*.training.itransplant.net
- Transplant Connect, Inc. -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 03:e1:4b:0b:a8:10:e6:64:9f:69:6b:ce:be:57:55:18 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Transplant Connect, Inc.
Organization:
Transplant Connect, Inc.
Organization unit: Transplant Connect
Organization unit: Transplant Connect
State / Province:
California
Locality: Santa Monica
Country: US
Locality: Santa Monica
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e1:4b:0b:a8:10:e6:64:9f:69:6b:ce:be:57:55:18Serial Number (int): 5157472884769057830872396289944278296
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 97:5c:4c:55:6f:b6:ab:9d:38:9f:54:28:cb:34:66:66:ef:2f:90:fa
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 35:5b:58:61:5d:53:30:36:58:ef:20:1c:4c:9f:c4:4d:f6:d7:56:b1
Fingerprint (sha256): 88:b6:0c:5b:a6:e0:71:2a:01:59:b8:ab:91:ec:42:94:56:78:d1:7e:79:8b:30:dd:87:ef:08:2f:8e:46:76:22
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate *.training.itransplant.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.training.itransplant.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.training.itransplant.net
training.itransplant.net
training.itransplant.net
Other certificates including the domain name itransplant.net
(limited to 100 certificates)
*.build.itransplant.net
*.build.itransplant.net
*.build.itransplant.net
*.build.itransplant.net
*.itransplant.net
*.itransplant.net
*.ftp.itransplant.net
*.eval.itransplant.net
*.itransplant.net
*.build.itransplant.net
*.itransplant.net
*.itransplant.net
*.itransplant.net
*.eval.itransplant.net
*.itransplant.net
*.training.itransplant.net
*.build.itransplant.net
*.itransplant.net
*.itransplant.net
*.training.itransplant.net
*.build.itransplant.net
*.itransplant.net
*.training.itransplant.net
*.build.itransplant.net
*.itransplant.net
*.training.itransplant.net
*.ftp.itransplant.net
*.training.itransplant.net
*.itransplant.net
*.itransplant.net
*.itransplant.net
*.itransplant.net
*.itransplant.net
*.itransplant.net
*.ftp.itransplant.net
*.build.itransplant.net
*.itransplant.net
itransplant.net
*.training.itransplant.net
*.eval.itransplant.net
*.ftp.itransplant.net
*.eval.itransplant.net
*.training.itransplant.net
*.itransplant.net
*.itransplant.net
*.eval.itransplant.net
*.build.itransplant.net
*.training.itransplant.net
*.ftp.itransplant.net
*.itransplant.net
*.training.itransplant.net
*.itransplant.net
*.training.itransplant.net
*.ftp.itransplant.net
*.eval.itransplant.net
*.build.itransplant.net
*.itransplant.net
*.eval.itransplant.net
*.training.itransplant.net
*.itransplant.net
*.itransplant.net
*.itransplant.net
*.training.itransplant.net
*.training.itransplant.net
*.build.itransplant.net
*.itransplant.net
*.build.itransplant.net
*.build.itransplant.net
*.training.itransplant.net
*.eval.itransplant.net
*.training.itransplant.net
*.eval.itransplant.net
*.build.itransplant.net
*.itransplant.net
*.eval.itransplant.net
*.training.itransplant.net
*.training.itransplant.net
*.itransplant.net
*.itransplant.net
*.itransplant.net
*.itransplant.net
*.training.itransplant.net
*.build.itransplant.net
*.build.itransplant.net
*.build.itransplant.net
*.build.itransplant.net
*.itransplant.net
*.itransplant.net
*.ftp.itransplant.net
*.eval.itransplant.net
*.itransplant.net
*.build.itransplant.net
*.itransplant.net
