*.nchmd.org
- NCH Healthcare Systems Inc. -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 09:36:6b:10:08:de:95:17:17:0e:52:eb:43:45:5e:f7 was issued on by DigiCert Inc.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
NCH Healthcare Systems Inc.
Organization:
NCH Healthcare Systems Inc.
State / Province:
Florida
Locality: Naples
Country: US
Locality: Naples
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:36:6b:10:08:de:95:17:17:0e:52:eb:43:45:5e:f7Serial Number (int): 12245607480648280174107300178877046519
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 80:b7:52:3b:32:6b:ef:17:2b:5f:ed:6f:ff:49:66:41:c2:74:3f:53
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 3a:56:8f:81:d4:48:bb:cf:12:92:3d:05:80:0b:da:49:e0:69:52:03
Fingerprint (sha256): 86:cd:01:7c:5f:1c:03:12:77:ea:ff:35:9f:dc:6c:50:3f:51:1c:fa:41:a9:0b:10:44:ce:10:6c:03:c2:51:c7
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate *.nchmd.org
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.nchmd.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.nchmd.org
tpa-vdicon04.lb.nchmd.org
lb.nchmd.org
tpa-vdicon04.nchmd.org
nchmd.org
tpa-vdicon04.lb.nchmd.org
lb.nchmd.org
tpa-vdicon04.nchmd.org
nchmd.org
Other certificates including the domain name nchmd.org
(limited to 100 certificates)
*.nchmd.org
*.nchmd.org
*.nchmd.org
facilities.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
facilities.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
remote.nchmd.org
providers.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
itdesk.tropicknitsindia.com
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
wellnesspartners.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
NCH-EXPRESSE.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
nchmd.org
nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
facilities.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
NCH-EXPRESSE.nchmd.org
helpdesk.cdscorp.ca
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
csg.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
facilities.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
facilities.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
remote.nchmd.org
providers.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
itdesk.tropicknitsindia.com
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
wellnesspartners.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
NCH-EXPRESSE.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
nchmd.org
nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
facilities.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
NCH-EXPRESSE.nchmd.org
helpdesk.cdscorp.ca
*.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
csg.nchmd.org
*.nchmd.org
*.nchmd.org
*.nchmd.org
Certificate
The complete raw certificate details for *.nchmd.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgIQCTZrEAjelRcXDlLrQ0Ve9zANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwODE5MDAwMDAwWhcN MjAwNDA4MTIwMDAwWjBsMQswCQYDVQQGEwJVUzEQMA4GA1UECBMHRmxvcmlkYTEP MA0GA1UEBxMGTmFwbGVzMSQwIgYDVQQKExtOQ0ggSGVhbHRoY2FyZSBTeXN0ZW1z IEluYy4xFDASBgNVBAMMCyoubmNobWQub3JnMIICIjANBgkqhkiG9w0BAQEFAAOC Ag8AMIICCgKCAgEA8Us9QsvvZ5F2pW4rOTrg82wZJampSBC7+e9hVzl+F+mYrfpK JK/m3ng7EI11wl5bnqVSkQkCkzqOxZLJlOQ9C6X4OilUXL8iwFMl665b+ovo4D98 Yc9XzuaZjeQrFj4j6/FNhIUECyacaMedYtB3ga9VW+a3wlTduuQZOs9+U9WZHb3M O1coBpOI3tc0nvpQ3P0AbQSSA0dxVYnmdpX42s5rKDsdzMq+n4rpwtiS8mHjQMfb 4ZeIM9nH6b3M15HK4dtMuOSFRFFCCDyLCnrAHpzy1oiz71RoiDzpwVIjkholtS8n Xi72rVoaExk+jnM2iME5fdSntaSxsUKnhN6FYI5hVpx4K8qg+uhTKq00gcyUprtf iUkeSwAEkhr7gykuCrs6dvUjXBJQAmRqhIT2WfgO/AMgwhxwGzVFK4ZXeXC1x6to CuBSDYgHJxzHtQih1Clzy9J5/zFumT0Jm8lz2TbTT3hB011C965eRqr+Sl9vYmrp SamBOVSHY7Jlr1cGfZTTDxm+wxCs9nGinxsmRiWATQX6SB3aGmLzLWmM2lk1ANMz 1JvIb7edSuEG/P4R4X8bxJeVVcLg+9q/fUTNHKXlt8GM1NjD/B7U2VEGwM19WiC4 YtIojMujqxSgvWaAe3ZGGcNCt9qmFN76xz0dhELcEB0ZvHQcQM/wCzmKsVUCAwEA AaOCAjMwggIvMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1Ud DgQWBBSAt1I7MmvvFytf7W//SWZBwnQ/UzBiBgNVHREEWzBZggsqLm5jaG1kLm9y Z4IZdHBhLXZkaWNvbjA0LmxiLm5jaG1kLm9yZ4IMbGIubmNobWQub3JnghZ0cGEt dmRpY29uMDQubmNobWQub3JnggluY2htZC5vcmcwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilo dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4Yp aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0g BEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGln aWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUF BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6 Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJD QS5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG 9w0BAQsFAAOCAQEA2PJrcKSXVHPruLaF2wWdRzQ9ZL0f8RjHy0XRmR2LAMFOQSe/ 5rXUStDqbLBvsGGIaxUmeE15QV0wOJw7P4M87bRICoPh6Au86hhtdvJWgVQ0e4hj rlEs8dJsW2KQwnyRyzfUEqrAFSjISGzVWLekjfMC9B76kZm/PW1Q/i2US8S2C9qv 9kAzSlQQLynqxYS/njxhFZZBJ7szklC2++BAzzRJEiOI+YKg3jWknPvFyuvod9Ls Y1v3xwXO34L7cvfisTzSN5RH/tjUgEFJa4p5HMzAHTZoWQHA5q+ODUem2MzjI3UE gn6ZMnYhykBWVHjfbuqt/Jn+CKszgDpdfku+IQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8Us9QsvvZ5F2pW4rOTrg 82wZJampSBC7+e9hVzl+F+mYrfpKJK/m3ng7EI11wl5bnqVSkQkCkzqOxZLJlOQ9 C6X4OilUXL8iwFMl665b+ovo4D98Yc9XzuaZjeQrFj4j6/FNhIUECyacaMedYtB3 ga9VW+a3wlTduuQZOs9+U9WZHb3MO1coBpOI3tc0nvpQ3P0AbQSSA0dxVYnmdpX4 2s5rKDsdzMq+n4rpwtiS8mHjQMfb4ZeIM9nH6b3M15HK4dtMuOSFRFFCCDyLCnrA Hpzy1oiz71RoiDzpwVIjkholtS8nXi72rVoaExk+jnM2iME5fdSntaSxsUKnhN6F YI5hVpx4K8qg+uhTKq00gcyUprtfiUkeSwAEkhr7gykuCrs6dvUjXBJQAmRqhIT2 WfgO/AMgwhxwGzVFK4ZXeXC1x6toCuBSDYgHJxzHtQih1Clzy9J5/zFumT0Jm8lz 2TbTT3hB011C965eRqr+Sl9vYmrpSamBOVSHY7Jlr1cGfZTTDxm+wxCs9nGinxsm RiWATQX6SB3aGmLzLWmM2lk1ANMz1JvIb7edSuEG/P4R4X8bxJeVVcLg+9q/fUTN HKXlt8GM1NjD/B7U2VEGwM19WiC4YtIojMujqxSgvWaAe3ZGGcNCt9qmFN76xz0d hELcEB0ZvHQcQM/wCzmKsVUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12245607480648280174107300178877046519 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Naples' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NCH Healthcare Systems Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nchmd.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 984393242134678358969376990437074579710634650183092834065488490863994664801401551828059391851391222188722994758885218868727294650461791042619950494604241783235627057438322540690365915238043537349582572936233580367107318485086780130949152346004313584920261756820965037635364241084799718853906163090029758161405069185180660385802934475666587922328872048014452152308081262736593965392772216601115497662485304380147746423097424403563345214481302908823520890303230880919315582147274180553109252543865385109800631990577581411693532718019570083390480883306237285025823972815421198398241795968011631502534495741466033755780377344686357001010779995134451730927521503972747098900937572797706148564289007509604776541708460145638691773744298701095768309949900304536418990863897998592460848401924907095351361633175180258238592489730775762256435087246163226044681457696790157783990124051396166416659398596025511443362299893118509851604551199230347887789590378595188628324766241651691444787481271095694695027807497589826883541056076997839225561404198208961141924605945131892507062340118043158766522460060520745475190318694188719601618273880111625084071932016852727989798822289702677259811749889837938939620176531339643124466687519120038040515031381 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 80b7523b326bef172b5fed6fff496641c2743f53 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nchmd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpa-vdicon04.lb.nchmd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lb.nchmd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpa-vdicon04.nchmd.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nchmd.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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