www.gwcu.org
- Goldenwest Federal Credit Union -
Issued by DigiCert EV RSA CA G2
About this certificate
This digital certificate with serial number 01:3b:f9:f1:b6:bb:aa:2d:8f:38:41:1d:7b:a0:96:4c was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Goldenwest Federal Credit Union
Company registration number:
598666-0140
Organization: Goldenwest Federal Credit Union
Organization: Goldenwest Federal Credit Union
State / Province:
Utah
Locality: Ogden
Country: US
Locality: Ogden
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 01:3b:f9:f1:b6:bb:aa:2d:8f:38:41:1d:7b:a0:96:4cSerial Number (int): 1640642980970090465106408714566407756
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: f9:d0:2a:f1:e7:13:53:9b:55:e7:82:4d:e5:5f:31:b2:e6:c9:b4:09
AuthorityKeyId: 6a:4e:50:bf:98:68:9d:5b:7b:20:75:d4:59:01:79:48:66:92:32:06
Fingerprint (sha1): 85:08:e8:14:95:2a:3b:ab:89:b5:e6:01:44:c3:18:2f:9d:24:f7:17
Fingerprint (sha256): 79:3d:6b:5f:c9:ab:30:96:47:fe:97:41:56:f1:9d:93:42:cc:ba:42:5d:07:23:54:99:4c:f5:71:cb:75:0c:5c
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertEVRSACAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertEVRSACAG2.crl
Check the revocation status for certificate www.gwcu.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.gwcu.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.gwcu.org
gwcu.org
gwcu.org
Other certificates including the domain name gwcu.org
(limited to 100 certificates)
my.gwcu.org
m.gwcu.org
citrix.gwcu.org
exchange2013.gwcu.gwcu.org
m.gwcu.org
estatements.gwcu.org
*.gwcu.org
m.gwcu.org
www.gwcu.org
estatements.gwcu.org
www.gwcu.org
exchange2013.gwcu.gwcu.org
citrix.gwcu.org
exchange2013.gwcu.gwcu.org
exchange2013.gwcu.gwcu.org
exchange2013.gwcu.gwcu.org
online.gwcu.org
citrix.gwcu.org
online.gwcu.org
online.gwcu.org
www.gwcu.org
chat.gwcu.org
www.gwcu.org
vidyoportal.gwcu.org
citrix.gwcu.org
estatements.gwcu.org
*.gwcu.org
m.gwcu.org
m.gwcu.org
www.gwcu.org
citrix.gwcu.org
www.gwcu.org
www.gwcu.org
www.gwcu.org
www.gwcu.org
*.gwcu.org
online.gwcu.org
barracuda.gwcu.org
m.gwcu.org
vidyoreplay.gwcu.org
checks.gwcu.org
www.gwcu.org
online.gwcu.org
m.gwcu.org
www.gwcu.org
online.gwcu.org
my.gwcu.org
mail.gwcu.org
citrix.gwcu.org
online.gwcu.org
estatements.gwcu.org
online.gwcu.org
www.gwcu.org
exchange2013.gwcu.gwcu.org
m.gwcu.org
www.gwcu.org
*.gwcu.org
mail.gwcu.org
m.gwcu.org
mobile.gwcu.org
www.gwcu.org
vidyoreplay.gwcu.org
m.gwcu.org
m.gwcu.org
mdm.gwcu.org
estatements.gwcu.org
online.gwcu.org
*.gwcu.org
online.gwcu.org
www.gwcu.org
citrix.gwcu.org
mam.gwcu.org
exchange2013.gwcu.gwcu.org
exchange2013.gwcu.gwcu.org
my.gwcu.org
m.gwcu.org
citrix.gwcu.org
exchange2013.gwcu.gwcu.org
m.gwcu.org
estatements.gwcu.org
*.gwcu.org
m.gwcu.org
www.gwcu.org
estatements.gwcu.org
www.gwcu.org
exchange2013.gwcu.gwcu.org
citrix.gwcu.org
exchange2013.gwcu.gwcu.org
exchange2013.gwcu.gwcu.org
exchange2013.gwcu.gwcu.org
online.gwcu.org
citrix.gwcu.org
online.gwcu.org
online.gwcu.org
www.gwcu.org
chat.gwcu.org
www.gwcu.org
vidyoportal.gwcu.org
citrix.gwcu.org
estatements.gwcu.org
*.gwcu.org
m.gwcu.org
m.gwcu.org
www.gwcu.org
citrix.gwcu.org
www.gwcu.org
www.gwcu.org
www.gwcu.org
www.gwcu.org
*.gwcu.org
online.gwcu.org
barracuda.gwcu.org
m.gwcu.org
vidyoreplay.gwcu.org
checks.gwcu.org
www.gwcu.org
online.gwcu.org
m.gwcu.org
www.gwcu.org
online.gwcu.org
my.gwcu.org
mail.gwcu.org
citrix.gwcu.org
online.gwcu.org
estatements.gwcu.org
online.gwcu.org
www.gwcu.org
exchange2013.gwcu.gwcu.org
m.gwcu.org
www.gwcu.org
*.gwcu.org
mail.gwcu.org
m.gwcu.org
mobile.gwcu.org
www.gwcu.org
vidyoreplay.gwcu.org
m.gwcu.org
m.gwcu.org
mdm.gwcu.org
estatements.gwcu.org
online.gwcu.org
*.gwcu.org
online.gwcu.org
www.gwcu.org
citrix.gwcu.org
mam.gwcu.org
exchange2013.gwcu.gwcu.org
exchange2013.gwcu.gwcu.org
my.gwcu.org
Certificate
