secure.timedock.com
- Timedock Limited -
Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 01:c0:57:f0:e9:4a:91:82:b1:11:38:74:38:b3:bb:03 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Timedock Limited
Organization:
Timedock Limited
Locality:
Tauranga
Country: NZ
Country: NZ
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 01:c0:57:f0:e9:4a:91:82:b1:11:38:74:38:b3:bb:03Serial Number (int): 2327932649218278849350238760636496643
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: da:4b:98:07:61:d7:6b:78:4d:38:11:e8:d0:93:2a:d3:9b:fb:c7:63
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17
Fingerprint (sha1): 16:e3:df:5c:b9:de:a5:2f:b6:53:7b:a9:dc:43:e5:d2:7a:71:38:07
Fingerprint (sha256): 8a:f6:fb:80:73:17:88:b7:ff:76:35:3b:dc:08:58:ff:2a:83:01:28:a1:d4:c0:27:3b:00:84:f6:eb:9d:ef:b3
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
Check the revocation status for certificate secure.timedock.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for secure.timedock.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
secure.timedock.com
www.secure.timedock.com
www.secure.timedock.com
Other certificates including the domain name timedock.com
(limited to 100 certificates)
ssl371471.cloudflaressl.com
ssl256013.cloudflaressl.com
timedock.com
ssl371471.cloudflaressl.com
www.timedock.com
secure.timedock.com
ssl256013.cloudflaressl.com
ssl256013.cloudflaressl.com
ssl256011.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl3004.cloudflare.com
ssl256013.cloudflaressl.com
secure.timedock.com
ssl371471.cloudflaressl.com
6di.linkengageclick.com
ssl371469.cloudflaressl.com
ssl256012.cloudflaressl.com
ssl256013.cloudflaressl.com
secure.timedock.com
ssl371470.cloudflaressl.com
ssl371470.cloudflaressl.com
ssl256013.cloudflaressl.com
sni.cloudflaressl.com
ssl256013.cloudflaressl.com
timedock.com
ssl256012.cloudflaressl.com
secure.timedock.com
ssl3004.cloudflare.com
ssl256013.cloudflaressl.com
ssl256011.cloudflaressl.com
ssl256013.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl256012.cloudflaressl.com
www.timedock.com
ssl371471.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl256011.cloudflaressl.com
ssl256013.cloudflaressl.com
ssl3004.cloudflare.com
ssl371471.cloudflaressl.com
ssl256013.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl3004.cloudflare.com
6di.linkengageclick.com
ssl371471.cloudflaressl.com
6di.linkengageclick.com
ssl256011.cloudflaressl.com
www.timedock.com
ssl371469.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl256011.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl3004.cloudflare.com
ssl371471.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl256013.cloudflaressl.com
ssl3004.cloudflare.com
ssl371469.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl371469.cloudflaressl.com
timedock.com
ssl371471.cloudflaressl.com
ssl371469.cloudflaressl.com
ssl371469.cloudflaressl.com
ssl256013.cloudflaressl.com
www.forums.timedock.com
ssl256013.cloudflaressl.com
ssl256011.cloudflaressl.com
secure.timedock.com
6di.linkengageclick.com
ssl371470.cloudflaressl.com
ssl371470.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl371471.cloudflaressl.com
6di.linkengageclick.com
ssl256013.cloudflaressl.com
6di.linkengageclick.com
ssl371469.cloudflaressl.com
klenty.timedock.com
ssl256013.cloudflaressl.com
6di.linkengageclick.com
ssl371471.cloudflaressl.com
sni.cloudflaressl.com
ssl256013.cloudflaressl.com
6di.linkengageclick.com
ssl371471.cloudflaressl.com
ssl371470.cloudflaressl.com
secure.timedock.com
ssl371470.cloudflaressl.com
sa542gl.wpc.edgecastcdn.net
6di.linkengageclick.com
snib48egl.wpc.sigmacdn.net
ssl256013.cloudflaressl.com
