*.mars.com
- Mars Inc. -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 06:65:b7:7c:c3:0d:ef:83:b5:7b:e0:ae:17:14:d1:79 was issued on by DigiCert Inc.
With 110 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Mars Inc.
Organization:
Mars Inc.
Organization unit: Mars Information Services
Organization unit: Mars Information Services
State / Province:
Virginia
Locality: McLean
Country: US
Locality: McLean
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:65:b7:7c:c3:0d:ef:83:b5:7b:e0:ae:17:14:d1:79Serial Number (int): 8503511523037556878377317500445839737
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 67:60:8f:4f:8e:b6:8b:12:54:93:f7:ad:c6:ec:28:54:cb:c6:1c:35
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 1b:25:40:ce:6e:22:5a:34:bc:60:ea:60:e9:05:9e:dc:34:f7:07:9f
Fingerprint (sha256): a0:e9:73:56:37:14:c6:82:9d:e5:e4:08:d0:04:7e:4c:59:a9:63:69:2b:dd:42:1c:62:15:8f:2c:ed:5d:d2:5e
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate *.mars.com
110
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.mars.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.mars.com
*.royalcanin.com
*.royalcanin.ca
*.royalcanin.com.au
*.royalcanin.co.nz
*.royalcanin.co.uk
royalcanin.com.au
royalcanin.co.nz
royalcanin.co.uk
mars.com
royalcanin.com
royalcanin.ca
royalcanin.co.jp
*.royalcanin.co.jp
*.royalcanin.my
royalcanin.my
*.royalcanin.ph
royalcanin.ph
*.royalcanin.co.za
royalcanin.co.za
*.royalcanin.in
royalcanin.in
*.royalcanin.hk
royalcanin.hk
*.royalcanin.cl
royalcanin.cl
*.royalcanin.pr
royalcanin.pr
royalcanin.mx
*.royalcanin.mx
royalcanin.co
*.royalcanin.co
*.royalcanin.com.mx
royalcanin.com.mx
*.royalcanin.com.co
royalcanin.com.co
*.royalcanin.dk
royalcanin.dk
*.royalcanin.no
royalcanin.no
*.royalcanin.fi
royalcanin.fi
*.royal-canin.de
royal-canin.de
royalcanin.de
*.royalcanin.de
*.royalcanin.com.br
royalcanin.com.br
*.royal-canin.ee
royal-canin.ee
*.royalcanin.lv
royalcanin.lv
*.royalcanin.lt
royalcanin.lt
*.royalcanin.com.ua
royalcanin.com.ua
*.royalcanin.it
royalcanin.it
*.royalcanin.se
royalcanin.se
*.royal-canin.at
royal-canin.at
*.royalcanin.ch
royalcanin.ch
*.royalcanin.ro
*.eng.royalcanin.gr
*.royalcanin.gr
royalcanin.ro
eng.royalcanin.gr
royalcanin.gr
*.royalcanin.bg
royalcanin.bg
my.royalcanin.bg
*.my.royalcanin.bg
royal-canin.com.ar
*.royal-canin.com.ar
royalcanin.com.ar
*.royalcanin.com.ar
*.royalcanin.es
royalcanin.es
*.royalcanin.pt
royalcanin.pt
*.royalcanin.com.tw
royalcanin.com.tw
*.royalcanin.co.th
royalcanin.co.th
*.royalcanin.co.id
royalcanin.co.id
royalcanin.co.kr
*.royalcanin.co.kr
*.royalcanin.si
royalcanin.si
*.royalcanin.hu
royalcanin.hu
*.royalcanin.com.hr
royalcanin.com.hr
royalcanin.fr
*.royalcanin.fr
*.royalcanin.cz
royalcanin.cz
*.royalcanin.sk
royalcanin.sk
*.royalcanin.com.tr
royalcanin.com.tr
*.royalcanin.nl
royalcanin.nl
*.royal-canin.ru
royal-canin.ru
*.royalcanin.pl
royalcanin.pl
*.royalcanin.com
*.royalcanin.ca
*.royalcanin.com.au
*.royalcanin.co.nz
