kmsf2.lotto-bw.de
- Staatliche Toto-Lotto GmbH -
Issued by Thawte EV RSA CA G2
About this certificate
This digital certificate with serial number 07:b9:1a:c3:c4:f0:79:0e:c3:da:d8:42:eb:ec:52:47 was issued on by DigiCert Inc.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Staatliche Toto-Lotto GmbH
Company registration number:
HRB 917
Organization: Staatliche Toto-Lotto GmbH
Organization: Staatliche Toto-Lotto GmbH
State / Province:
Baden-Württemberg
Locality: Stuttgart
Country: DE
Locality: Stuttgart
Country: DE
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 07:b9:1a:c3:c4:f0:79:0e:c3:da:d8:42:eb:ec:52:47Serial Number (int): 10265713742414515246984463507719475783
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 08:cd:14:af:d2:f7:3a:62:62:c1:43:d2:71:b2:6b:57:ce:bd:b7:c9
AuthorityKeyId: 6c:2e:e4:61:b4:c3:b9:bd:f0:ca:ad:a6:c1:68:7a:b8:d4:cc:1d:a0
Fingerprint (sha1): 77:64:9c:d1:83:62:b6:db:4f:a6:a7:57:88:9a:ff:1a:e1:90:c3:d0
Fingerprint (sha256): 96:d0:3f:05:f0:90:b6:b0:4a:57:20:41:2d:7d:f2:e0:cb:9f:ae:a2:b8:50:86:2a:55:e7:de:fc:0f:ef:17:f5
Issuing Certificate URL: http://cacerts.digicert.com/ThawteEVRSACAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ThawteEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/ThawteEVRSACAG2.crl
Check the revocation status for certificate kmsf2.lotto-bw.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kmsf2.lotto-bw.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kmsf2.lotto-bw.de
Other certificates including the domain name lotto-bw.de
(limited to 100 certificates)
www.lotto-bw.de
www.veranstaltung.lotto-bw.de
image.client.generali.ro
san-3-s50.tlsprovisioning.exacttarget.com
wunschgewinn.lotto-bw.de
extfs.lotto-bw.de
stl2.lotto-bw.de
image.client.generali.ro
www.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
GGL-Comm-T1.lotto-bw.de
stl2.lotto-bw.de
www.lotto-bw.de
stl1.lotto-bw.de
www.veranstaltung.lotto-bw.de
stl2.lotto-bw.de
image.client.generali.ro
www.lotto-bw.de
www.lotto-bw.de
image.client.generali.ro
www.lotto-bw.de
schulung.lotto-bw.de
schulung.lotto-bw.de
www.lotto-bw.de
www.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
www.veranstaltung.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
image.client.generali.ro
wunschgewinn.lotto-bw.de
wunschgewinn.lotto-bw.de
image.client.generali.ro
image.client.generali.ro
schulung.lotto-bw.de
www.veranstaltung.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
www.lotto-bw.de
stl1.lotto-bw.de
wunschgewinn.lotto-bw.de
dev.marketing.lotto-bw.de
stl2.lotto-bw.de
kmsf2.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
wunschgewinn.lotto-bw.de
marketing.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
www.veranstaltung.lotto-bw.de
www.veranstaltung.lotto-bw.de
LUGAS-SIG-T1.lotto-bw.de
www.lotto-bw.de
schulung.lotto-bw.de
www.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
test.marketing.lotto-bw.de
wunschgewinn.lotto-bw.de
image.client.generali.ro
www.veranstaltung.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
stl1.lotto-bw.de
GGL-Comm-PROD.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
image.client.generali.ro
www.veranstaltung.lotto-bw.de
stl2.lotto-bw.de
extfs.lotto-bw.de
LUGAS-SIG-PROD.lotto-bw.de
www.veranstaltung.lotto-bw.de
image.client.generali.ro
san-3-s50.tlsprovisioning.exacttarget.com
wunschgewinn.lotto-bw.de
extfs.lotto-bw.de
stl2.lotto-bw.de
image.client.generali.ro
www.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
GGL-Comm-T1.lotto-bw.de
stl2.lotto-bw.de
www.lotto-bw.de
stl1.lotto-bw.de
www.veranstaltung.lotto-bw.de
stl2.lotto-bw.de
image.client.generali.ro
www.lotto-bw.de
www.lotto-bw.de
image.client.generali.ro
www.lotto-bw.de
schulung.lotto-bw.de
schulung.lotto-bw.de
www.lotto-bw.de
www.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
www.veranstaltung.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
image.client.generali.ro
wunschgewinn.lotto-bw.de
wunschgewinn.lotto-bw.de
image.client.generali.ro
image.client.generali.ro
schulung.lotto-bw.de
www.veranstaltung.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
www.lotto-bw.de
stl1.lotto-bw.de
wunschgewinn.lotto-bw.de
dev.marketing.lotto-bw.de
stl2.lotto-bw.de
kmsf2.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
wunschgewinn.lotto-bw.de
marketing.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
www.veranstaltung.lotto-bw.de
www.veranstaltung.lotto-bw.de
LUGAS-SIG-T1.lotto-bw.de
www.lotto-bw.de
schulung.lotto-bw.de
www.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
