ctxgateway.adm.com
- Archer-Daniels-Midland Company -
Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 02:6a:71:51:26:37:6d:2a:13:15:a0:55:b0:be:35:47 was issued on by DigiCert Inc.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Archer-Daniels-Midland Company
Organization:
Archer-Daniels-Midland Company
State / Province:
Illinois
Locality: Decatur
Country: US
Locality: Decatur
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 02:6a:71:51:26:37:6d:2a:13:15:a0:55:b0:be:35:47Serial Number (int): 3211137800168336575976080502322771271
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 2b:f5:24:84:88:6a:90:92:ea:dd:1e:16:03:af:d9:bb:a0:84:af:44
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17
Fingerprint (sha1): 9a:ab:f6:ee:b1:04:b0:52:a8:3f:c3:46:06:28:73:77:e0:ac:f8:bd
Fingerprint (sha256): a0:50:a5:80:18:eb:72:67:55:28:f4:fb:13:6c:3c:8d:f4:6f:a2:b4:21:eb:f3:0f:88:40:ff:02:e7:02:ba:66
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
Check the revocation status for certificate ctxgateway.adm.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ctxgateway.adm.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ctxgateway.adm.com
frontline.adm.com
decctxgateway.adm.com
myworkspace-dc1.adm.com
myworkspace-dc2.adm.com
myworkspace-am.adm.com
myworkspace.adm.com
sapgateway.adm.com
frontline.adm.com
decctxgateway.adm.com
myworkspace-dc1.adm.com
myworkspace-dc2.adm.com
myworkspace-am.adm.com
myworkspace.adm.com
sapgateway.adm.com
Other certificates including the domain name adm.com
(limited to 100 certificates)
sso.adm.com
*.adm.com
*.adm.com
*.adm.com
preprod.wisium.com
*.adm.com
iq.adm.com
extwebfarm.adm.com
qaext.admnaapis.adm.com
cloud.notifications.adm.com
extapi.adm.com
meet.adm.com
san-3-s12.tlsprovisioning.exacttarget.com
cloud.notifications.adm.com
*.adm.com
adm.com
san-3-s12.tlsprovisioning.exacttarget.com
*.adm.com
guest.adm.com
getpaid.adm.com
meet.adm.com
*.adm.com
*.adm.com
SipEU.adm.com
meet.adm.com
*.adm.com
*.adm.com
image.email.plasticbank.com
learningcenter.adm.com
ADMO365SBC.adm.com
myvpn.adm.com
go.adm.com
hybrid.adm.com
myemail.adm.com
learningcenter.adm.com
*.adm.com
*.adm.com
asoa14.adm.com
devext.admnaapis.adm.com
timber.adm.com
myemail.adm.com
myemail.adm.com
extwebfarm.adm.com
adm.bynder.com
*.adm.com
learningcenter.adm.com
myIM.adm.com
sso.adm.com
myaccess.admworld.com
san-3-s12.tlsprovisioning.exacttarget.com
meet.adm.com
*.adm.com
*.adm.com
as2p.adm.com
image.email.plasticbank.com
sso.adm.com
myvpn.adm.com
extranet.adm.com
*.adm.com
myim.adm.com
click.notifications.adm.com
*.adm.com
myemail.adm.com
sip.adm.com
*.adm.com
myadm.adm.com
hybrideu.adm.com
image.email.plasticbank.com
preprod.adm.com
conference.adm.com
*.adm.com
meet.adm.com
*.adm.com
*.adm.com
adm.com
myadm.adm.com
myemail.adm.com
hybridsa.adm.com
ecmprd.adm.com
image.email.plasticbank.com
learningcenter.adm.com
san-3-s12.tlsprovisioning.exacttarget.com
adm.com
sip.adm.com
*.adm.com
ecmprd.adm.com
*.adm.com
*.adm.com
ctxgateway.adm.com
sip.adm.com
*.adm.com
myaccess.adm.com
*.adm.com
myemail.adm.com
sip.adm.com
sip.adm.com
*.adm.com
*.adm.com
adm.com
sapfiori.adm.com
*.adm.com
*.adm.com
*.adm.com
preprod.wisium.com
*.adm.com
iq.adm.com
