blog.pqm.net
- HubSpot, Inc. -
Issued by CloudFlare Inc ECC CA-2
About this certificate
This digital certificate with serial number 06:a4:41:45:86:10:0d:e3:5e:d9:0a:0d:6e:8e:3e:64 was issued on by CloudFlare, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
HubSpot, Inc.
Organization:
HubSpot, Inc.
State / Province:
MA
Locality: Cambridge
Country: US
Locality: Cambridge
Country: US
CloudFlare, Inc.
Organization:
CloudFlare, Inc.
State / Province:
CA
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:a4:41:45:86:10:0d:e3:5e:d9:0a:0d:6e:8e:3e:64Serial Number (int): 8828228524367057525502454561229389412
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: c3:8e:97:98:a0:59:a3:6a:19:9b:a1:9b:19:d6:85:c0:16:6b:58:e9
AuthorityKeyId: 3e:74:2d:1f:cf:45:75:04:7e:3f:c0:a2:87:3e:4c:43:83:51:13:c6
Fingerprint (sha1): cb:79:a7:72:0f:0c:0a:02:4d:9d:df:eb:06:71:4d:a5:b9:51:b3:e9
Fingerprint (sha256): 8d:27:f7:7f:01:94:43:aa:9a:26:52:09:13:8f:6e:24:49:64:51:38:b3:a5:c3:f5:98:29:be:45:22:21:dd:bb
Issuing Certificate URL: http://cacerts.digicert.com/CloudFlareIncECCCA-2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/CloudFlareIncECCCA2.crl
CRL Distribution Point: http://crl4.digicert.com/CloudFlareIncECCCA2.crl
Check the revocation status for certificate blog.pqm.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for blog.pqm.net
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
ECDSA with SHA256
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blog.pqm.net
Other certificates including the domain name pqm.net
(limited to 100 certificates)
facteuriel.pqm.net
isaca.pqm.net
www.pqm.net
corp.pqm.net
blog.pqm.net
facteuriel.pqm.net
corp.pqm.net
otstcfq.pqm.net
*.pqm.net
facteuriel.pqm.net
mx04.pqm.net
ssl.pqm.net
webcasts.pqm.net
blog.pqm.net
secure.pqm.net
mx04.pqm.net
mx02.pqm.net
mx04.pqm.net
temps.pqm.net
isaca.pqm.net
isaca.pqm.net
isaca.pqm.net
webcasts.pqm.net
temps.pqm.net
ssl.pqm.net
webcasts.pqm.net
mx03.pqm.net
isaca.pqm.net
secure.pqm.net
blog.pqm.net
www.pqm.net
corp.pqm.net
hubspot.pqm.net
hdondemand.pqm.net
blog.pqm.net
*.pqm.net
blog.pqm.net
www.pqm.net
hubspot.pqm.net
isaca.pqm.net
corp.pqm.net
blog.pqm.net
ssl.pqm.net
blog.pqm.net
SECURE.PQM.NET
secure.pqm.net
temps.pqm.net
pqm.net
pqm.net
secure.pqm.net
SECURE.PQM.NET
pqm.net
hubspot.pqm.net
hubspot.pqm.net
otstcfq.pqm.net
hubspot.pqm.net
blog.pqm.net
*.pqm.net
postfix.mx03.pqm.net
www.pqm.net
ssl.pqm.net
corp.pqm.net
webcasts.pqm.net
SSL.PQM.NET
corp.pqm.net
webcasts.pqm.net
webcasts.pqm.net
secure.pqm.net
temps.pqm.net
hubspot.pqm.net
otstcfq.pqm.net
mx04.pqm.net
ssl.pqm.net
hubspot.pqm.net
otstcfq.pqm.net
SSL.PQM.NET
secure.pqm.net
corp.pqm.net
www.pqm.net
otstcfq.pqm.net
secure.pqm.net
secure.pqm.net
SECURE.PQM.NET
mail.pqm.net
hubspot.pqm.net
corp.pqm.net
secure.pqm.net
blog.pqm.net
mx04.pqm.net
blog.pqm.net
hubspot.pqm.net
pqm.net
webcasts.pqm.net
mx04.pqm.net
isaca.pqm.net
www.pqm.net
corp.pqm.net
blog.pqm.net
facteuriel.pqm.net
corp.pqm.net
otstcfq.pqm.net
*.pqm.net
facteuriel.pqm.net
mx04.pqm.net
ssl.pqm.net
webcasts.pqm.net
blog.pqm.net
secure.pqm.net
mx04.pqm.net
mx02.pqm.net
mx04.pqm.net
temps.pqm.net
isaca.pqm.net
isaca.pqm.net
isaca.pqm.net
webcasts.pqm.net
temps.pqm.net
ssl.pqm.net
webcasts.pqm.net
mx03.pqm.net
isaca.pqm.net
secure.pqm.net
blog.pqm.net
www.pqm.net
corp.pqm.net
hubspot.pqm.net
hdondemand.pqm.net
blog.pqm.net
*.pqm.net
blog.pqm.net
www.pqm.net
hubspot.pqm.net
isaca.pqm.net
corp.pqm.net
blog.pqm.net
ssl.pqm.net
blog.pqm.net
SECURE.PQM.NET
secure.pqm.net
temps.pqm.net
pqm.net
pqm.net
secure.pqm.net
SECURE.PQM.NET
pqm.net
hubspot.pqm.net
hubspot.pqm.net
otstcfq.pqm.net
hubspot.pqm.net
