mail.freyberg.ac.nz
- Freyberg High School -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0a:01:46:d9:81:38:92:7b:65:04:3a:7a:06:f5:f8:6d was issued on by DigiCert Inc.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Freyberg High School
Organization:
Freyberg High School
State / Province:
North Island
Locality: Palmerston North
Country: NZ
Locality: Palmerston North
Country: NZ
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:01:46:d9:81:38:92:7b:65:04:3a:7a:06:f5:f8:6dSerial Number (int): 13298909255883172623544495533031028845
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: d2:25:a4:65:00:80:f4:b3:0c:2b:ca:aa:bc:63:9b:f9:a1:e2:96:4c
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): a0:ec:72:05:a7:90:57:4b:16:e0:c9:73:bb:bd:99:26:43:e4:0f:33
Fingerprint (sha256): 8c:42:58:8b:e2:99:c6:30:ed:bc:5d:b4:72:23:09:3c:2c:98:42:cf:ee:cf:9a:0c:3e:16:e9:e8:46:11:81:b4
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl
Check the revocation status for certificate mail.freyberg.ac.nz
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.freyberg.ac.nz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.freyberg.ac.nz
exchange.freyberghighschool.com
autodiscover.freyberghighschool.com
autodiscover.freyberg.ac.nz
e-frey.freyberghighschool.com
sharepoint.freyberghighschool.com
exchange.freyberghighschool.com
autodiscover.freyberghighschool.com
autodiscover.freyberg.ac.nz
e-frey.freyberghighschool.com
sharepoint.freyberghighschool.com
Other certificates including the domain name freyberg.ac.nz
(limited to 100 certificates)
www.giafc.co.nz
mail.freyberg.ac.nz
www.sportsground.com
fdmc.school.nz
mail.freyberg.ac.nz
arrowtownrugby.co.nz
mail.freyberg.ac.nz
sporty.org.nz
mail.freyberg.ac.nz
mail.freyberg.ac.nz
sporty.org.nz
international.freyberg.ac.nz
sporty.org.nz
sporty.org.nz
mail.freyberg.ac.nz
mail.freyberg.ac.nz
sporty.org.nz
mail.freyberg.ac.nz
sporty.org.nz
mail.freyberg.ac.nz
mail.freyberg.ac.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
mail.freyberg.ac.nz
mail.freyberg.ac.nz
www.sportsground.com
fdmc.school.nz
mail.freyberg.ac.nz
arrowtownrugby.co.nz
mail.freyberg.ac.nz
sporty.org.nz
mail.freyberg.ac.nz
mail.freyberg.ac.nz
sporty.org.nz
international.freyberg.ac.nz
sporty.org.nz
sporty.org.nz
mail.freyberg.ac.nz
mail.freyberg.ac.nz
sporty.org.nz
mail.freyberg.ac.nz
sporty.org.nz
mail.freyberg.ac.nz
mail.freyberg.ac.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
mail.freyberg.ac.nz
Certificate
The complete raw certificate details for mail.freyberg.ac.nz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIQCgFG2YE4kntlBDp6BvX4bTANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTcwNDA2MDAwMDAwWhcN MTgwNjEzMTIwMDAwWjB8MQswCQYDVQQGEwJOWjEVMBMGA1UECBMMTm9ydGggSXNs YW5kMRkwFwYDVQQHExBQYWxtZXJzdG9uIE5vcnRoMR0wGwYDVQQKExRGcmV5YmVy ZyBIaWdoIFNjaG9vbDEcMBoGA1UEAxMTbWFpbC5mcmV5YmVyZy5hYy5uejCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMDCeZs3RI44HM8knc8YLH5HMMDY kAffCmfFA4Ir0bFfH7MHS/WwCug0x6BOXVmBfI6toCcd4UQxZ4hJKfijmrE4U5z4 FMjZVPo5aWyAzc8WwmwTRs42t5FcPVvZ6MFTe4m0cg+Fl6/9VpcpkL3IDgVRMxYP f1SayblTyoc3DcOnpPzdw2WqOJ0ZlUEu4pJYGVcwr4U8Nvee3hR746xghnYJYg3R T/oMKydebwwDbGOzITFTHDNxa79PwTUgx7p1tN8UdP3/T3VWZ3qOD8jRnhLR2ZhE osKygkDCRMycuzyM33lgDSrTyTOdI3T4u5afaW+o+U79HY/p4jwTFACN7gUCAwEA AaOCAoIwggJ+MB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1Ud