pstester.nido.cl
- Nido de Aguilas -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 07:c1:e5:cf:c9:ff:17:c5:16:a3:14:ae:4b:fb:bb:64 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Nido de Aguilas
Organization:
Nido de Aguilas
State / Province:
Region Metropolitana
Country: CL
Country: CL
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:c1:e5:cf:c9:ff:17:c5:16:a3:14:ae:4b:fb:bb:64Serial Number (int): 10311370398735384836038949002366663524
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 6a:2b:d3:6f:59:39:e9:28:56:ab:a8:c5:44:3d:52:be:aa:60:ff:c6
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): ca:41:62:36:a6:bd:75:53:27:97:a1:84:3c:69:e1:65:1c:59:da:c5
Fingerprint (sha256): 8e:f2:ed:b4:2d:71:20:c4:e4:59:03:f6:ab:79:3d:df:19:dc:4b:0a:33:e4:ae:44:cb:08:7c:1e:f4:b6:c8:10
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate pstester.nido.cl
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pstester.nido.cl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pstester.nido.cl
Other certificates including the domain name nido.cl
(limited to 100 certificates)
*.nido.cl
powerschool.nido.cl
haiku.nido.cl
www.nido.cl
*.nido.cl
powerschool.nido.cl
*.nido.cl
*.nido.cl
pstester.nido.cl
nido.cl
www.nido.cl
intranet.nido.cl
haiku.nido.cl
nido.cl
jss.nido.cl
powerschool.nido.cl
haiku.nido.cl
*.nido.cl
*.nido.cl
powerschool.nido.cl
haiku.nido.cl
nido.cl
*.nido.cl
distance.nido.cl
powerschool.nido.cl
pstester.nido.cl
www.nido.cl
powerschool.nido.cl
haiku.nido.cl
*.nido.cl
jss.nido.cl
haiku.nido.cl
haiku.nido.cl
nido.cl
*.nido.cl
*.nido.cl
pstester.nido.cl
*.nido.cl
*.nido.cl
www.nido.cl
nido.cl
haiku.nido.cl
powerschool.nido.cl
powerschool.nido.cl
haiku.nido.cl
www.nido.cl
*.nido.cl
powerschool.nido.cl
*.nido.cl
*.nido.cl
pstester.nido.cl
nido.cl
www.nido.cl
intranet.nido.cl
haiku.nido.cl
nido.cl
jss.nido.cl
powerschool.nido.cl
haiku.nido.cl
*.nido.cl
*.nido.cl
powerschool.nido.cl
haiku.nido.cl
nido.cl
*.nido.cl
distance.nido.cl
powerschool.nido.cl
pstester.nido.cl
www.nido.cl
powerschool.nido.cl
haiku.nido.cl
*.nido.cl
jss.nido.cl
haiku.nido.cl
haiku.nido.cl
nido.cl
*.nido.cl
*.nido.cl
pstester.nido.cl
*.nido.cl
*.nido.cl
www.nido.cl
nido.cl
haiku.nido.cl
powerschool.nido.cl
Certificate
The complete raw certificate details for pstester.nido.cl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGJjCCBQ6gAwIBAgIQB8Hlz8n/F8UWoxSuS/u7ZDANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjAwMzEyMDAwMDAwWhcN MjIwNTE4MTIwMDAwWjBhMQswCQYDVQQGEwJDTDEdMBsGA1UECBMUUmVnaW9uIE1l dHJvcG9saXRhbmExGDAWBgNVBAoTD05pZG8gZGUgQWd1aWxhczEZMBcGA1UEAxMQ cHN0ZXN0ZXIubmlkby5jbDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB AKe0DvdyHhVkPNnfw4RJve6YAqPyT3/EsyIumqMqB6uxSpoGcLFWNi91210VhYeI 8Xg9wKRHzJ2xRxy1N+bRUn6PMIlJKhh2tJGkGkdNOYt5N/8O42zv0LcD6rIzhQDI 29DPj50WtHzh8H3bM2cHAfRBUkl9xpcVP9rf+oSjhE8GA5vX/u/qiCuvFYfqI3xA y0vfCWQYWQI94C1TiJAJX/Of5exJMsMlEuROTnscTivsSGoGzPo/pLActwSdCG2Y M7OkTftjx7EluArOQJWdjrOD63jMomi6jQqHiHEc9sV5OYsvIKqmacj7SKX8bOf6 gg7MeBOQ4bAYY3hvrzYU7FlwurjS2Jaz1yRDr72g3I3QoB2uRInATxA0dr4w5RjF nNz1vySop3IWCjoVCmRUqmt/QETdL7cJs00hEZRUss75PBO5Ar8QbjYBL+fullzX ktL4maYI8ePxPhN5BBMRxdj0D7clNCKw9BKdBCLo0YSoeDFoxZTqU4obtcf9BpHz 3m+9QsbKkMizheD4oVvtWtGprrwcO27M3UaEZ+WLl4mLdV0WcgbJbVltkgi2dehi hgWmGhtYWnmFzmhJor5KsUkc/DwrtvMuixc87MTG7uWAAIGNTnGJVdA4WnxO6crl 5zy+pY+vCi5yYSuNIg8rw95nKkHcOLxxuV0lg/HZxZqLAgMBAAGjggHsMIIB6DAf BgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUaivTb1k5 