blog.pqm.net
*.pqm.net
postfix.mx03.pqm.net
www.pqm.net
ssl.pqm.net
corp.pqm.net
webcasts.pqm.net
SSL.PQM.NET
corp.pqm.net
webcasts.pqm.net
webcasts.pqm.net
secure.pqm.net
temps.pqm.net
hubspot.pqm.net
otstcfq.pqm.net
mx04.pqm.net
ssl.pqm.net
hubspot.pqm.net
otstcfq.pqm.net
SSL.PQM.NET
secure.pqm.net
corp.pqm.net
www.pqm.net
otstcfq.pqm.net
secure.pqm.net
secure.pqm.net
SECURE.PQM.NET
mail.pqm.net
hubspot.pqm.net
corp.pqm.net
secure.pqm.net
blog.pqm.net
mx04.pqm.net
blog.pqm.net
hubspot.pqm.net
pqm.net
webcasts.pqm.net
mx04.pqm.net
Certificate
The complete raw certificate details for blog.pqm.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIDpzCCA02gAwIBAgIQBqRBRYYQDeNe2QoNbo4+ZDAKBggqhkjOPQQDAjBvMQsw CQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28x GTAXBgNVBAoTEENsb3VkRmxhcmUsIEluYy4xIDAeBgNVBAMTF0Nsb3VkRmxhcmUg SW5jIEVDQyBDQS0yMB4XDTE3MTAyMDAwMDAwMFoXDTE4MTAyMDEyMDAwMFowXTEL MAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1BMRIwEAYDVQQHEwlDYW1icmlkZ2UxFjAU BgNVBAoTDUh1YlNwb3QsIEluYy4xFTATBgNVBAMTDGJsb2cucHFtLm5ldDBZMBMG ByqGSM49AgEGCCqGSM49AwEHA0IABOJrAsRck9d8Fve9okXQ1rrvHE/Xo4BulEQ0 HYLmPA86WwVavOtWgaCGuwwh/mVXmcLGDD56T3vkQOUiXC6RGXGjggHbMIIB1zAf BgNVHSMEGDAWgBQ+dC0fz0V1BH4/wKKHPkxDg1ETxjAdBgNVHQ4EFgQUw46XmKBZ o2oZm6GbGdaFwBZrWOkwFwYDVR0RBBAwDoIMYmxvZy5wcW0ubmV0MA4GA1UdDwEB /wQEAwIHgDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIweQYDVR0fBHIw cDA2oDSgMoYwaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0Nsb3VkRmxhcmVJbmNF Q0NDQTIuY3JsMDagNKAyhjBodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vQ2xvdWRG bGFyZUluY0VDQ0NBMi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggr BgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIw dgYIKwYBBQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2Vy dC5jb20wQAYIKwYBBQUHMAKGNGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9D bG91ZEZsYXJlSW5jRUNDQ0EtMi5jcnQwDAYDVR0TAQH/BAIwADAKBggqhkjOPQQD AgNIADBFAiEAyYo6pmMmvOIfupllpYnMV5Tb1/GgCWwu2g9JuywoHZoCIEICRMD8 8bew9uOiNal8cbZV4GT9R7zn5doJhZZ4Eohs -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE4msCxFyT13wW972iRdDWuu8cT9ej gG6URDQdguY8DzpbBVq861aBoIa7DCH+ZVeZwsYMPnpPe+RA5SJcLpEZcQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8828228524367057525502454561229389412 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256) . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare Inc ECC CA-2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-20 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridge' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HubSpot, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.pqm.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004e26b02c45c93d77c16f7bda245d0d6baef1c4fd7a3806e9444341d82e63c0f3a5b055abceb5681a086bb0c21fe655799c2c60c3e7a4f7be440e5225c2e911971 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3e742d1fcf4575047e3fc0a2873e4c43835113c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c38e9798a059a36a199ba19b19d685c0166b58e9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.pqm.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudFlareIncECCCA2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudFlareIncECCCA2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudFlareIncECCCA-2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256) . . . . [c:0|t:3|false] BIT STRING (568 bits) . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:2|false] INTEGER 91159112247257074392463544653535565540955321880844339819306787681363200318874 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29856656222324614583099671261368045258476333735891901148306227877980251785324