DgQWBBTSJaRlAID0swwryqq8Y5v5oeKWTDCBxQYDVR0RBIG9MIG6ghNtYWlsLmZy ZXliZXJnLmFjLm56gh9leGNoYW5nZS5mcmV5YmVyZ2hpZ2hzY2hvb2wuY29tgiNh dXRvZGlzY292ZXIuZnJleWJlcmdoaWdoc2Nob29sLmNvbYIbYXV0b2Rpc2NvdmVy LmZyZXliZXJnLmFjLm56gh1lLWZyZXkuZnJleWJlcmdoaWdoc2Nob29sLmNvbYIh c2hhcmVwb2ludC5mcmV5YmVyZ2hpZ2hzY2hvb2wuY29tMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2g K4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNS5jcmwwL6At oCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzUuY3JsMEwG A1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3 LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggr BgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpo dHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2Vy dmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBABrfdeG3 tVI/IdZbxc9/GKbvLDo/KXnVIK/MpGhUE/TNIsH87xZzuj0IMK4aNb+fuYL2Ebb3 pBznZY5tZn7HhMMakJJhKtHHnQjJUiKDDw75HEly3uiwc4LDyWe6e6JzhynrVPIc tVVDEo7s3sowOtNIRtMN4MBqhUs7jFkYwxzVIrbgDM5hLhLjn49JrtSl/RUh6eRl cv8w1fvceCC1TJSYxdDdMyMzF6Pf4e8XUT4gcaiLu69FPVuN1b5YtaXEvDE+l5PW Mtiheg8x3WNTs5ip5u6IJBuGOefG9sNddhsPhrdPVLGV5wjP51RRPHENKep4XkHZ gvlHG5K8l4CQAM8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMJ5mzdEjjgczySdzxgs fkcwwNiQB98KZ8UDgivRsV8fswdL9bAK6DTHoE5dWYF8jq2gJx3hRDFniEkp+KOa sThTnPgUyNlU+jlpbIDNzxbCbBNGzja3kVw9W9nowVN7ibRyD4WXr/1WlymQvcgO BVEzFg9/VJrJuVPKhzcNw6ek/N3DZao4nRmVQS7iklgZVzCvhTw2957eFHvjrGCG dgliDdFP+gwrJ15vDANsY7MhMVMcM3Frv0/BNSDHunW03xR0/f9PdVZneo4PyNGe EtHZmESiwrKCQMJEzJy7PIzfeWANKtPJM50jdPi7lp9pb6j5Tv0dj+niPBMUAI3u BQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13298909255883172623544495533031028845 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-13 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Island' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Palmerston North' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Freyberg High School' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.freyberg.ac.nz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24333653762353848412529868034997470846817607316868928178392311756501950385975842462864620707158575218649047530948877428252452871414311143588984209281840669134429974800722756106495393607937700948765580048697308827439131047988533984793506639094333914265553088396627428207617049002783195997277765533619134876782082452018651928674395976839005140793663850662765989654848856925307911075938156460995185566304941896292377786032480504115088506621904566403335958877383863812761654757137057164653532224306272122810190811863980669475857155848954951847717250028936148060475288787796929767247376786764180181479615572969392127733253 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d225a4650080f4b30c2bcaaabc639bf9a1e2964c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (189 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.freyberg.ac.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.freyberghighschool.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.freyberghighschool.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.freyberg.ac.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-frey.freyberghighschool.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharepoint.freyberghighschool.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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