*.royalcanin.co.uk
royalcanin.com.au
royalcanin.co.nz
royalcanin.co.uk
mars.com
royalcanin.com
royalcanin.ca
royalcanin.co.jp
*.royalcanin.co.jp
*.royalcanin.my
royalcanin.my
*.royalcanin.ph
royalcanin.ph
*.royalcanin.co.za
royalcanin.co.za
*.royalcanin.in
royalcanin.in
*.royalcanin.hk
royalcanin.hk
*.royalcanin.cl
royalcanin.cl
*.royalcanin.pr
royalcanin.pr
royalcanin.mx
*.royalcanin.mx
royalcanin.co
*.royalcanin.co
*.royalcanin.com.mx
royalcanin.com.mx
*.royalcanin.com.co
royalcanin.com.co
*.royalcanin.dk
royalcanin.dk
*.royalcanin.no
royalcanin.no
*.royalcanin.fi
royalcanin.fi
*.royal-canin.de
royal-canin.de
royalcanin.de
*.royalcanin.de
*.royalcanin.com.br
royalcanin.com.br
*.royal-canin.ee
royal-canin.ee
*.royalcanin.lv
royalcanin.lv
*.royalcanin.lt
royalcanin.lt
*.royalcanin.com.ua
royalcanin.com.ua
*.royalcanin.it
royalcanin.it
*.royalcanin.se
royalcanin.se
*.royal-canin.at
royal-canin.at
*.royalcanin.ch
royalcanin.ch
*.royalcanin.ro
*.eng.royalcanin.gr
*.royalcanin.gr
royalcanin.ro
eng.royalcanin.gr
royalcanin.gr
*.royalcanin.bg
royalcanin.bg
my.royalcanin.bg
*.my.royalcanin.bg
royal-canin.com.ar
*.royal-canin.com.ar
royalcanin.com.ar
*.royalcanin.com.ar
*.royalcanin.es
royalcanin.es
*.royalcanin.pt
royalcanin.pt
*.royalcanin.com.tw
royalcanin.com.tw
*.royalcanin.co.th
royalcanin.co.th
*.royalcanin.co.id
royalcanin.co.id
royalcanin.co.kr
*.royalcanin.co.kr
*.royalcanin.si
royalcanin.si
*.royalcanin.hu
royalcanin.hu
*.royalcanin.com.hr
royalcanin.com.hr
royalcanin.fr
*.royalcanin.fr
*.royalcanin.cz
royalcanin.cz
*.royalcanin.sk
royalcanin.sk
*.royalcanin.com.tr
royalcanin.com.tr
*.royalcanin.nl
royalcanin.nl
*.royal-canin.ru
royal-canin.ru
*.royalcanin.pl
royalcanin.pl
Other certificates including the domain name mars.com
(limited to 100 certificates)
www.footer.mars.com
stage-associatesconnect.mars.com
termsofpurchase-uk.mars.com
aws-cf-rd21.mars-inc.com
sni.cloudflaressl.com
stage-mfapackagingdata.mars.com
stage.promo-repo.mars.com
www.contact.mars.com
lambda-redirect24.mars-inc.com
uat-sitecorerc-cd-sportingdog.mars.com
stage.v2.footer.mars.com
www.sharedservices.mars.com
arg.mars.com
*.mars.com
stage.2025digitalvision.mars.com
oktadocs.mars.com
www.footer.mars.com
origin.stage-jobs.supplier.mars.com
wostest.effem.com.cn
dev-lighthouse.mars.com
stage-perfectfitfonts.mars.com
*.mars.com
sni.cloudflaressl.com
stage-sitecorerc-cd.mars.com
petcollege.mars.com
ucskypechatbot01.mars.com
oktadocs.mars.com
stage-retroapproval.mars.com
productcentral.mars.com
whiskas.com.br
Sitecore1-uat.mars.com
sni.cloudflaressl.com
rcdfcdn.mars.com
mix.mars.com
careers.mars.com
sni.cloudflaressl.com
survey.gradwell.com
sni.cloudflaressl.com
stage.mfapackagingdata.mars.com
meetsmart.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.mars.com
san-9-s51.tlsprovisioning.exacttarget.com
marta.mars.com
mix.mars.com
stage-marketingportal.mars.com
itservicedesk.mars.com
jobs.supply2.mars.com
sni.cloudflaressl.com