6di.linkengageclick.com
6di.linkengageclick.com
ssl371471.cloudflaressl.com
ssl371470.cloudflaressl.com
ssl371470.cloudflaressl.com
secure.timedock.com
ssl256013.cloudflaressl.com
timedock.com
ssl371471.cloudflaressl.com
www.timedock.com
secure.timedock.com
ssl256013.cloudflaressl.com
ssl256013.cloudflaressl.com
ssl256011.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl3004.cloudflare.com
ssl256013.cloudflaressl.com
secure.timedock.com
ssl371471.cloudflaressl.com
6di.linkengageclick.com
ssl371469.cloudflaressl.com
ssl256012.cloudflaressl.com
ssl256013.cloudflaressl.com
secure.timedock.com
ssl371470.cloudflaressl.com
ssl371470.cloudflaressl.com
ssl256013.cloudflaressl.com
sni.cloudflaressl.com
ssl256013.cloudflaressl.com
timedock.com
ssl256012.cloudflaressl.com
secure.timedock.com
ssl3004.cloudflare.com
ssl256013.cloudflaressl.com
ssl256011.cloudflaressl.com
ssl256013.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl256012.cloudflaressl.com
www.timedock.com
ssl371471.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl256011.cloudflaressl.com
ssl256013.cloudflaressl.com
ssl3004.cloudflare.com
ssl371471.cloudflaressl.com
ssl256013.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl3004.cloudflare.com
6di.linkengageclick.com
ssl371471.cloudflaressl.com
6di.linkengageclick.com
ssl256011.cloudflaressl.com
www.timedock.com
ssl371469.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl256011.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl3004.cloudflare.com
ssl371471.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl256013.cloudflaressl.com
ssl3004.cloudflare.com
ssl371469.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl371469.cloudflaressl.com
timedock.com
ssl371471.cloudflaressl.com
ssl371469.cloudflaressl.com
ssl371469.cloudflaressl.com
ssl256013.cloudflaressl.com
www.forums.timedock.com
ssl256013.cloudflaressl.com
ssl256011.cloudflaressl.com
secure.timedock.com
6di.linkengageclick.com
ssl371470.cloudflaressl.com
ssl371470.cloudflaressl.com
ssl371471.cloudflaressl.com
ssl371471.cloudflaressl.com
6di.linkengageclick.com
ssl256013.cloudflaressl.com
6di.linkengageclick.com
ssl371469.cloudflaressl.com
klenty.timedock.com
ssl256013.cloudflaressl.com
6di.linkengageclick.com
ssl371471.cloudflaressl.com
sni.cloudflaressl.com
ssl256013.cloudflaressl.com
6di.linkengageclick.com
ssl371471.cloudflaressl.com
ssl371470.cloudflaressl.com
secure.timedock.com
ssl371470.cloudflaressl.com
sa542gl.wpc.edgecastcdn.net
6di.linkengageclick.com
snib48egl.wpc.sigmacdn.net
ssl256013.cloudflaressl.com
6di.linkengageclick.com
6di.linkengageclick.com
ssl371471.cloudflaressl.com
ssl371470.cloudflaressl.com
ssl371470.cloudflaressl.com
secure.timedock.com
Certificate
The complete raw certificate details for secure.timedock.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIQAcBX8OlKkYKxETh0OLO7AzANBgkqhkiG9w0BAQsFADBZ MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjMx MjEyMDAwMDAwWhcNMjUwMTExMjM1OTU5WjBZMQswCQYDVQQGEwJOWjERMA8GA1UE BxMIVGF1cmFuZ2ExGTAXBgNVBAoTEFRpbWVkb2NrIExpbWl0ZWQxHDAaBgNVBAMT E3NlY3VyZS50aW1lZG9jay5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDIJI2hCDrVeuOo0tX0/GkW7LTrb9Xz/Cy5bTr+Ea5x7DkSTPYRJDa1YU9w uNR47YzexMPbRA8BcwYLFVzhEsLeOl7ehMRpzsz0SLp9bUZzg791eIDi0J5zijbu nHaVdtYbAon9ROT/30yCKW4vpfTwCIemLiOvNPbYj7nmJThrrlQoEiBUrqQmPsKU aWRRiEy6HZN3adN1NpExR0l8G9xTSlY/9sxtick6kXDoS+vtfRx/iE/OCMTNCyf6 qePIda0X79jHOtbVQJ660ph0c1CtFUD5a8O4KuEfRhyaffx/+HZbnbstphvPlvoO i7P/+xAT1GfcpJ7YNCopInV6wHSdAgMBAAGjggOqMIIDpjAfBgNVHSMEGDAWgBR0 hYDAZsffN97PvSk3qgMdvu3NFzAdBgNVHQ4EFgQU2kuYB2HXa3hNOBHo0JMq05v7 x2MwNwYDVR0RBDAwLoITc2VjdXJlLnRpbWVkb2NrLmNvbYIXd3d3LnNlY3VyZS50 