capmed.mil
- Walter Reed National Military Medical Center -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0a:cf:fa:04:cb:13:5b:e9:07:e1:f2:ab:2d:6a:a4:83 was issued on by DigiCert Inc.
With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Walter Reed National Military Medical Center
Organization:
Walter Reed National Military Medical Center
Organization unit: IT Department
Organization unit: IT Department
State / Province:
Maryland
Locality: Bethesda
Country: US
Locality: Bethesda
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:cf:fa:04:cb:13:5b:e9:07:e1:f2:ab:2d:6a:a4:83Serial Number (int): 14372156389728291641122259592479941763
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: dd:ae:71:9c:54:cf:eb:0f:0f:9e:3a:d7:c4:c9:95:8c:b2:53:72:a6
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): a4:ed:54:7c:e4:aa:a4:92:83:a2:49:86:16:4c:cd:d8:b7:89:3c:ee
Fingerprint (sha256): 8f:db:b4:e6:2a:41:a4:bf:ba:ba:75:da:0a:98:4f:3f:96:60:5e:0c:23:08:fb:4a:e1:55:e5:50:61:04:76:37
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate capmed.mil
14
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for capmed.mil
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
capmed.mil
www.capmed.mil
www.nicoe.capmed.mil
www.ncrmd.health.mil
www.wwcc.health.mil
www.dthc.capmed.mil
www.fbch.capmed.mil
www.fbch.health.mil
www.wwcc.capmed.mil
www.dthc.health.mil
www.apps.capmed.mil
www.wrnmmc.health.mil
www.wrnmmc.capmed.mil
www.nicoe.health.mil
www.capmed.mil
www.nicoe.capmed.mil
www.ncrmd.health.mil
www.wwcc.health.mil
www.dthc.capmed.mil
www.fbch.capmed.mil
www.fbch.health.mil
www.wwcc.capmed.mil
www.dthc.health.mil
www.apps.capmed.mil
www.wrnmmc.health.mil
www.wrnmmc.capmed.mil
www.nicoe.health.mil
Other certificates including the domain name capmed.mil
(limited to 100 certificates)
sa.wrnmmc.capmed.mil
capmed.mil
capmed.mil
jpc.capmed.mil
jpc.capmed.mil
sa.wrnmmc.capmed.mil
www.apps.capmed.mil
www.jpc.capmed.army.mil
www.jpc.capmed.mil
www.capmed.mil
jpc.capmed.mil
jpc.capmed.mil
jpc.capmed.mil
www.apps.capmed.mil
capmed.mil
jpc.capmed.mil
www.apps.capmed.mil
jpc.capmed.mil
www.capmed.mil
www.apps.capmed.mil
capmed.mil
jpc.capmed.mil
www.apps.capmed.mil
capmed.mil
jpc.capmed.mil
jpc.capmed.mil
capmed.mil
capmed.mil
jpc.capmed.mil
jpc.capmed.mil
sa.wrnmmc.capmed.mil
www.apps.capmed.mil
www.jpc.capmed.army.mil
www.jpc.capmed.mil
www.capmed.mil
jpc.capmed.mil
jpc.capmed.mil
jpc.capmed.mil
www.apps.capmed.mil
capmed.mil
jpc.capmed.mil
www.apps.capmed.mil
jpc.capmed.mil
www.capmed.mil
www.apps.capmed.mil
capmed.mil
jpc.capmed.mil
www.apps.capmed.mil
capmed.mil
jpc.capmed.mil
jpc.capmed.mil
Certificate
The complete raw certificate details for capmed.mil in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIQCs/6BMsTW+kH4fKrLWqkgzANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwMzAxMDAwMDAwWhcN MjEwMjI4MTIwMDAwWjCBlzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCE1hcnlsYW5k MREwDwYDVQQHEwhCZXRoZXNkYTE1MDMGA1UEChMsV2FsdGVyIFJlZWQgTmF0aW9u YWwgTWlsaXRhcnkgTWVkaWNhbCBDZW50ZXIxFjAUBgNVBAsTDUlUIERlcGFydG1l bnQxEzARBgNVBAMTCmNhcG1lZC5taWwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDI2iNVUHsWrqIFad1RbRfWHNIyNvwKAD6nl+6/axOynJzBS5Yj8pVT UYtw5dQOgDBNY4gta4LWvHmTYd32EZdwXfwDvTaRkMWQHDfjUJlHe7dyQXG1Zthj ce/5RREqs2cYUCQKemeo32aVwrfNycElhcOi6rRF0qQxTj/hDRP5+0KxVSCQPev0 aVoammC5Wt+ShkOlGg/v4kWV2jTqgz47LdNHzm1X8tN0lY7wrhyeNgiu+QwQUDfG gYGMe3KOG0LmH7e6cH0gMVMF7WlPPvlmyWA82TdxHhAVgPksWnKYKREhGdleK3Ld ONzVa8tGA30ZDsTFiuTNS/s1WBIn526bAgMBAAGjggL8MIIC+DAfBgNVHSMEGDAW gBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQU3a5xnFTP6w8PnjrXxMmV jLJTcqYwggEsBgNVHREEggEjMIIBH4IKY2FwbWVkLm1pbIIOd3d3LmNhcG1lZC5t aWyCFHd3dy5uaWNvZS5jYXBtZWQubWlsghR3d3cubmNybWQuaGVhbHRoLm1pbIIT d3d3Lnd3Y2MuaGVhbHRoLm1pbIITd3d3LmR0aGMuY2FwbWVkLm1pbIITd3d3LmZi Y2guY2FwbWVkLm1pbIITd3d3LmZiY2guaGVhbHRoLm1pbIITd3d3Lnd3Y2MuY2Fw bWVkLm1pbIITd3d3LmR0aGMuaGVhbHRoLm1pbIITd3d3LmFwcHMuY2FwbWVkLm1p bIIVd3d3Lndybm1tYy5oZWFsdGgubWlsghV3d3cud3JubW1jLmNhcG1lZC5taWyC