6ShWq6jFRD1Svqpg/8YwGwYDVR0RBBQwEoIQcHN0ZXN0ZXIubmlkby5jbDAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1Ud HwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTIt ZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc3NjYS1zaGEy LWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxo dHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB8BggrBgEFBQcB AQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBGBggr BgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hB MlNlY3VyZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMB Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwyGgzfcHwjzHmFvyO2i8KlOU1ogaq Yif0YTbDuLli+Zg/rWCrz8ctv4oZuthsLL0kAbH1+mq/X1m5QljJMWgfdYkFE2T7 sMXFc/Q7bUZkme2lIjiDrpPQLX/4nRK7xLXsTdlU+pjgCXXqt5pksLeVs8UenM3J QqQ7bt6GCBhZmJhqQl6iaHDyOwJ/G29yBDCTOLDMnHUDPwogYGjidGMg/kIKVA9P 2KZpcmTvxmq6hO70NUtayNIfB9s/YUYbAdGxmIGdnfk3Y6DHISgO/o4JNG/AHFSQ rMrQMuzzopKWdT3MHfbPZgoHQXSUS03fmsUW/OOGFtQjWigPnOj5NP8N -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAp7QO93IeFWQ82d/DhEm9 7pgCo/JPf8SzIi6aoyoHq7FKmgZwsVY2L3XbXRWFh4jxeD3ApEfMnbFHHLU35tFS fo8wiUkqGHa0kaQaR005i3k3/w7jbO/QtwPqsjOFAMjb0M+PnRa0fOHwfdszZwcB 9EFSSX3GlxU/2t/6hKOETwYDm9f+7+qIK68Vh+ojfEDLS98JZBhZAj3gLVOIkAlf 85/l7EkywyUS5E5OexxOK+xIagbM+j+ksBy3BJ0IbZgzs6RN+2PHsSW4Cs5AlZ2O s4PreMyiaLqNCoeIcRz2xXk5iy8gqqZpyPtIpfxs5/qCDsx4E5DhsBhjeG+vNhTs WXC6uNLYlrPXJEOvvaDcjdCgHa5EicBPEDR2vjDlGMWc3PW/JKinchYKOhUKZFSq a39ARN0vtwmzTSERlFSyzvk8E7kCvxBuNgEv5+6WXNeS0viZpgjx4/E+E3kEExHF 2PQPtyU0IrD0Ep0EIujRhKh4MWjFlOpTihu1x/0GkfPeb71CxsqQyLOF4PihW+1a 0amuvBw7bszdRoRn5YuXiYt1XRZyBsltWW2SCLZ16GKGBaYaG1haeYXOaEmivkqx SRz8PCu28y6LFzzsxMbu5YAAgY1OcYlV0DhafE7pyuXnPL6lj68KLnJhK40iDyvD 3mcqQdw4vHG5XSWD8dnFmosCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10311370398735384836038949002366663524 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Region Metropolitana' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nido de Aguilas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pstester.nido.cl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 684169990771016862005851115134393794473981201607908278792527710086308302622956748854521457471351588951109564644710090998136423289041782690078125231315067074094919792463173637593334106751773855432712199204999318715211587926460821811907742660088269947244944629786494291352201110374838498765216299999103511450581175419203096164664568432198152995425188372553818049314257718309773459918143887887712068189815220480318005070062855886198262675478285836011191238741989278159095942320617380029490639115947797580424289708761447269973966474975294224961779206591939144563420575049317380547767145577072093058449327948369590693020679757002518872160208179776397238100881003589599111035188309006958727095963952768208532186714763030989436043043253867883243713932736884268190335707003628784961096445312907929363209021457701905799606889492586330988227110809206177796040253208969652541579608465240221096657505917919422958030470549717739720964990381749724194070088402585448672295658699594494486439892344931689458002698948186725882744998606540643809543879859799898083087771151976123890841433028847526303912626580686790055433099736346113034502393158546897018274830030392549263269158784294153155300642404395914521335794383442376574267898182871427255579810443 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6a2bd36f5939e92856aba8c5443d52beaa60ffc6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pstester.nido.cl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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