lambda-redirect26.mars-inc.com
sni.cloudflaressl.com
migration.customs-cargo.mars.com
click.eu-petcare.mars.com
ciameu.mars.com
retroapproval-units.mars.com
lambda-redirect26.mars-inc.com
migration.stage-footer.mars.com
acts.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
aws-cf-rd25.mars-inc.com
metrics.mars.com
my-cms.mars.com
mypo.mars.com
sni.cloudflaressl.com
www.cravepetfood.co.uk
stage.qfs-warehouses.mars.com
iccc-webapp-dev.mars.com
brandgateway.mars.com
guest1-NA.mars.com
efexap.mars.com
survey.mars.com
stage.specialistpettrade.mars.com
origin.stage-newsservice.mars.com
san-9-s51.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
akamai-san122.exacttarget.com
aws-cf-www-mars-com-rd01.mars-inc.com
stage-profile.mars.com
aws-cf-rd21.mars-inc.com
sni.cloudflaressl.com
footer-admin.mars.com
stage.customer.mars.com
calendar.mars.com
survey.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
stage.posm-ae.mars.com
sni.cloudflaressl.com
ppj.mars.com
customer.mars.com
survey.westernwindowsystems.com
origin.brandgateway.mars.com
lambda-redirect21.mars-inc.com
stage.petcollege.mars.com
aws-cf-www-mars-com-rd01.mars-inc.com
sni.cloudflaressl.com
stage-associatesconnect.mars.com
termsofpurchase-uk.mars.com
aws-cf-rd21.mars-inc.com
sni.cloudflaressl.com
stage-mfapackagingdata.mars.com
stage.promo-repo.mars.com
www.contact.mars.com
lambda-redirect24.mars-inc.com
uat-sitecorerc-cd-sportingdog.mars.com
stage.v2.footer.mars.com
www.sharedservices.mars.com
arg.mars.com
*.mars.com
stage.2025digitalvision.mars.com
oktadocs.mars.com
www.footer.mars.com
origin.stage-jobs.supplier.mars.com
wostest.effem.com.cn
dev-lighthouse.mars.com
stage-perfectfitfonts.mars.com
*.mars.com
sni.cloudflaressl.com
stage-sitecorerc-cd.mars.com
petcollege.mars.com
ucskypechatbot01.mars.com
oktadocs.mars.com
stage-retroapproval.mars.com
productcentral.mars.com
whiskas.com.br
Sitecore1-uat.mars.com
sni.cloudflaressl.com
rcdfcdn.mars.com
mix.mars.com
careers.mars.com
sni.cloudflaressl.com
survey.gradwell.com
sni.cloudflaressl.com
stage.mfapackagingdata.mars.com
meetsmart.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.mars.com
san-9-s51.tlsprovisioning.exacttarget.com
marta.mars.com
mix.mars.com
stage-marketingportal.mars.com
itservicedesk.mars.com
jobs.supply2.mars.com
sni.cloudflaressl.com
lambda-redirect26.mars-inc.com
sni.cloudflaressl.com
migration.customs-cargo.mars.com
click.eu-petcare.mars.com
ciameu.mars.com
retroapproval-units.mars.com
lambda-redirect26.mars-inc.com
migration.stage-footer.mars.com
acts.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
aws-cf-rd25.mars-inc.com
metrics.mars.com
my-cms.mars.com
mypo.mars.com
sni.cloudflaressl.com
www.cravepetfood.co.uk
stage.qfs-warehouses.mars.com
iccc-webapp-dev.mars.com
brandgateway.mars.com
guest1-NA.mars.com
efexap.mars.com
survey.mars.com
stage.specialistpettrade.mars.com
origin.stage-newsservice.mars.com
san-9-s51.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