extwebfarm.adm.com
qaext.admnaapis.adm.com
cloud.notifications.adm.com
extapi.adm.com
meet.adm.com
san-3-s12.tlsprovisioning.exacttarget.com
cloud.notifications.adm.com
*.adm.com
adm.com
san-3-s12.tlsprovisioning.exacttarget.com
*.adm.com
guest.adm.com
getpaid.adm.com
meet.adm.com
*.adm.com
*.adm.com
SipEU.adm.com
meet.adm.com
*.adm.com
*.adm.com
image.email.plasticbank.com
learningcenter.adm.com
ADMO365SBC.adm.com
myvpn.adm.com
go.adm.com
hybrid.adm.com
myemail.adm.com
learningcenter.adm.com
*.adm.com
*.adm.com
asoa14.adm.com
devext.admnaapis.adm.com
timber.adm.com
myemail.adm.com
myemail.adm.com
extwebfarm.adm.com
adm.bynder.com
*.adm.com
learningcenter.adm.com
myIM.adm.com
sso.adm.com
myaccess.admworld.com
san-3-s12.tlsprovisioning.exacttarget.com
meet.adm.com
*.adm.com
*.adm.com
as2p.adm.com
image.email.plasticbank.com
sso.adm.com
myvpn.adm.com
extranet.adm.com
*.adm.com
myim.adm.com
click.notifications.adm.com
*.adm.com
myemail.adm.com
sip.adm.com
*.adm.com
myadm.adm.com
hybrideu.adm.com
image.email.plasticbank.com
preprod.adm.com
conference.adm.com
*.adm.com
meet.adm.com
*.adm.com
*.adm.com
adm.com
myadm.adm.com
myemail.adm.com
hybridsa.adm.com
ecmprd.adm.com
image.email.plasticbank.com
learningcenter.adm.com
san-3-s12.tlsprovisioning.exacttarget.com
adm.com
sip.adm.com
*.adm.com
ecmprd.adm.com
*.adm.com
*.adm.com
ctxgateway.adm.com
sip.adm.com
*.adm.com
myaccess.adm.com
*.adm.com
myemail.adm.com
sip.adm.com
sip.adm.com
*.adm.com
*.adm.com
adm.com
sapfiori.adm.com
Certificate
The complete raw certificate details for ctxgateway.adm.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHiTCCBnGgAwIBAgIQAmpxUSY3bSoTFaBVsL41RzANBgkqhkiG9w0BAQsFADBZ MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjMw NzE4MDAwMDAwWhcNMjQwODEzMjM1OTU5WjB4MQswCQYDVQQGEwJVUzERMA8GA1UE CBMISWxsaW5vaXMxEDAOBgNVBAcTB0RlY2F0dXIxJzAlBgNVBAoTHkFyY2hlci1E YW5pZWxzLU1pZGxhbmQgQ29tcGFueTEbMBkGA1UEAxMSY3R4Z2F0ZXdheS5hZG0u Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7Qz7dU/YF+oBVv2 WbgOnZdD3qJ9ji6UGcPbaIiOS31TtZ6UwOio+PskiiohySlCqPobBQav+/8kruhg lVodIgvJ50PNcWcCH40XS08+vPzRRWysld1fuJbmvEd5TzHdJKaYrt3xWQi/dZWX gH9wx+meztsut69JZTHmONlzEP7Vkk0WItwmMma3C1/KIVPRCPjGVgefDptITWqY BxFBrL1RGhmo+B6Txq17+FTZIwO2CrrN6Ic6O0KRMXLVmBsgtcUZ/b/hokrAYQRq 2NUa62GTzs+6Fw0U96ty2O0WWcUCKbmOZXClmoPUcgzcZUGQrojLhwWiKhjE7mWN McnPnwIDAQABo4IELDCCBCgwHwYDVR0jBBgwFoAUdIWAwGbH3zfez70pN6oDHb7t zRcwHQYDVR0OBBYEFCv1JISIapCS6t0eFgOv2bughK9EMIG8BgNVHREEgbQwgbGC EmN0eGdhdGV3YXkuYWRtLmNvbYIRZnJvbnRsaW5lLmFkbS5jb22CFWRlY2N0eGdh dGV3YXkuYWRtLmNvbYIXbXl3b3Jrc3BhY2UtZGMxLmFkbS5jb22CF215d29ya3Nw YWNlLWRjMi5hZG0uY29tghZteXdvcmtzcGFjZS1hbS5hZG0uY29tghNteXdvcmtz cGFjZS5hZG0uY29tghJzYXBnYXRld2F5LmFkbS5jb20wDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEig RqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRM U1JTQVNIQTI1NjIwMjBDQTEtMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2lj ZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcyVExTUlNBU0hBMjU2MjAyMENBMS0xLmNy bDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3 LmRpZ2ljZXJ0LmNvbS9DUFMwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcwAYYY aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8vY2Fj ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIw MjBDQTEtMS5jcnQwCQYDVR0TBAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFp AHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGJaXmigQAABAMA SDBGAiEAgy9o9KP5aSxveGfkRVyMsisRTaffs1PHDZAOA8Bt56MCIQCL3Z0tNAOf UNytN1b9szMAvcP64yBGloMz2GkB0cxj3QB2AEiw42vapkc0D+VqAvqdMOscUgHL Vt0sgdm7v6s52IRzAAABiWl5okoAAAQDAEcwRQIhAO2BAFG88ffg9m9XSN/haPNO N8jaPsUUEBiXy38qIYiIAiBDsI36MpSR5UIJsgqMkhMr80o31sA8ObvRG9YmlQPq 5gB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiWl5ofEAAAQD AEcwRQIgAz8wsP03cf8dOJLHO2NAuVO4Czq+31ZOhCJXs8usekkCIQCdC/yXDF4N cYWQz6iFpU+Kkiha+U2xWS0i+nz/iRqkgTANBgkqhkiG9w0BAQsFAAOCAQEAKva4 C0J5vIRuyM3wJL08phGVRbWmFaye2oENBSm3jnjoQazDI5w6NuzLVCy3zz1q19vr +X3Ns4aMbiWy+NFC9DSN9dAfwJkEF1F6JyVIQicrhW8ncXc5g0VIUf2qH0g3rJG7 tcuNLYAripYTBX0GHcpKXFr0YNBjQihYc7EiPI5/tkrl2r/0K5QjkK/l3Arka4Ll tjBDplW3UJV625lCnwKanwx7A9nuNVaPIY9E192P9PitH20lCHkWVXtsru3R6t3v +JadoHmIpSrIH4WmqA3Kl9kRbk0Y7romY+y5srwHtQjyh7jvTp3Dp9+D4uKKd5A9 HHKnyeLE1x5EBC5n4w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7Qz7dU/YF+oBVv2WbgO nZdD3qJ9ji6UGcPbaIiOS31TtZ6UwOio+PskiiohySlCqPobBQav+/8kruhglVod IgvJ50PNcWcCH40XS08+vPzRRWysld1fuJbmvEd5TzHdJKaYrt3xWQi/dZWXgH9w x+meztsut69JZTHmONlzEP7Vkk0WItwmMma3C1/KIVPRCPjGVgefDptITWqYBxFB rL1RGhmo+B6Txq17+FTZIwO2CrrN6Ic6O0KRMXLVmBsgtcUZ/b/hokrAYQRq2NUa 62GTzs+6Fw0U96ty2O0WWcUCKbmOZXClmoPUcgzcZUGQrojLhwWiKhjE7mWNMcnP nwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3211137800168336575976080502322771271 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-13 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Decatur' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Archer-Daniels-Midland Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ctxgateway.adm.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24705330804535786046746482757188316496457366218217229686054102584625541089056310002247325144095174346872898587277507975235844746700164131682979002438718060120631830129603347957611241582023661988330551283046459942030864898881908779510079932812178899501622279893989570840369967021720944505418456457834775599385786857547107411394772700951374512426610428633016380878445670927299233779770934072836514066901075493635823549721347651782061594013142215008113555536097249281628254611186440952211995273147505900280859686848807614537019631829147720386192820735871027687537162365961424710398312619572823308336967206031381469187999 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2bf52484886a9092eadd1e1603afd9bba084af44 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (180 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctxgateway.adm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontline.adm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decctxgateway.adm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myworkspace-dc1.adm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myworkspace-dc2.adm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myworkspace-am.adm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myworkspace.adm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapgateway.adm.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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