aW1lZG9jay5jb20wPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYb aHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEagRIZC aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzJUTFNSU0FT SEEyNTYyMDIwQ0ExLTEuY3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5j b20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcmwwgYcG CCsGAQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQu Y29tMFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGln aUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwDAYDVR0TAQH/ BAIwADCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHcATnWjJ1yaEMM4W2zU3z9S 6x3w4I4bjWnAsfpksWKaOd8AAAGMYBFaYgAABAMASDBGAiEA9UV0E9jFnlVt9Zsk hh2PoCBx4JYT4d6gkM7bUCIAkeoCIQDZdh4b+KXtI66LVg87CZtqY8OY8o7hyuyY 32lDgrsRSAB2AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABjGAR WpMAAAQDAEcwRQIhAM+CzD3k8wZKyLFOevONCN5YlrU6JmPlY2OBMCbXPoMbAiB+ Etlny1pZqHiAPCQIDW3L3rGmA+kpXclV4JluL1EQagB3AH1ZHhLheCp7HGFnfF79 +NCHXBSgTpWeuQMv2Q6MLnm4AAABjGARWmQAAAQDAEgwRgIhAPeAjeFi7xgRZ2sZ nmb6D/os9Y/vZYS2k/2xd/oqUSbAAiEAhv55xlCbn8q9WNLkIOrmVpo0TDdoIUGR MGJpj7gf9DEwDQYJKoZIhvcNAQELBQADggEBAMvZ/MWM849D28jSZeZi/mzzY5Xe Wnap5Qj5q3fEj28jD/gGh2kBP/p5eDW8Inc4ggXeSRnkZb3+Nu0kIiuSM6XnQHAI 7qz7BbpbcSKWWcbqQJeOQeQ7jPBOkgwTpND4VFAtq8r9mO5xQ1GxtyH+QbeUEBra WN3PE+/iX3upyzPH4pxdJcCyGtNCnGlUHg7HaKKU7/hEHCVnSw9QW07Y2nAPyaAg vgY57teiDyNV0CpjaQXHwWDB9iJ6ZlJfajXI2zahZQsMsVqooqo/hE1TQwQOuzjO hZnDic+Wk25fPKYDTtQYmJUBRkWuESSpreg6p3BQBnWzEVmOCPTNdW0t8Lk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCSNoQg61XrjqNLV9Pxp Fuy062/V8/wsuW06/hGucew5Ekz2ESQ2tWFPcLjUeO2M3sTD20QPAXMGCxVc4RLC 3jpe3oTEac7M9Ei6fW1Gc4O/dXiA4tCec4o27px2lXbWGwKJ/UTk/99MgiluL6X0 8AiHpi4jrzT22I+55iU4a65UKBIgVK6kJj7ClGlkUYhMuh2Td2nTdTaRMUdJfBvc U0pWP/bMbYnJOpFw6Evr7X0cf4hPzgjEzQsn+qnjyHWtF+/YxzrW1UCeutKYdHNQ rRVA+WvDuCrhH0Ycmn38f/h2W527LaYbz5b6Douz//sQE9Rn3KSe2DQqKSJ1esB0 nQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2327932649218278849350238760636496643 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tauranga' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Timedock Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.timedock.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25265686066873208701161589952021716297687671810334022760729936205149136981984362669070056501191289410479019437986696010563130675567721064229918739374087375903275423909559341046940547586233969532260902386960440192764332322202901474749802409570521126647744980940572098039794055053015001790383541185887216843397791007203549877127481934695742843146614291800136945492111911694782693612433585615381204011558517072523276832635086021461974567538096833662901992980082567549604737145709757303347871987896778691134262221017688631688758458799596581137717190550918525760012631700959977015801753796669799444390130616611329548514461 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) da4b980761d76b784d3811e8d0932ad39bfbc763 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.timedock.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure.timedock.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00cbd9fcc58cf38f43dbc8d265e662fe6cf36395de5a76a9e508f9ab77c48f6f230ff8068769013ffa797835bc2277388205de4919e465bdfe36ed24222b9233a5e7407008eeacfb05ba5b71229659c6ea40978e41e43b8cf04e920c13a4d0f854502dabcafd98ee714351b1b721fe41b794101ada58ddcf13efe25f7ba9cb33c7e29c5d25c0b21ad3429c69541e0ec768a294eff8441c25674b0f505b4ed8da700fc9a020be0639eed7a20f2355d02a636905c7c160c1f6227a66525f6a35c8db36a1650b0cb15aa8a2aa3f844d5343040ebb38ce8599c389cf96936e5f3ca6034ed4189895014645ae1124a9ade83aa770500675b311598e08f4cd756d2df0b9