*.thatconference.com
- THAT Conference NFP -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 09:38:0c:51:07:8b:46:ce:b0:1d:58:06:50:20:9e:2e was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
THAT Conference NFP
Organization:
THAT Conference NFP
State / Province:
Illinois
Locality: Spring Grove
Country: US
Locality: Spring Grove
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:38:0c:51:07:8b:46:ce:b0:1d:58:06:50:20:9e:2eSerial Number (int): 12254070394873370814837728885862342190
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 31:7d:13:cd:61:36:81:76:44:8a:46:4f:6a:e1:fc:77:4b:ba:87:94
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 30:63:f5:ec:c3:d5:4b:76:17:8f:c2:d7:c3:63:21:34:7d:64:80:9f
Fingerprint (sha256): 8e:d1:3e:70:21:2a:15:6e:51:b6:c7:5b:1b:85:48:7b:83:de:3b:69:82:8d:75:f8:bf:8c:8b:68:02:f4:7a:51
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate *.thatconference.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.thatconference.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.thatconference.com
thatconference.com
thatconference.com
Other certificates including the domain name thatconference.com
(limited to 100 certificates)
thatslack.thatconference.com
thatconference.com
console.agtran.com
swagbag.thatconference.com
thatslack.thatconference.com
johanochsofia.se
thatslack.thatconference.com
thatslack.thatconference.com
ierlat.edu.co
sni.cloudflaressl.com
nusysstem.radonitsol.com
thatslack.thatconference.com
thatslack.thatconference.com
thatconference.com
mhasol.it
www.facturacionninja.com
thatslack.thatconference.com
thatconference.com
swagbag.thatconference.com
thatslack.thatconference.com
downloads.edisn.ai
www.thatconference.com
cheesecakeinteractive.com
01640.tk
tvt.alaviv.com
www.amokal.com
www.thatconference.com
jamesrc.dev
*.thatconference.com
repel.co.jp
thatconference.com
barbarians.com
signs.thatconference.com
thatconference.com
thatconference.com
01640.tk
panamericano.app
sni.cloudflaressl.com
zyazilim.com.tr
design-tooling.rsglab.com
www.thatconference.com
fb.wencom.at
mhasol.it
www.thatconference.com
pall.ikologik.be
map.thatconference.com
dishcafereno.com
www.raphaindia.com
www.raphaindia.com
design-tooling.rsglab.com
www.thatconference.com
thatslack.thatconference.com
thatconference.com
cureact.id
thatslack.thatconference.com
flutter.pics
thatslack.thatconference.com
*.thatconference.com
jamesrc.dev
suguchat.com
tracking.tripdigital.com.br
api.thatconference.com
thatconference.com
thatslack.thatconference.com
tracking.tripdigital.com.br
demo.skillnav.co
thatconference.com
console.agtran.com
swagbag.thatconference.com
thatslack.thatconference.com
johanochsofia.se
thatslack.thatconference.com
thatslack.thatconference.com
ierlat.edu.co
sni.cloudflaressl.com
nusysstem.radonitsol.com
thatslack.thatconference.com
thatslack.thatconference.com
thatconference.com
mhasol.it
www.facturacionninja.com
thatslack.thatconference.com
thatconference.com
swagbag.thatconference.com
thatslack.thatconference.com
downloads.edisn.ai
www.thatconference.com
cheesecakeinteractive.com
01640.tk
tvt.alaviv.com
www.amokal.com
www.thatconference.com
jamesrc.dev
*.thatconference.com
repel.co.jp
thatconference.com
barbarians.com
signs.thatconference.com
thatconference.com
thatconference.com
01640.tk
panamericano.app
sni.cloudflaressl.com
zyazilim.com.tr
design-tooling.rsglab.com
www.thatconference.com
fb.wencom.at
mhasol.it
www.thatconference.com
pall.ikologik.be
map.thatconference.com
dishcafereno.com
www.raphaindia.com
www.raphaindia.com
design-tooling.rsglab.com
www.thatconference.com
thatslack.thatconference.com
thatconference.com
cureact.id
thatslack.thatconference.com
flutter.pics
thatslack.thatconference.com
*.thatconference.com
jamesrc.dev
suguchat.com
tracking.tripdigital.com.br
api.thatconference.com
thatconference.com
thatslack.thatconference.com
tracking.tripdigital.com.br
demo.skillnav.co
Certificate