akamai-san122.exacttarget.com
aws-cf-www-mars-com-rd01.mars-inc.com
stage-profile.mars.com
aws-cf-rd21.mars-inc.com
sni.cloudflaressl.com
footer-admin.mars.com
stage.customer.mars.com
calendar.mars.com
survey.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
stage.posm-ae.mars.com
sni.cloudflaressl.com
ppj.mars.com
customer.mars.com
survey.westernwindowsystems.com
origin.brandgateway.mars.com
lambda-redirect21.mars-inc.com
stage.petcollege.mars.com
aws-cf-www-mars-com-rd01.mars-inc.com
sni.cloudflaressl.com
Certificate
The complete raw certificate details for *.mars.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMoTCCC4mgAwIBAgIQBmW3fMMN74O1e+CuFxTReTANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjAwMTIzMDAwMDAwWhcN MjEwNjAzMTIwMDAwWjB+MQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWEx DzANBgNVBAcTBk1jTGVhbjESMBAGA1UEChMJTWFycyBJbmMuMSIwIAYDVQQLExlN YXJzIEluZm9ybWF0aW9uIFNlcnZpY2VzMRMwEQYDVQQDDAoqLm1hcnMuY29tMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPKt+OE9k48znsBZJn/mjJ8T 4rpC4KpYF7EF071QUoxvTmiw9QOtD4M+6IUWNt9ZMg8KJHq/cvF5sgw+Qc2dpeBT KhCmrd/V53n5hWIVKV6rDj2ueTEYcP/WMcovs0Vcrc7Nd7J7lChSDkkFkeaOxqkK rINPR27WKN2qKDYA2g5muDtsW4QptmzcdsrAzS5qNUFiZjWJ0YsO3h0lLnLdobrO LCFqhuMKZwX/yh95P3FTotoiu+8ngKeDM19ClEBDDQEbmBPdWK6iwnrAs0ytDM+t edmwwUbzF/xCyU5MMy5Hd0xoGAHtkGZ7Rdpm/GQTtf2tIbE+jdJayNu63JsNEwID AQABo4IJSjCCCUYwHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYD VR0OBBYEFGdgj0+OtosSVJP3rcbsKFTLxhw1MIIHdwYDVR0RBIIHbjCCB2qCCiou bWFycy5jb22CECoucm95YWxjYW5pbi5jb22CDyoucm95YWxjYW5pbi5jYYITKi5y b3lhbGNhbmluLmNvbS5hdYISKi5yb3lhbGNhbmluLmNvLm56ghIqLnJveWFsY2Fu aW4uY28udWuCEXJveWFsY2FuaW4uY29tLmF1ghByb3lhbGNhbmluLmNvLm56ghBy b3lhbGNhbmluLmNvLnVrgghtYXJzLmNvbYIOcm95YWxjYW5pbi5jb22CDXJveWFs Y2FuaW4uY2GCEHJveWFsY2FuaW4uY28uanCCEioucm95YWxjYW5pbi5jby5qcIIP Ki5yb3lhbGNhbmluLm15gg1yb3lhbGNhbmluLm15gg8qLnJveWFsY2FuaW4ucGiC DXJveWFsY2FuaW4ucGiCEioucm95YWxjYW5pbi5jby56YYIQcm95YWxjYW5pbi5j by56YYIPKi5yb3lhbGNhbmluLmlugg1yb3lhbGNhbmluLmlugg8qLnJveWFsY2Fu aW4uaGuCDXJveWFsY2FuaW4uaGuCDyoucm95YWxjYW5pbi5jbIINcm95YWxjYW5p bi5jbIIPKi5yb3lhbGNhbmluLnBygg1yb3lhbGNhbmluLnBygg1yb3lhbGNhbmlu Lm14gg8qLnJveWFsY2FuaW4ubXiCDXJveWFsY2FuaW4uY2+CDyoucm95YWxjYW5p bi5jb4ITKi5yb3lhbGNhbmluLmNvbS5teIIRcm95YWxjYW5pbi5jb20ubXiCEyou cm95YWxjYW5pbi5jb20uY2+CEXJveWFsY2FuaW4uY29tLmNvgg8qLnJveWFsY2Fu aW4uZGuCDXJveWFsY2FuaW4uZGuCDyoucm95YWxjYW5pbi5ub4INcm95YWxjYW5p bi5ub4IPKi5yb3lhbGNhbmluLmZpgg1yb3lhbGNhbmluLmZpghAqLnJveWFsLWNh bmluLmRlgg5yb3lhbC1jYW5pbi5kZYINcm95YWxjYW5pbi5kZYIPKi5yb3lhbGNh bmluLmRlghMqLnJveWFsY2FuaW4uY29tLmJyghFyb3lhbGNhbmluLmNvbS5icoIQ Ki5yb3lhbC1jYW5pbi5lZYIOcm95YWwtY2FuaW4uZWWCDyoucm95YWxjYW5pbi5s doINcm95YWxjYW5pbi5sdoIPKi5yb3lhbGNhbmluLmx0gg1yb3lhbGNhbmluLmx0 ghMqLnJveWFsY2FuaW4uY29tLnVhghFyb3lhbGNhbmluLmNvbS51YYIPKi5yb3lh bGNhbmluLml0gg1yb3lhbGNhbmluLml0gg8qLnJveWFsY2FuaW4uc2WCDXJveWFs Y2FuaW4uc2WCECoucm95YWwtY2FuaW4uYXSCDnJveWFsLWNhbmluLmF0gg8qLnJv eWFsY2FuaW4uY2iCDXJveWFsY2FuaW4uY2iCDyoucm95YWxjYW5pbi5yb4ITKi5l