blog.gtn.com
- Cloudflare, Inc. -
Issued by CloudFlare Inc RSA CA-1
About this certificate
This digital certificate with serial number 07:51:bb:46:d9:6b:a0:45:bd:a4:91:07:47:1e:9b:de was issued on by CloudFlare, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Cloudflare, Inc.
Organization:
Cloudflare, Inc.
State / Province:
CA
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
CloudFlare, Inc.
Organization:
CloudFlare, Inc.
State / Province:
CA
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:51:bb:46:d9:6b:a0:45:bd:a4:91:07:47:1e:9b:deSerial Number (int): 9728970439891350068168981402653465566
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 5b:bf:1f:4b:9e:04:ff:13:49:6b:b2:8d:4b:94:12:5a:5c:92:2e:75
AuthorityKeyId: 91:05:8a:df:4c:22:c6:6d:8b:94:4c:16:45:7e:ee:6f:02:fb:b7:c0
Fingerprint (sha1): 19:6c:ef:8c:e0:0b:26:d6:da:83:ff:7b:94:ca:fa:d1:2e:35:01:06
Fingerprint (sha256): 92:60:83:2a:33:18:7f:5b:24:cf:fc:e9:16:80:7b:a7:e4:b2:2d:14:96:25:1f:12:4b:47:97:5b:e2:c0:44:18
Issuing Certificate URL: http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/CloudFlareIncRSACA1.crl
CRL Distribution Point: http://crl4.digicert.com/CloudFlareIncRSACA1.crl
Check the revocation status for certificate blog.gtn.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for blog.gtn.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blog.gtn.com
Other certificates including the domain name gtn.com
(limited to 100 certificates)
secure0126.hubspot.com
secure0127.hubspot.com
*.gtn.com
secure0127.hubspot.com
secure0126.hubspot.com
blog.gtn.com
info.gtn.com
secure0127.hubspot.com
secure0127.hubspot.com
gtn.com
secure0126.hubspot.com
secure0126.hubspot.com
info.gtn.com
gtn.com
*.gtn.com
www.gtn.com
www.gtn.com
blog.gtn.com
secure0127.hubspot.com
gtn.com
secure0126.hubspot.com
gtn.com
secure0127.hubspot.com
secure0127.hubspot.com
gtn.com
secure0126.hubspot.com
blog.gtn.com
*.gtn.com
blog.gtn.com
blog.gtn.com
www.gtn.com
secure0126.hubspot.com
gtn.com
gtn.com
secure0127.hubspot.com
gtn.com
gtn.com
*.gtn.com
www.gtn.com
secure0127.hubspot.com
www.gtn.com
secure0126.hubspot.com
blog.gtn.com
blog.gtn.com
secure0127.hubspot.com
servicedesk.gtn.com
secure0126.hubspot.com
gtn.com
gtn.com
gtn.com
secure0127.hubspot.com
secure0127.hubspot.com
*.gtn.com
info.gtn.com
secure0127.hubspot.com
secure0127.hubspot.com
secure0127.hubspot.com
secure0126.hubspot.com
secure0126.hubspot.com
info.gtn.com
gtn.com
blog.gtn.com
*.gtn.com
gtn.com
info.gtn.com
blog.gtn.com
secure0126.hubspot.com
gtn.com
secure0127.hubspot.com
secure0126.hubspot.com
blog.gtn.com
gtn.com
secure0127.hubspot.com
www.gtn.com
info.gtn.com
info.gtn.com
secure0126.hubspot.com
gtn.com
secure0126.hubspot.com
secure0127.hubspot.com
secure0127.hubspot.com
secure0127.hubspot.com
secure0127.hubspot.com
secure0127.hubspot.com
secure0126.hubspot.com
secure0127.hubspot.com
info.gtn.com
secure0127.hubspot.com
*.gtn.com
secure0127.hubspot.com
secure0126.hubspot.com
blog.gtn.com
info.gtn.com
secure0127.hubspot.com
secure0127.hubspot.com
gtn.com
secure0126.hubspot.com
secure0126.hubspot.com
info.gtn.com
gtn.com
*.gtn.com
www.gtn.com
www.gtn.com
blog.gtn.com
secure0127.hubspot.com
gtn.com
secure0126.hubspot.com
gtn.com
secure0127.hubspot.com
secure0127.hubspot.com
gtn.com
secure0126.hubspot.com
blog.gtn.com
*.gtn.com
blog.gtn.com
blog.gtn.com
www.gtn.com
secure0126.hubspot.com
gtn.com
gtn.com
secure0127.hubspot.com
gtn.com
gtn.com
*.gtn.com
www.gtn.com
secure0127.hubspot.com
www.gtn.com
secure0126.hubspot.com
blog.gtn.com
blog.gtn.com
secure0127.hubspot.com
servicedesk.gtn.com
secure0126.hubspot.com
gtn.com
gtn.com
gtn.com
secure0127.hubspot.com
secure0127.hubspot.com
*.gtn.com
info.gtn.com
secure0127.hubspot.com
secure0127.hubspot.com
secure0127.hubspot.com
secure0126.hubspot.com
secure0126.hubspot.com
info.gtn.com
gtn.com
blog.gtn.com
*.gtn.com
gtn.com
info.gtn.com
blog.gtn.com
secure0126.hubspot.com
gtn.com
secure0127.hubspot.com
secure0126.hubspot.com
blog.gtn.com
gtn.com
secure0127.hubspot.com
www.gtn.com
info.gtn.com
info.gtn.com