test.marketing.lotto-bw.de
wunschgewinn.lotto-bw.de
image.client.generali.ro
www.veranstaltung.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
stl1.lotto-bw.de
GGL-Comm-PROD.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
image.client.generali.ro
www.veranstaltung.lotto-bw.de
stl2.lotto-bw.de
extfs.lotto-bw.de
LUGAS-SIG-PROD.lotto-bw.de
Certificate
The complete raw certificate details for kmsf2.lotto-bw.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgIQB7kaw8TweQ7D2thC6+xSRzANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRwwGgYDVQQDExNU aGF3dGUgRVYgUlNBIENBIEcyMB4XDTIzMDUyMjAwMDAwMFoXDTI0MDYyMTIzNTk1 OVowggEGMRMwEQYLKwYBBAGCNzwCAQMTAkRFMSMwIQYLKwYBBAGCNzwCAQIMEkJh ZGVuLVfDvHJ0dGVtYmVyZzEaMBgGCysGAQQBgjc8AgEBEwlTdHV0dGdhcnQxHTAb BgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRAwDgYDVQQFEwdIUkIgOTE3MQsw CQYDVQQGEwJERTEbMBkGA1UECAwSQmFkZW4tV8O8cnR0ZW1iZXJnMRIwEAYDVQQH EwlTdHV0dGdhcnQxIzAhBgNVBAoTGlN0YWF0bGljaGUgVG90by1Mb3R0byBHbWJI MRowGAYDVQQDExFrbXNmMi5sb3R0by1idy5kZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMGvs1jWdiag/tra3WBlByCQ5ORBXoxyzxGfufo3lfu5H4FJ LuprIWqMFtcInME63dOes5ZCL6fP2PffQHmLlj0gJoMNksgd7gLRb1qTZdgkT/CZ BY8VOcgzfKuZ77TafVuBeLBli9BcEu1PF15Bp4N7a9zVlD/y09akFUZRQb/w4iI1 +LONt5iEX+Er4WsYZ9IMtS7qG4D/S8NJzYj++N9K0SNtwY2RG0NAkWOiD95kIPhX Yt2vjM+1Hz+nnvJDDU42/XWQRdxaCJPOQsh7ik5SWr8yqcQrn7Tg+tFByaYVbSQ7 SpLk0VdXlSbHL1y7KdUhoSIZF5NYSWBZB9vyc2UCAwEAAaOCAeMwggHfMB8GA1Ud IwQYMBaAFGwu5GG0w7m98MqtpsFoerjUzB2gMB0GA1UdDgQWBBQIzRSv0vc6YmLB Q9JxsmtXzr23yTAcBgNVHREEFTATghFrbXNmMi5sb3R0by1idy5kZTAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHEGA1UdHwRq MGgwMqAwoC6GLGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9UaGF3dGVFVlJTQUNB RzIuY3JsMDKgMKAuhixodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vVGhhd3RlRVZS U0FDQUcyLmNybDBKBgNVHSAEQzBBMAsGCWCGSAGG/WwCATAyBgVngQwBATApMCcG CCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwcQYIKwYBBQUH AQEEZTBjMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wOwYI KwYBBQUHMAKGL2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9UaGF3dGVFVlJT QUNBRzIuY3J0MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI hvcNAQELBQADggEBAGIKcjmFrYjMClvHx10Kx9Kzn/hS/mlKjJizNRTRvHAQUcC3 y8/ZgRwu8XlXkNhjhuI6HoeejhZ82M22C9V1vMQu/34Sexi0bG7XMeBz386PI6r2 2EEJHtO6WsIIxJV36hI2aQNEYsizS2yF6oQP1oWo/7by9yhHudMJ/7Ajt+KEvDI1 TT6DdxlScSJe2bhggRiFQx/nC3ZCfft1G4ZkRh6dj7LGm53H2vh5+McUkwtwvwb3 0IJa+CQkY7zGe2bsOeVjha8AUDrECJ0dsaADTo31d7YyrITT8zNgUE5eOziQeew7 6zCxL6G7/PV38DyiOoGjJTY1YRm0+vfuF+PuKsM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa+zWNZ2JqD+2trdYGUH IJDk5EFejHLPEZ+5+jeV+7kfgUku6mshaowW1wicwTrd056zlkIvp8/Y999AeYuW PSAmgw2SyB3uAtFvWpNl2CRP8JkFjxU5yDN8q5nvtNp9W4F4sGWL0FwS7U8XXkGn g3tr3NWUP/LT1qQVRlFBv/DiIjX4s423mIRf4Svhaxhn0gy1LuobgP9Lw0nNiP74 30rRI23BjZEbQ0CRY6IP3mQg+Fdi3a+Mz7UfP6ee8kMNTjb9dZBF3FoIk85CyHuK TlJavzKpxCuftOD60UHJphVtJDtKkuTRV1eVJscvXLsp1SGhIhkXk1hJYFkH2/Jz ZQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10265713742414515246984463507719475783 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte EV RSA CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 917' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Staatliche Toto-Lotto GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kmsf2.lotto-bw.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24450634040800858911891522732281968939218319404520249543281125212698528184296207056617885925983777224191942208714569327444806517285481785092099651548121395271250897442279724126996387216774573341425855267364118129022868649319741604884073497950673173176203790441553272925677527474884542641785232588441384557883915683030815546751038616103694193700819679994134549521055695198520553365619805761872810293267115530101938299335210465378605835767612652834992119378495767881464572544048680051462341966108529252803550082101078654134175187732446557608683803583598697628549476382920199290260069804972679074349505598144784922473317 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6c2ee461b4c3b9bdf0caada6c1687ab8d4cc1da0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 08cd14afd2f73a6262c143d271b26b57cebdb7c9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmsf2.lotto-bw.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ThawteEVRSACAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ThawteEVRSACAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/ThawteEVRSACAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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