FHd3dy5uaWNvZS5oZWFsdGgubWlsMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2Ny bDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6Ly9j cmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARFMEMwNwYJ YIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNv bS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0 cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0 cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAkG A1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB AIaoNZFhGtpKYAlSKw8ifck4QQ4pnT7+wsnPGlMnfgbTwDnX76lFmkzOxt0/z5si xdsKZ42aT90zQTMNJ4T6GzvzsvzY17cn2FzydvPJJsWtKy3iWlXiuIBejH3P2Q5J lPi5/YfCNX+u4mVWG1+Bk+bYQpgTqUEus00J/w226bP9tE621/1JwIZeKk/tpfdR keE4JlLPzUg+bmkVpeXm9Niiku2PyGBJZ2Ved/cJGulVNhJDgMianHuywWMFqZTZ OF6eep76kojEdbKOrXd8YXnYmdeEOWs7Ea3WwaJ+mFXQ1Pivc+kcyx9SoynZbxd0 F8MZXASQvLNUNeph78q+++g= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNojVVB7Fq6iBWndUW0X 1hzSMjb8CgA+p5fuv2sTspycwUuWI/KVU1GLcOXUDoAwTWOILWuC1rx5k2Hd9hGX cF38A702kZDFkBw341CZR3u3ckFxtWbYY3Hv+UURKrNnGFAkCnpnqN9mlcK3zcnB JYXDouq0RdKkMU4/4Q0T+ftCsVUgkD3r9GlaGppguVrfkoZDpRoP7+JFldo06oM+ Oy3TR85tV/LTdJWO8K4cnjYIrvkMEFA3xoGBjHtyjhtC5h+3unB9IDFTBe1pTz75 ZslgPNk3cR4QFYD5LFpymCkRIRnZXity3Tjc1WvLRgN9GQ7ExYrkzUv7NVgSJ+du mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14372156389728291641122259592479941763 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-28 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bethesda' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Walter Reed National Military Medical Center' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Department' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'capmed.mil' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25355228860251328142282493664416241261625944409047573996605438258339627122190467446210283918471689683724479260993786197454309127490428945622963977769346577599491620994556937222933034303242457225969641226041672071822187462477950398384599280109997382457602348830290417539457855180600196987863790435951796652008874077619588009742392995091005094877000766790156281286187040417842121266681700930368831647410437146102516713561101412882307901915989080424097873678471849076273916354480241295777793503380679106471518471238894479154349592076921851790102236024307249229445976087946485598340048373441330762229445455456033774726811 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ddae719c54cfeb0f0f9e3ad7c4c9958cb25372a6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (291 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capmed.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capmed.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicoe.capmed.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncrmd.health.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwcc.health.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dthc.capmed.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fbch.capmed.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fbch.health.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwcc.capmed.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dthc.health.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apps.capmed.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrnmmc.health.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrnmmc.capmed.mil' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicoe.health.mil' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0086a83591611ada4a6009522b0f227dc938410e299d3efec2c9cf1a53277e06d3c039d7efa9459a4ccec6dd3fcf9b22c5db0a678d9a4fdd3341330d2784fa1b3bf3b2fcd8d7b727d85cf276f3c926c5ad2b2de25a55e2b8805e8c7dcfd90e4994f8b9fd87c2357faee265561b5f8193e6d8429813a9412eb34d09ff0db6e9b3fdb44eb6d7fd49c0865e2a4feda5f75191e1382652cfcd483e6e6915a5e5e6f4d8a292ed8fc8604967655e77f7091ae95536124380c89a9c7bb2c16305a994d9385e9e7a9efa9288c475b28ead777c6179d899d784396b3b11add6c1a27e9855d0d4f8af73e91ccb1f52a329d96f177417c3195c0490bcb35435ea61efcabefbe8