secure0126.hubspot.com
gtn.com
secure0126.hubspot.com
secure0127.hubspot.com
secure0127.hubspot.com
secure0127.hubspot.com
secure0127.hubspot.com
secure0127.hubspot.com
secure0126.hubspot.com
secure0127.hubspot.com
info.gtn.com
Certificate
The complete raw certificate details for blog.gtn.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIQB1G7RtlroEW9pJEHRx6b3jANBgkqhkiG9w0BAQsFADBv MQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExFjAUBgNVBAcTDVNhbiBGcmFuY2lz Y28xGTAXBgNVBAoTEENsb3VkRmxhcmUsIEluYy4xIDAeBgNVBAMTF0Nsb3VkRmxh cmUgSW5jIFJTQSBDQS0xMB4XDTE5MDkxNzAwMDAwMFoXDTIwMDkxNjEyMDAwMFow ZDELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRYwFAYDVQQHEw1TYW4gRnJhbmNp c2NvMRkwFwYDVQQKExBDbG91ZGZsYXJlLCBJbmMuMRUwEwYDVQQDEwxibG9nLmd0 bi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCb9+6Vr7EBkJ k3yLsS4y2PIRX7MwSUqTGwp/ap9+/N77VEXU+2WfwJ61IkEjGsllau8uy/GFUZWh q+cOGxvZYVVfzZfIkDwfo79qIM0RYw/9INyAoGJsMtY41q2vhziQriXIRh+s1Ivu c9av/CrrQwyn71NqtgVjhReRjTBJ5ZIkh7OzEuWNC0HJ3G4flVPRKD0gegkzapCB J22O4LK1o4uCGzpKgKFuN9lBnqRCBkZGiXv0YHmRUNLhZ1egIkKUfBBTM+9wZ6d/ VsT2S7ufo5ASkED1gf/+aD/Egk8QOm4+pnVdiESmlPPXi684to1W2GMdNvxKojQY FZww0dwHAgMBAAGjggHwMIIB7DAfBgNVHSMEGDAWgBSRBYrfTCLGbYuUTBZFfu5v Avu3wDAdBgNVHQ4EFgQUW78fS54E/xNJa7KNS5QSWlySLnUwFwYDVR0RBBAwDoIM YmxvZy5ndG4uY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIweQYDVR0fBHIwcDA2oDSgMoYwaHR0cDovL2NybDMuZGlnaWNl cnQuY29tL0Nsb3VkRmxhcmVJbmNSU0FDQTEuY3JsMDagNKAyhjBodHRwOi8vY3Js NC5kaWdpY2VydC5jb20vQ2xvdWRGbGFyZUluY1JTQUNBMS5jcmwwTAYDVR0gBEUw QzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNl cnQuY29tL0NQUzAIBgZngQwBAgIwdgYIKwYBBQUHAQEEajBoMCQGCCsGAQUFBzAB hhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQAYIKwYBBQUHMAKGNGh0dHA6Ly9j YWNlcnRzLmRpZ2ljZXJ0LmNvbS9DbG91ZEZsYXJlSW5jUlNBQ0EtMS5jcnQwDAYD VR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM9gT3bKnIgPAiW7i2SMMP/7MX7OJATpb2xPxTuCSfwlRh3nemDxhAw3Cplj3 n7TW3OW4A4WN87DQOnzHpTU/9LISQVOB+wIAH+yyYEms22HphyTB68J1LG/k0+0O CNLK6yoo01dNMFpsOU4BBWoLM3vG495cXr6PutJ5mSn25s98ugcUt7rZwl6vRMR3 f1ktFC31q9viy3kajtyAGHlqAh53WkIrWGGn9WV2Qxxp8CnyZnkcwdF/Kfi8ESvD N8hjuvYBQ8jE8w8BkNBufMKL7Gq2ndNtKCsyO9QCGiLwRuC/yC4WsBwhP3ZU59Jq rGRrf0jSZatY4slQ6vSjIf46NA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwm/fula+xAZCZN8i7Eu MtjyEV+zMElKkxsKf2qffvze+1RF1Ptln8CetSJBIxrJZWrvLsvxhVGVoavnDhsb 2WFVX82XyJA8H6O/aiDNEWMP/SDcgKBibDLWONatr4c4kK4lyEYfrNSL7nPWr/wq 60MMp+9TarYFY4UXkY0wSeWSJIezsxLljQtBydxuH5VT0Sg9IHoJM2qQgSdtjuCy taOLghs6SoChbjfZQZ6kQgZGRol79GB5kVDS4WdXoCJClHwQUzPvcGenf1bE9ku7 n6OQEpBA9YH//mg/xIJPEDpuPqZ1XYhEppTz14uvOLaNVthjHTb8SqI0GBWcMNHc BwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9728970439891350068168981402653465566 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare Inc RSA CA-1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-16 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.gtn.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25126229621126912634566032722821191691951140854542234688750710769496384406697525827359675498907593404740044146324025694855995091462860864158118937142534988746002741086567824842552442124447156648441418032799423155341080879476500137054054611254206513859496856861809206669853774159784315524144798192014887887333910400145975852178719932779277521537810082183020521513575372343012880152514549216050783322526422837317315874945203487471572712473940576033092284440550378750833425546296567649412373952472956641414410085389215694570522319582966388627383822123563057997340612933299329828633824287007093299651569782125325423074311 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 91058adf4c22c66d8b944c16457eee6f02fbb7c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5bbf1f4b9e04ff13496bb28d4b94125a5c922e75 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.gtn.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudFlareIncRSACA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudFlareIncRSACA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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