www.boundarywaterscatalog.com

- Piragis Northwoods Company -

Issued by Network Solutions RSA OV SSL CA 3

About this certificate

This digital certificate with serial number 66:9f:b6:4a:5d:25:29:08:20:82:36:a2:29:7c:8c:c3 was issued on by Network Solutions L.L.C..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Piragis Northwoods Company

Organization: Piragis Northwoods Company
State / Province: Minnesota
Country: US

Network Solutions L.L.C.

Organization: Network Solutions L.L.C.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 66:9f:b6:4a:5d:25:29:08:20:82:36:a2:29:7c:8c:c3
Serial Number (int): 136410528060827377224355887129221172419
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 68:a7:2f:fa:6b:00:fa:79:a9:6c:bf:b4:a6:91:66:a2:40:49:c4:a0
AuthorityKeyId: ea:25:ff:5c:9f:4e:4f:4e:c1:14:a0:db:ca:be:ab:f2:e2:e2:78:a4

Fingerprint (sha1): 0a:32:1d:d3:67:37:1e:d9:bc:f4:32:ab:5a:82:df:7f:2f:54:e7:15
Fingerprint (sha256): 85:c6:e8:88:ee:a7:85:61:7f:d8:bf:7f:b0:8a:9b:d1:65:62:2b:e5:42:7e:f7:c2:01:18:9d:7a:6a:f2:b7:2f

Issuing Certificate URL: http://crt.netsolssl.com/NetworkSolutionsRSAOVSSLCA3.crt

Revocation information

OCSP Server: http://ocsp.netsolssl.com
CRL Distribution Point: http://crl.netsolssl.com/NetworkSolutionsRSAOVSSLCA3.crl

Check the revocation status for certificate www.boundarywaterscatalog.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.boundarywaterscatalog.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.boundarywaterscatalog.com
boundarywaterscatalog.com

Other certificates including the domain name boundarywaterscatalog.com

(limited to 100 certificates)
tls.automattic.com
blog.boundarywaterscatalog.com
blog.boundarywaterscatalog.com
tls.automattic.com
tls.automattic.com
www.boundarywaterscatalog.com
tls.automattic.com
www.boundarywaterscatalog.com
blog.boundarywaterscatalog.com
blog.boundarywaterscatalog.com
tls.automattic.com
www.boundarywaterscatalog.com
blog.boundarywaterscatalog.com
www.boundarywaterscatalog.com
tls.automattic.com
tls.automattic.com
blog.boundarywaterscatalog.com
blog.boundarywaterscatalog.com
tls.automattic.com
www.boundarywaterscatalog.com
tls.automattic.com
tls.automattic.com
blog.boundarywaterscatalog.com
tls.automattic.com
www.boundarywaterscatalog.com
www.boundarywaterscatalog.com
blog.boundarywaterscatalog.com
www.boundarywaterscatalog.com