bmcucm95YWxjYW5pbi5ncoIPKi5yb3lhbGNhbmluLmdygg1yb3lhbGNhbmluLnJv ghFlbmcucm95YWxjYW5pbi5ncoINcm95YWxjYW5pbi5ncoIPKi5yb3lhbGNhbmlu LmJngg1yb3lhbGNhbmluLmJnghBteS5yb3lhbGNhbmluLmJnghIqLm15LnJveWFs Y2FuaW4uYmeCEnJveWFsLWNhbmluLmNvbS5hcoIUKi5yb3lhbC1jYW5pbi5jb20u YXKCEXJveWFsY2FuaW4uY29tLmFyghMqLnJveWFsY2FuaW4uY29tLmFygg8qLnJv eWFsY2FuaW4uZXOCDXJveWFsY2FuaW4uZXOCDyoucm95YWxjYW5pbi5wdIINcm95 YWxjYW5pbi5wdIITKi5yb3lhbGNhbmluLmNvbS50d4IRcm95YWxjYW5pbi5jb20u dHeCEioucm95YWxjYW5pbi5jby50aIIQcm95YWxjYW5pbi5jby50aIISKi5yb3lh bGNhbmluLmNvLmlkghByb3lhbGNhbmluLmNvLmlkghByb3lhbGNhbmluLmNvLmty ghIqLnJveWFsY2FuaW4uY28ua3KCDyoucm95YWxjYW5pbi5zaYINcm95YWxjYW5p bi5zaYIPKi5yb3lhbGNhbmluLmh1gg1yb3lhbGNhbmluLmh1ghMqLnJveWFsY2Fu aW4uY29tLmhyghFyb3lhbGNhbmluLmNvbS5ocoINcm95YWxjYW5pbi5mcoIPKi5y b3lhbGNhbmluLmZygg8qLnJveWFsY2FuaW4uY3qCDXJveWFsY2FuaW4uY3qCDyou cm95YWxjYW5pbi5za4INcm95YWxjYW5pbi5za4ITKi5yb3lhbGNhbmluLmNvbS50 coIRcm95YWxjYW5pbi5jb20udHKCDyoucm95YWxjYW5pbi5ubIINcm95YWxjYW5p bi5ubIIQKi5yb3lhbC1jYW5pbi5ydYIOcm95YWwtY2FuaW4ucnWCDyoucm95YWxj YW5pbi5wbIINcm95YWxjYW5pbi5wbDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9j cmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8v Y3JsNC5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcG CWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5j b20vQ1BTMAgGBmeBDAECAjB8BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0 dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2Vy dHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAM BgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQCIWeVlnlSryTwHayTeRzSn9kTQ64iL1vbOakjM9Z64ZboSjXcvoRxXZ1Mq 7OUgoRPbUbt7NmSu8nv+ZkePhR/+tfq/7XBNDXyQrzkFrzkjEE6gRY+J/vVRAmY5 q02i2lrAnjbczdpKDzwQWO458DMEuhzDP4fEGjAnBOorCRxBn9nZI4wp6OKE0Ida usQQMxZyUY/vMMCGCGN0q0lnpPzpHAyeSWcllN9DYDB9VMwmDMucIuxaR4UglF+V UYSp4+lu/gATUg1cRFXFOIjvcznPA6VAs7EK+Vk4tBET/NaMUDYT6d5HueMIjCv0 VS88UPxnjKasJUkIxAU7A2RRttWX -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPKt+OE9k48znsBZJn/m jJ8T4rpC4KpYF7EF071QUoxvTmiw9QOtD4M+6IUWNt9ZMg8KJHq/cvF5sgw+Qc2d peBTKhCmrd/V53n5hWIVKV6rDj2ueTEYcP/WMcovs0Vcrc7Nd7J7lChSDkkFkeaO xqkKrINPR27WKN2qKDYA2g5muDtsW4QptmzcdsrAzS5qNUFiZjWJ0YsO3h0lLnLd obrOLCFqhuMKZwX/yh95P3FTotoiu+8ngKeDM19ClEBDDQEbmBPdWK6iwnrAs0yt DM+tedmwwUbzF/xCyU5MMy5Hd0xoGAHtkGZ7Rdpm/GQTtf2tIbE+jdJayNu63JsN EwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8503511523037556878377317500445839737 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-03 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'McLean' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mars Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mars Information Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mars.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22842564654377040010442352847351009112048080756865297655112845387794936424137766604667311745264756041066068799862020624371806627056291842536072529253902203231460587695643463999805745456013202894917673308336995634676891689410393986806578925151981615652645533850865319415131814963043306967961704019145718346462697249600012953739542333166387256880380933541775770446163878864748053899850295746638823173648184375886563539399866844121462358658404088854931304593827614361515532656758185883125397541384244289743356184077607477404741308674751831670212590904226885085193619812319130650905363273400154315066573296533557814693139 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 67608f4f8eb68b125493f7adc6ec2854cbc61c35 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1902 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mars.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mars.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.my' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.my' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ph' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ph' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.cl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.pr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.pr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.lv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.lt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.lt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.ua' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.ua' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eng.royalcanin.gr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.gr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng.royalcanin.gr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.gr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.royalcanin.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my.royalcanin.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.com.ar' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.com.ar' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.ar' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.ar' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.tw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.tw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.th' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.th' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.kr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.kr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.si' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.si' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.hu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.hu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.hr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.hr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.tr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.tr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.pl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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