.pqm.net
www.pqm.net
corp.pqm.net
blog.pqm.net
facteuriel.pqm.net
corp.pqm.net
otstcfq.pqm.net
*.pqm.net
facteuriel.pqm.net
mx04.pqm.net
ssl.pqm.net
webcasts.pqm.net
blog.pqm.net
secure.pqm.net
mx04.pqm.net
mx02.pqm.net
mx04.pqm.net
temps.pqm.net
isaca.pqm.net
isaca.pqm.net
isaca.pqm.net
webcasts.pqm.net
temps.pqm.net
ssl.pqm.net
webcasts.pqm.net
mx03.pqm.net
isaca.pqm.net
secure.pqm.net
blog.pqm.net
www.pqm.net
corp.pqm.net
hubspot.pqm.net
hdondemand.pqm.net
blog.pqm.net
*.pqm.net
blog.pqm.net
www.pqm.net
hubspot.pqm.net
isaca.pqm.net
corp.pqm.net
blog.pqm.net
ssl.pqm.net
blog.pqm.net
SECURE.PQM.NET
secure.pqm.net
temps.pqm.net
pqm.net
pqm.net
secure.pqm.net
SECURE.PQM.NET
pqm.net
hubspot.pqm.net
hubspot.pqm.net
otstcfq.pqm.net
hubspot.pqm.net
blog.pqm.net
*.pqm.net
postfix.mx03.pqm.net
www.pqm.net
ssl.pqm.net
corp.pqm.net
webcasts.pqm.net
SSL.PQM.NET
corp.pqm.net
webcasts.pqm.net
webcasts.pqm.net
secure.pqm.net
temps.pqm.net
hubspot.pqm.net
otstcfq.pqm.net
mx04.pqm.net
ssl.pqm.net
hubspot.pqm.net
otstcfq.pqm.net
SSL.PQM.NET
secure.pqm.net
corp.pqm.net
www.pqm.net
otstcfq.pqm.net
secure.pqm.net
secure.pqm.net
SECURE.PQM.NET
mail.pqm.net
hubspot.pqm.net
corp.pqm.net
secure.pqm.net
blog.pqm.net
mx04.pqm.net
blog.pqm.net
hubspot.pqm.net
pqm.net
webcasts.pqm.net
mx04.pqm.net
Certificate
The complete raw certificate details for corp.pqm.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIQCCcG+1U2dUdlsqWVSidQ2jANBgkqhkiG9w0BAQsFADBv MQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExFjAUBgNVBAcTDVNhbiBGcmFuY2lz Y28xGTAXBgNVBAoTEENsb3VkRmxhcmUsIEluYy4xIDAeBgNVBAMTF0Nsb3VkRmxh cmUgSW5jIFJTQSBDQS0xMB4XDTE3MTAyMDAwMDAwMFoXDTE4MTAyMDEyMDAwMFow XTELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1BMRIwEAYDVQQHEwlDYW1icmlkZ2Ux FjAUBgNVBAoTDUh1YlNwb3QsIEluYy4xFTATBgNVBAMTDGNvcnAucHFtLm5ldDCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKj3HBtY4jgiVRKmZAG5Frd2 L3InP78waKMm0L0q2x+tLydieF3uFc5fZ3iE91SC5SjSH6YoKzEQEkWu/BsLDFlW 6WHt6jTHq7yNMzupwMLGLXkCsAni86z3VDmbh4DLmHM7lnt0eX7HEhX0E+z5ZU05 BwEVKcW6fINCpTlIwdYzcyV4Fc63jr3eWiE/kQLsbBuWMQ+6mQ98QKBlLiUQ6l+H TFqWgwPHVhPUDKYmU0qMWuxIy3KmdwONPXKydtPg0kd3BQPoqla4MHvkzgOOSW97 QhYdELF/dbCcSVgyb5LSMQvl4nHf5oX0FQj8GSOUYLcOA49g/hBmAO66JX7zUh8C AwEAAaOCAdswggHXMB8GA1UdIwQYMBaAFJEFit9MIsZti5RMFkV+7m8C+7fAMB0G A1UdDgQWBBT2qPNfPJkY2A1rbiqkTxKrBxL/vDAXBgNVHREEEDAOggxjb3JwLnBx bS5uZXQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjB5BgNVHR8EcjBwMDagNKAyhjBodHRwOi8vY3JsMy5kaWdpY2VydC5jb20v Q2xvdWRGbGFyZUluY1JTQUNBMS5jcmwwNqA0oDKGMGh0dHA6Ly9jcmw0LmRpZ2lj ZXJ0LmNvbS9DbG91ZEZsYXJlSW5jUlNBQ0ExLmNybDBMBgNVHSAERTBDMDcGCWCG SAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20v Q1BTMAgGBmeBDAECAjB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6 Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBABggrBgEFBQcwAoY0aHR0cDovL2NhY2VydHMu ZGlnaWNlcnQuY29tL0Nsb3VkRmxhcmVJbmNSU0FDQS0xLmNydDAMBgNVHRMBAf8E AjAAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ7Zq9R9MJqWCRvpzAgby0anC0AWms2fXQ 0lckUSGHVmlryAOILekOiH9S+WV61xubXZotjM3O9b1xZEkVGDDDk260eVbMoD/H uQlEbVA7wzbnThdPn00+jb1BVArkTmBZ9UnYwZzST2i89s+xaoZTKNLFCYDJmM2f 97pAB48kTITjfSRqexWhQvM/EkYW5BYVuSPo60qGZgFHc05XG6YEpgqTS3muTVes kLinbtJsi4MVvOL+/lIbyReOKJt4scKe0h4MlWf5GZz5Pi+J4DlL1aN1eQLlM4/7 lTUUJWoyyx4Al1fsDjNuumaycY/1O5xvLGb0kD6yfNL0AXPrGMMv -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPccG1jiOCJVEqZkAbkW t3Yvcic/vzBooybQvSrbH60vJ2J4Xe4Vzl9neIT3VILlKNIfpigrMRASRa78GwsM WVbpYe3qNMervI0zO6nAwsYteQKwCeLzrPdUOZuHgMuYczuWe3R5fscSFfQT7Pll TTkHARUpxbp8g0KlOUjB1jNzJXgVzreOvd5aIT+RAuxsG5YxD7qZD3xAoGUuJRDq X4dMWpaDA8dWE9QMpiZTSoxa7EjLcqZ3A409crJ20+DSR3cFA+iqVrgwe+TOA45J b3tCFh0QsX91sJxJWDJvktIxC+Xicd/mhfQVCPwZI5Rgtw4Dj2D+EGYA7rolfvNS HwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10836465150860659914113372905328300250 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare Inc RSA CA-1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-20 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridge' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HubSpot, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'corp.pqm.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21329889614448616057061769783156333912061136661031987420757710375312384913068722314350368883282080914860633577165447151922044422226274634011347206642773741742200080088335947193820461172534223186200225324594683663817832000683065937418823561840062636388158462047549688528410595975741072258005002800684647840921565603030895267376136383208073635173483763242319790890880322418628886712865202033139426630227811560488342034935541912476514909717968024022498418017572548228975331115718420926823638485642612034060886228078386185006030314891184614264380881169730456962947321663286790649741288431788472424400130645389674129084959 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 91058adf4c22c66d8b944c16457eee6f02fbb7c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f6a8f35f3c9918d80d6b6e2aa44f12ab0712ffbc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp.pqm.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudFlareIncRSACA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudFlareIncRSACA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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