Certificate

The complete raw certificate details for www.boundarywaterscatalog.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHMDCCBZigAwIBAgIQZp+2Sl0lKQgggjaiKXyMwzANBgkqhkiG9w0BAQwFADBc
MQswCQYDVQQGEwJVUzEhMB8GA1UEChMYTmV0d29yayBTb2x1dGlvbnMgTC5MLkMu
MSowKAYDVQQDEyFOZXR3b3JrIFNvbHV0aW9ucyBSU0EgT1YgU1NMIENBIDMwHhcN
MjQwMjI2MDAwMDAwWhcNMjUwMzI4MjM1OTU5WjBuMQswCQYDVQQGEwJVUzESMBAG
A1UECBMJTWlubmVzb3RhMSMwIQYDVQQKExpQaXJhZ2lzIE5vcnRod29vZHMgQ29t
cGFueTEmMCQGA1UEAxMdd3d3LmJvdW5kYXJ5d2F0ZXJzY2F0YWxvZy5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQCROduWNPsqxOs6vtRINx5I4J
ChHgk8EaFKqwQ3c8+kCLtuiSI9usgETl8bA1hts3hxNspmdOLNDtz86h18eOWDs9
563Wj5OsSkDYkavHsrHDVZruK+D6izLr3d+vJCcaphciF7unAefe+I7Rk9yiAFtO
Udu0uidBRKhC1DNNcCv4eSKmy5Y01HZ21U/fBABqucS+wJ+BIjFROjViUnu5qkZO
9nB6DGfEw6ffxspbItxLKY/Mpr3NEEjHcSRJire8EIqqqEx6LI1aphgvQ1q4VkDZ
pkKxfAJcP2+j/r+f0TGvUi84YlApZQcxvWIREIdNNY66/lz3b4u4V8CWjAx9AgMB
AAGjggNaMIIDVjAfBgNVHSMEGDAWgBTqJf9cn05PTsEUoNvKvqvy4uJ4pDAdBgNV
HQ4EFgQUaKcv+msA+nmpbL+0ppFmokBJxKAwDgYDVR0PAQH/BAQDAgWgMAwGA1Ud
EwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARC
MEAwNAYLKwYBBAGyMQECAgQwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdv
LmNvbS9DUFMwCAYGZ4EMAQICMEkGA1UdHwRCMEAwPqA8oDqGOGh0dHA6Ly9jcmwu
bmV0c29sc3NsLmNvbS9OZXR3b3JrU29sdXRpb25zUlNBT1ZTU0xDQTMuY3JsMHsG
CCsGAQUFBwEBBG8wbTBEBggrBgEFBQcwAoY4aHR0cDovL2NydC5uZXRzb2xzc2wu
Y29tL05ldHdvcmtTb2x1dGlvbnNSU0FPVlNTTENBMy5jcnQwJQYIKwYBBQUHMAGG
GWh0dHA6Ly9vY3NwLm5ldHNvbHNzbC5jb20wQwYDVR0RBDwwOoIdd3d3LmJvdW5k
YXJ5d2F0ZXJzY2F0YWxvZy5jb22CGWJvdW5kYXJ5d2F0ZXJzY2F0YWxvZy5jb20w
ggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AM8RVu7VLnyv84db2Wkum+kacWdK
sBfsrAHSW3fOzDsIAAABjefL9QYAAAQDAEcwRQIhAKd9mu4BRA58meywPTQMIPIJ
8489NdkiaUxiRYQsUkK0AiBiTH75Y94sT7UZr/Bi0RDdG93bVS+zytoftHFqKN5y
yAB1AKLjCuRF772tm3447Udnd1PXgluElNcrXhssxLlQpEfnAAABjefL9S4AAAQD
AEYwRAIgSJI892ahWJRdH0pj3pm22d4TLts3bs68m7COckldGV4CIFZu1HnkWnIq
m5uA+3qiBqKsLZJdUsw20ZCZy0m1f4AzAHYATnWjJ1yaEMM4W2zU3z9S6x3w4I4b
jWnAsfpksWKaOd8AAAGN58v1NQAABAMARzBFAiEA9JEffggodL4lmS3lxnm8G+dr
9nnDidW+/9gG0pHDtSECIC08ZVG/MtPtNqM84FnqdEcBXedrWsc/EPUmKoqw+hzH
MA0GCSqGSIb3DQEBDAUAA4IBgQArWbTv7ssc5m9coXCxfAVNVPdCOmtbbmBs+6+c
wqTWvEjcTpEaYFIlNV8KohN3NWFFana8wcjr4vplZbWwIQc8PGkS6s+YY4j7IO3b
ncZQ41ZDQ8mFpc1l/8uthKQOWFkdNKbpSP1fP9W3EuVBs6y7fDoXB6AvFI8BUv1z
qyQ4z8iyN/kf13V8RwY0HlcjPJzr5d8dUM9y6AgURJlkHYUDzHHySQHsBYkgMN6H
yNljfDj3hDkJkYzfYZ7pS8xl76pqmLcODrazrJJ6wvjZdTp7UX/uDkkooycpvRiG
aeWZ9drsTsDHz2xIhiKiJUKJLNUPsGazg+dtGwMu6P2QQy8x5n5FgezHTaKFfXbY
eee0IoabQLkR57uzZCrRSQEapTyoVVlletF+eAXeLrr6S1TaqxQEczyk3HaK6ngv
zKtgUW8DG0mZYgRoYrVXxM9h1HUOH6BUcX2/rkunkDfDSDV03/oPgBTflWJJnMM0
F39pBSR+Y/WTIFa6q7YorA5hkaU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAkTnbljT7KsTrOr7USD
ceSOCQoR4JPBGhSqsEN3PPpAi7bokiPbrIBE5fGwNYbbN4cTbKZnTizQ7c/OodfH
jlg7Peet1o+TrEpA2JGrx7Kxw1Wa7ivg+osy693fryQnGqYXIhe7pwHn3viO0ZPc
ogBbTlHbtLonQUSoQtQzTXAr+HkipsuWNNR2dtVP3wQAarnEvsCfgSIxUTo1YlJ7
uapGTvZwegxnxMOn38bKWyLcSymPzKa9zRBIx3EkSYq3vBCKqqhMeiyNWqYYL0Na
uFZA2aZCsXwCXD9vo/6/n9Exr1IvOGJQKWUHMb1iERCHTTWOuv5c92+LuFfAlowM
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 136410528060827377224355887129221172419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions L.L.C.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions RSA OV SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Piragis Northwoods Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.boundarywaterscatalog.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18182791765929152377716558944878332975403678920577024107034251488929441396143489039497194446727674224128748402835507847675927722275708405790415831241462974611810850721814974369690803867277220446424247867616089672538646181385657530854852165736809853233999121613563721132949161093481152803758590952043493817797531010217628588327467001778765272574323502543076451120375688657370178130870844364448458292539069800395711506136131132965551584253310872439800336955971367347913213812473381211544315253174960954997797947606769817324251149115102135634275421598508336340127959568439183632282613919167055261515745553141755041025149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea25ff5c9f4e4f4ec114a0dbcabeabf2e2e278a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68a72ffa6b00fa79a96cbfb4a69166a24049c4a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.netsolssl.com/NetworkSolutionsRSAOVSSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.netsolssl.com/NetworkSolutionsRSAOVSSLCA3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.netsolssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boundarywaterscatalog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boundarywaterscatalog.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		002b59b4efeecb1ce66f5ca170b17c054d54f7423a6b5b6e606cfbaf9cc2a4d6bc48dc4e911a605225355f0aa213773561456a76bcc1c8ebe2fa6565b5b021073c3c6912eacf986388fb20eddb9dc650e3564343c985a5cd65ffcbad84a40e58591d34a6e948fd5f3fd5b712e541b3acbb7c3a1707a02f148f0152fd73ab2438cfc8b237f91fd7757c4706341e57233c9cebe5df1d50cf72e808144499641d8503cc71f24901ec05892030de87c8d9637c38f7843909918cdf619ee94bcc65efaa6a98b70e0eb6b3ac927ac2f8d9753a7b517fee0e4928a32729bd188669e599f5daec4ec0c7cf6c488622a22542892cd50fb066b383e76d1b032ee8fd90432f31e67e4581ecc74da2857d76d879e7b422869b40b911e7bbb3642ad149011aa53ca85559657ad17e7805de2ebafa4b54daab1404733ca4dc768aea782fccab60516f031b499962046862b557c4cf61d4750e1fa054717dbfae4ba79037c3483574dffa0f8014df9562499cc334177f6905247e63f5932056baabb628ac0e6191a5