The complete raw certificate details for *.thatconference.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGvTCCBaWgAwIBAgIQCTgMUQeLRs6wHVgGUCCeLjANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwMzE5MDAwMDAwWhcN MjAwNTIyMTIwMDAwWjB0MQswCQYDVQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMx FTATBgNVBAcTDFNwcmluZyBHcm92ZTEcMBoGA1UEChMTVEhBVCBDb25mZXJlbmNl IE5GUDEdMBsGA1UEAwwUKi50aGF0Y29uZmVyZW5jZS5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCoLbXxHskXTSZvBqK40ypcK6x8B64mtBKWK/3E ZsinoGMfgNthJnUmQTIapaHUzD3U53XdD7xP2Q/XNykGcDRKr/uk1TvqB/6uSUFZ lbNwa/Iyapdz3UPVU93GSE0KIOYWLJKcdKLqkRlHJxxkGezVNiZy/zJw+OqTUYLw SSjU0s3xLHoQzInxXzN6kHyYhOuaBgh5h0xtbfbSimkUWTXB4FkU5QCMs9yPSFd7 j8JwgsoEppz5SdNheSkmGDH42avDFwpg7bdTvur9IIPTq2GCcGu83nxvXUnNdkdj 4GKsU6pbFcEE+2i4tRpV3SUe+Ce1mAOVFKFZDmKeqflxuMQHAgMBAAGjggNwMIID bDAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUMX0T zWE2gXZEikZPauH8d0u6h5QwMwYDVR0RBCwwKoIUKi50aGF0Y29uZmVyZW5jZS5j b22CEnRoYXRjb25mZXJlbmNlLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9j cmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8v Y3JsNC5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcG CWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5j b20vQ1BTMAgGBmeBDAECAjB8BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0 dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2Vy dHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAM BgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgCkuQmQtBhY FIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWI9AuMMAAAEAwBHMEUCIQCN/raB 02UMZ5NtF7DkfoHFt8bxTnuof+P4uOmpUQYnUAIgI4aIMTFi62huDCbXJLpZ1xjY eRwdoEWRg4xCpVe0GRsAdQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZ EwAAAWI9AuRWAAAEAwBGMEQCIHG6CtOqb7O9IWMR2jsjy0lM1xOhIPllp/FFcH0T giUnAiAvtqetaAVqOKLhLBS/hmcUIgzUsA7xEt/UC9e0A5NFgwB2ALvZ37wfinG1 k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABYj0C4/MAAAQDAEcwRQIgLnK6hI8Z iGHNGdsl/tipYY2/BO2KAiqAPaLzYEjHS60CIQCi7W8eP2gcuZcTm1tfbO779xDQ j4AcA8PzBvRXtco9CTANBgkqhkiG9w0BAQsFAAOCAQEAdoQ+tLk5C/i1QqAaH8Je 4Z9tuuV4gR4GjDBxcrbI/P/ZmGdrrAn5UygBl4aKMlWrM9xaSAAeyP1ZHcgjcGsl zPtJO9T7f4JqLsykM5gd/PAsFyUpbiovRXgBRXVgRR1Rp/sEaPOoExJOqsdeub5O /HKAyERMWE3KngwsbjuPpKSoPy36gkhXUbzwL4t2d4NTCPg+1sEWeIh7+qzMu24D P5ioED8sG+UNEVeNdf0APp1uAQmDW0qAY9KiVLRjmikgBLaiEWaBlrMo9xcdwtOi wmXgr5fmeSDA4pQJ2KPTTNFtA2+YtumA2rTgXrpX8uy3o+SI/2kJPquiI+doQCro RQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC218R7JF00mbwaiuNMq XCusfAeuJrQSliv9xGbIp6BjH4DbYSZ1JkEyGqWh1Mw91Od13Q+8T9kP1zcpBnA0 Sq/7pNU76gf+rklBWZWzcGvyMmqXc91D1VPdxkhNCiDmFiySnHSi6pEZRyccZBns 1TYmcv8ycPjqk1GC8Eko1NLN8Sx6EMyJ8V8zepB8mITrmgYIeYdMbW320oppFFk1 weBZFOUAjLPcj0hXe4/CcILKBKac+UnTYXkpJhgx+NmrwxcKYO23U77q/SCD06th gnBrvN58b11JzXZHY+BirFOqWxXBBPtouLUaVd0lHvgntZgDlRShWQ5inqn5cbjE BwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12254070394873370814837728885862342190 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Spring Grove' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'THAT Conference NFP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.thatconference.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21230576025729085319914296040113980940368466884703771298442718888098973712737886124564762717735780572735994151374867189814054043506473290478619601904342286291575544097889288225694367173365465098030822562112310052679512012667367120652889744535756074199655214088630727224467079581125880286992413960278342736748572638622740636299176478970746295419981162256967222302445518109669370762289774372539087737908089992582521575195022386044495325459288413705264675223027988200857118692139239518932339504549421129477109426099753437002163115912934607060821001011509537577438020969055240564956761239963152323039584455584764820767751 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 317d13cd61368176448a464f6ae1fc774bba8794 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thatconference.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatconference.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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