mavent.com
- Ellie Mae Inc. -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0e:72:2f:b6:2c:c3:94:f3:8f:1f:1a:7b:15:1e:8a:3a was issued on by DigiCert Inc.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Ellie Mae Inc.
Organization:
Ellie Mae Inc.
State / Province:
California
Locality: Pleasanton
Country: US
Locality: Pleasanton
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:72:2f:b6:2c:c3:94:f3:8f:1f:1a:7b:15:1e:8a:3aSerial Number (int): 19202081489492526165000444090775407162
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 8d:24:03:46:f9:e4:da:c7:f8:33:16:e4:c9:e2:32:83:54:30:89:90
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): e4:e8:4b:65:e8:30:70:2e:f8:a2:4b:be:50:c0:fa:c8:28:05:62:18
Fingerprint (sha256): 8d:0a:50:e3:42:47:d1:55:56:e4:54:75:ae:40:f1:12:61:ad:d4:37:87:b6:56:04:fc:d2:b7:76:6c:29:3e:47
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate mavent.com
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mavent.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mavent.com
dcui-customer.qa.datalake.rd.elliemae.io
pilot01.mavent.com
comply05.mavent.com
dcui-customer.int2.datalake.rd.elliemae.io
comply01.mavent.com
comply06.mavent.com
service.elliemae.com
comply07.mavent.com
dcui-customer.qa.datalake.rd.elliemae.io
pilot01.mavent.com
comply05.mavent.com
dcui-customer.int2.datalake.rd.elliemae.io
comply01.mavent.com
comply06.mavent.com
service.elliemae.com
comply07.mavent.com
Other certificates including the domain name mavent.com
(limited to 100 certificates)
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
*.mavent.com
*.mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
*.mavent.com
mavent.com
*.mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
*.mavent.com
*.mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
*.mavent.com
mavent.com
*.mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
Certificate
The complete raw certificate details for mavent.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG6zCCBdOgAwIBAgIQDnIvtizDlPOPHxp7FR6KOjANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwNjAzMDAwMDAwWhcN MjAwNTA3MTIwMDAwWjBlMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p YTETMBEGA1UEBxMKUGxlYXNhbnRvbjEXMBUGA1UEChMORWxsaWUgTWFlIEluYy4x EzARBgNVBAMTCm1hdmVudC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC6XBhZ5zhhLIxdbVkCTK6sCQpKU6SGltHZ2KAJUfvMu/9OKgrNPwOGwnl3 XMKnxm9SyiQshnzJmK67/bWi2rVLiv2vaLkYHZ5qoQVMO0eNgP4pNzRd2OGA3vzl SYNhUx9lIhwM4Idaa7xNIvsAUQcAVjREMBUfzQT+pkPWwawyhazOf9jsfqa0kNO5 hBMh+dl1hFjh3zSFV6uUVoRBQ1166WVw9xdjSK9tdSbWcweMi74Cgp19QVx+StIl 0IhXVIjc2DYHg45Z7kiste1Qmx4hTEz2Zp9bG60ICKn7vuO5erkOlFvvGd2ULfWl Cy23SVnX1oQEXIolM0TdyiCCqOM9AgMBAAGjggOtMIIDqTAfBgNVHSMEGDAWgBQP gGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUjSQDRvnk2sf4MxbkyeIyg1Qw iZAwgesGA1UdEQSB4zCB4IIKbWF2ZW50LmNvbYIoZGN1aS1jdXN0b21lci5xYS5k YXRhbGFrZS5yZC5lbGxpZW1hZS5pb4IScGlsb3QwMS5tYXZlbnQuY29tghNjb21w bHkwNS5tYXZlbnQuY29tgipkY3VpLWN1c3RvbWVyLmludDIuZGF0YWxha2UucmQu ZWxsaWVtYWUuaW+CE2NvbXBseTAxLm1hdmVudC5jb22CE2NvbXBseTA2Lm1hdmVu dC5jb22CFHNlcnZpY2UuZWxsaWVtYWUuY29tghNjb21wbHkwNy5tYXZlbnQuY29t MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw awYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Et c2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2Nh LXNoYTItZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUH AgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsG AQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t MEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl cnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAkGA1UdEwQCMAAwggEEBgorBgEEAdZ5 AgQCBIH1BIHyAPAAdgC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAA AWsetS5MAAAEAwBHMEUCIASkpEgAm3p14M1IGD9WpEiH/0srx7M39Lma02nQBR5V AiEA/1Br0MQz2eI1FmayihlkV3LRNBYxLY3CXTOS70GLpMUAdgCHdb/nWXz4jEOZ X73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWsetSr2AAAEAwBHMEUCIF5ppzm8rLeI DkXlTj2AGFnN2/n5HlVQQ5UA+0adC2E7AiEA+8ylob3FDcWuecqEvXbyIROeEglI L4CQlXDXShAw/IQwDQYJKoZIhvcNAQELBQADggEBAHKPaoqfpIVu+A9tPTsp7Fdp uPErEZ2fw0awKlkkiqgNGx94pmC/zzw/rEjTTGnclzqlji1OIIOlaOC2JkCeDCGK Kue8zXUrMFUg+iHfZNOnVc86Kf0iSPvdZWioFWccXMj3weczo5tC3YvNZBHeMw9O ASIHET5YCYxNWvp4iwKkxHDvOUGWZxD0/sF3hRYX8gQw/ZdIlmEM7XXHMJwW+BJC Z/kcbTgDixSBjFoVehsbTmjpgdPpzR5Vx0e5kDIbpON1Q0uAqxFmBxT9XeArMaia bL5WZTQxMEE6Bu5w1aujBuf+Lzl5n7DCTSLIU0F/P0XL9j2y+gPd8N6iqdNG58E= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulwYWec4YSyMXW1ZAkyu rAkKSlOkhpbR2digCVH7zLv/TioKzT8DhsJ5d1zCp8ZvUsokLIZ8yZiuu/21otq1 S4r9r2i5GB2eaqEFTDtHjYD+KTc0XdjhgN785UmDYVMfZSIcDOCHWmu8TSL7AFEH AFY0RDAVH80E/qZD1sGsMoWszn/Y7H6mtJDTuYQTIfnZdYRY4d80hVerlFaEQUNd eullcPcXY0ivbXUm1nMHjIu+AoKdfUFcfkrSJdCIV1SI3Ng2B4OOWe5IrLXtUJse IUxM9mafWxutCAip+77juXq5DpRb7xndlC31pQstt0lZ19aEBFyKJTNE3coggqjj PQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19202081489492526165000444090775407162 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ellie Mae Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mavent.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23525738520848799768331187486526387807646171969954157123689232079260916392915311546011147457522839049079056054308784456690297700491691180687036704179906224784662166857253487239770016080460050135114597080125943728820684084876500645659524322944944465077522648084367274133000491611285621158479806785593780957406746468518920078240641650697891989169424401845102069521147178771382019944376845524251659615224581173863436375926946242972347202112316507527793534172126493475835029423106843660413516110359879590915704284105884767348857727851219166124730345011572080923942815674000739657440448043756296757573140573571722533987133 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8d240346f9e4dac7f83316e4c9e2328354308990 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (227 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcui-customer.qa.datalake.rd.elliemae.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot01.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply05.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcui-customer.int2.datalake.rd.elliemae.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply01.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply06.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply07.mavent.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016b1eb52e4c0000040300473045022004a4a448009b7a75e0cd48183f56a44887ff4b2bc7b337f4b99ad369d0051e55022100ff506bd0c433d9e2351666b28a19645772d13416312d8dc25d3392ef418ba4c50076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b1eb52af6000004030047304502205e69a739bcacb7880e45e54e3d801859cddbf9f91e5550439500fb469d0b613b022100fbcca5a1bdc50dc5ae79ca84bd76f221139e1209482f80909570d74a1030fc84 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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