*.itransplant.net
*.itransplant.net
*.eval.itransplant.net
*.itransplant.net
*.training.itransplant.net
*.build.itransplant.net
*.itransplant.net
*.itransplant.net
*.training.itransplant.net
*.build.itransplant.net
*.itransplant.net
*.training.itransplant.net
*.build.itransplant.net
*.itransplant.net
*.training.itransplant.net
*.ftp.itransplant.net
*.training.itransplant.net
*.itransplant.net
*.itransplant.net
*.itransplant.net
*.itransplant.net
*.itransplant.net
*.itransplant.net
*.ftp.itransplant.net
*.build.itransplant.net
*.itransplant.net
itransplant.net
*.training.itransplant.net
*.eval.itransplant.net
*.ftp.itransplant.net
*.eval.itransplant.net
*.training.itransplant.net
*.itransplant.net
*.itransplant.net
*.eval.itransplant.net
*.build.itransplant.net
*.training.itransplant.net
*.ftp.itransplant.net
*.itransplant.net
*.training.itransplant.net
*.itransplant.net
*.training.itransplant.net
*.ftp.itransplant.net
*.eval.itransplant.net
*.build.itransplant.net
*.itransplant.net
*.eval.itransplant.net
*.training.itransplant.net
*.itransplant.net
*.itransplant.net
*.itransplant.net
*.training.itransplant.net
*.training.itransplant.net
*.build.itransplant.net
*.itransplant.net
*.build.itransplant.net
*.build.itransplant.net
*.training.itransplant.net
*.eval.itransplant.net
*.training.itransplant.net
*.eval.itransplant.net
*.build.itransplant.net
*.itransplant.net
*.eval.itransplant.net
*.training.itransplant.net
*.training.itransplant.net
*.itransplant.net
*.itransplant.net
*.itransplant.net
*.itransplant.net
*.training.itransplant.net
*.build.itransplant.net
Certificate
The complete raw certificate details for *.training.itransplant.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGvTCCBaWgAwIBAgIQA+FLC6gQ5mSfaWvOvldVGDANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xOTA2MTkwMDAwMDBaFw0yMTA1MDYxMjAwMDBa MIGeMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEVMBMGA1UEBxMM U2FudGEgTW9uaWNhMSEwHwYDVQQKExhUcmFuc3BsYW50IENvbm5lY3QsIEluYy4x GzAZBgNVBAsTElRyYW5zcGxhbnQgQ29ubmVjdDEjMCEGA1UEAwwaKi50cmFpbmlu Zy5pdHJhbnNwbGFudC5uZXQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC AQCmYuyEc9quOI49PkkMDrTYGa5Rei7TMKn7/oQ4bQhHbKYc85u73CVzw3zB3GvM HAlhc9ZjskejS88EocSk3uOs0ooM1+MP6X7P/kSE3ujmsry9AoMkBsuBPYTEHXl+ o7GgYmR6hb/94bMcaS2srf+sHoZHJbxJtxXQBmxcdyZVm9xmQyRGYU3MLgBRftxB sABpv+2vDHeRoY7jujSuWnwcjWh4VfG0nGw3yhPdIXRi3jjpWc000nBRPvm+3+JS YftDZ61H0/FIq72FPdL7QLpqLV/ciPkZgngAoHTPKDlcKFb29PuP+BOyaGoTDDAy wni5cmb8+AJHfkdmZhy9vyVIyRca+G5bFic3XqIzvBPuObwInaxIiBmvAmOTPkSf 9PAlvo+WQ2Y2EsOh6ft6bq7ypi7qgvxTNyEVF8YvZEWs2TmB0o2kq6dueav/bYtl 1nvv9wdtx/IseRiEg65R5V6StsZGzpPQjA5FszAQdomojy9f8dVF5W5hwD+kDsTO +FNf1kfioU7Cys/yfb5XzRlbwxqXpD5y0FyU1HIYIxDIrwTdfcxEQp10jI45vLHP UcWvT+30R4EFyvS9/hyvmujJn8ALXF92DWOqXspBjIOH2HuIeIH2ARbvD0pbHPJ6 ocXBiyK5rAnG13M1pnl1j2yfqDqx49vP/5oui6hY/YBgRwIDAQABo4ICIjCCAh4w HwYDVR0jBBgwFoAUUWj/kK8CB3U8zNllZGKiErhZcjswHQYDVR0OBBYEFJdcTFVv tqudOJ9UKMs0ZmbvL5D6MD8GA1UdEQQ4MDaCGioudHJhaW5pbmcuaXRyYW5zcGxh bnQubmV0ghh0cmFpbmluZy5pdHJhbnNwbGFudC5uZXQwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAw hi5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYuY3Js MDSgMqAwhi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXIt ZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0 dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMIGDBggrBgEFBQcB AQR3MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBNBggr BgEFBQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hB MkhpZ2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEE AdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFP2OGsTTUxyd9lVYOAX GaW+T8DFx8TF9GHAGo4uLwbxL4ZeHmqqVW0lfBlYFKRwvhqiFEepIRx8EMI2FTMD QIJ1ljgw7NZSwpKVi2EXnoxt1+W0YUNSHzro46s53K2B2rRsUo7zT1pSeNXKxxsz dTbhiPo9xuRFJVijj9VClPyJTvHL+s3i+MYGr4Z6EbnbYawzkTyjHPX1O6zuWg3l UWVOPSVYvvbmc/16BMijpzD2KYJ+QHxuCYMfXdK6cM1GfFAo0dejgT9aubIG9Y0z xbCu5R/sBHVYeXXELgAAkW1SSdb8lTMpwz8kGG2KlThSTLFqExi8nLGuF40MUegr bw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApmLshHParjiOPT5JDA60 2BmuUXou0zCp+/6EOG0IR2ymHPObu9wlc8N8wdxrzBwJYXPWY7JHo0vPBKHEpN7j rNKKDNfjD+l+z/5EhN7o5rK8vQKDJAbLgT2ExB15fqOxoGJkeoW//eGzHGktrK3/ rB6GRyW8SbcV0AZsXHcmVZvcZkMkRmFNzC4AUX7cQbAAab/trwx3kaGO47o0rlp8 HI1oeFXxtJxsN8oT3SF0Yt446VnNNNJwUT75vt/iUmH7Q2etR9PxSKu9hT3S+0C6 ai1f3Ij5GYJ4AKB0zyg5XChW9vT7j/gTsmhqEwwwMsJ4uXJm/PgCR35HZmYcvb8l SMkXGvhuWxYnN16iM7wT7jm8CJ2sSIgZrwJjkz5En/TwJb6PlkNmNhLDoen7em6u 8qYu6oL8UzchFRfGL2RFrNk5gdKNpKunbnmr/22LZdZ77/cHbcfyLHkYhIOuUeVe krbGRs6T0IwORbMwEHaJqI8vX/HVReVuYcA/pA7EzvhTX9ZH4qFOwsrP8n2+V80Z W8Mal6Q+ctBclNRyGCMQyK8E3X3MREKddIyOObyxz1HFr0/t9EeBBcr0vf4cr5ro yZ/AC1xfdg1jql7KQYyDh9h7iHiB9gEW7w9KWxzyeqHFwYsiuawJxtdzNaZ5dY9s n6g6sePbz/+aLouoWP2AYEcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5157472884769057830872396289944278296 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-06 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Monica' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Transplant Connect, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Transplant Connect' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.training.itransplant.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 678797377345128144263071649589121930244282598956805149180467655227696120097314947697419225596974364403180910735772344179382399938216887308878872321933029187823553607343160959989365117037811922412498115974247393032213168743236623166542750667194722336478552668223294646924043627963882605340163870372542962455597198248662230000216117506531050909906480598030628685117293228306203779726117717498152033683130258035238107156910871346215914914512557067868639224938141281780550711533774667508215640815263315187279877421217814068806207565471017173845162070830395250384119774502803927335573903350424777851602817996612862595326841144100738699143986232107087427962229836864108093707321446345403184087408468765705495771248367894177700769041267664248414616747105778027817638016570349563697289865596133525317598259043588471716113406858879317428541586788341227869986046607127699963584784342130463120314502337644597335454592852338466038639959531887525526146483539809720651242969194811963967476631793302028801689078736396953661116946179278081844929193794446604968556508108654138364359883157634427772024207852799311883999578736404153689715392080571071138702141937029019731506484465301628927493323858193771606774640276858312801763680906395060989530759239 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 975c4c556fb6ab9d389f5428cb346666ef2f90fa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.training.itransplant.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.itransplant.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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