The complete raw certificate details for www.gwcu.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIQATv58ba7qi2POEEde6CWTDANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE aWdpQ2VydCBFViBSU0EgQ0EgRzIwHhcNMjMxMjA0MDAwMDAwWhcNMjUwMTAzMjM1 OTU5WjCBzjETMBEGCysGAQQBgjc8AgEDEwJVUzEVMBMGCysGAQQBgjc8AgECEwRV dGFoMR0wGwYDVQQPDBRQcml2YXRlIE9yZ2FuaXphdGlvbjEUMBIGA1UEBRMLNTk4 NjY2LTAxNDAxCzAJBgNVBAYTAlVTMQ0wCwYDVQQIEwRVdGFoMQ4wDAYDVQQHEwVP Z2RlbjEoMCYGA1UEChMfR29sZGVud2VzdCBGZWRlcmFsIENyZWRpdCBVbmlvbjEV MBMGA1UEAxMMd3d3Lmd3Y3Uub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAni1hrll7LM3IfpMAdEx4MyFizamKUU4nCLhT+SNISpH+vSW+MDl02XjP n9z2N/LEQ5JyTZaL09pwnl0mDFdvDYEEkWMXKH6/4zUk3HrffdzrkwsPg633d7Jx BUM7L6wkJ6iiekhUd4pteFVIS2aBKJRvaMTPj+vQ+Xo63JISBeN8S/okA0yLbpIs HSA2MWKU6fAjlkN2pUq8K0jpEAIyq/lGFly8zWkpSOMsrNCHwsY4DyWJZ9/HhN5t vMP2cPyfmynxPPDq5hPTjLykq5dayiA/l643NeDO/Y25nyooia0cYEW4gSgBv1cx WvsnwTAaBYvoaUOdKXUMjqdVfbniXQIDAQABo4IB8TCCAe0wHwYDVR0jBBgwFoAU ak5Qv5honVt7IHXUWQF5SGaSMgYwHQYDVR0OBBYEFPnQKvHnE1ObVeeCTeVfMbLm ybQJMCEGA1UdEQQaMBiCDHd3dy5nd2N1Lm9yZ4IIZ3djdS5vcmcwSgYDVR0gBEMw QTALBglghkgBhv1sAgEwMgYFZ4EMAQEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3 dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMu ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0RVZSU0FDQUcyLmNybDA0oDKgMIYuaHR0cDov L2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0RVZSU0FDQUcyLmNybDBzBggrBgEF BQcBAQRnMGUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA9 BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0 RVZSU0FDQUcyLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA MA0GCSqGSIb3DQEBCwUAA4IBAQA/0pB4itrhEPYB9I4p6vKp+py7eeqoTP2bRs4D FZu2a8TtkR5XraCdb8Op39snZfTWYyCLhd7FAOSDCf1onVktR+GnR5xdBHT7lIri bLxx4dgWcLi6lXjVNWdQL1j2RBGeV944+bGCDlMulrJaA/+hZpCXgO6TqGdT7bru DoyLV0VwJxsVdm4ptBOUbPqytvFBeP6kVhfeQAYdN2hqO0kGSJyQlP1nUDOoEuaB YExcO6xwtAeHMRV1mU+bAEUlSChB2CHZe2YGjylJP07vxIF2mAv5vt5tOQSrDZiT /9/aYM1RQ45PQAgu1seLn0PR8bPtccu2jzh6seW/aP2ydU5h -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni1hrll7LM3IfpMAdEx4 MyFizamKUU4nCLhT+SNISpH+vSW+MDl02XjPn9z2N/LEQ5JyTZaL09pwnl0mDFdv DYEEkWMXKH6/4zUk3HrffdzrkwsPg633d7JxBUM7L6wkJ6iiekhUd4pteFVIS2aB KJRvaMTPj+vQ+Xo63JISBeN8S/okA0yLbpIsHSA2MWKU6fAjlkN2pUq8K0jpEAIy q/lGFly8zWkpSOMsrNCHwsY4DyWJZ9/HhN5tvMP2cPyfmynxPPDq5hPTjLykq5da yiA/l643NeDO/Y25nyooia0cYEW4gSgBv1cxWvsnwTAaBYvoaUOdKXUMjqdVfbni XQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1640642980970090465106408714566407756 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert EV RSA CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '598666-0140' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ogden' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Goldenwest Federal Credit Union' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gwcu.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19968030669191570069437306072436796600086896865089445553218905873301424358182450015351608957406253586303093003898469333252889179216289508065523067538453400588824822896692232882001476416410661062451479205842417977890596047679622764333308149043010549022593256730260405621225885129888425604671175095115421205572732781492556971387326472175846715844181486175275417381407445864406267573001715136317598861198462719131989523204776230011565452441734251927851374121597487147236199390858451811658322495000099907711185720444212422453531869525037787238707163164917052877761997119898346717369048219377990510222104220389186947637853 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6a4e50bf98689d5b7b2075d45901794866923206 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f9d02af1e713539b55e7824de55f31b2e6c9b409 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gwcu.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwcu.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertEVRSACAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertEVRSACAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertEVRSACAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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