mail1.ccls.org
- Chester County Library System -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0b:63:25:62:6b:93:ee:1d:84:98:eb:7a:0f:8e:38:3e was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Chester County Library System
Organization:
Chester County Library System
Organization unit: Computer Services
Organization unit: Computer Services
State / Province:
Pennsylvania
Locality: Exton
Country: US
Locality: Exton
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:63:25:62:6b:93:ee:1d:84:98:eb:7a:0f:8e:38:3eSerial Number (int): 15136303589438016660977586489598556222
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: c7:34:0e:44:14:10:51:50:d3:d2:da:c6:b2:60:45:96:9d:bc:ab:0e
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): b1:db:c1:74:16:74:31:d0:2b:a4:3b:36:fe:2c:ab:ab:00:6c:88:6e
Fingerprint (sha256): a9:ee:30:37:d0:ef:bd:4c:15:08:35:61:7e:ee:cb:04:a8:6e:47:8a:0e:0c:82:98:34:a4:18:9f:c8:65:f5:c4
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate mail1.ccls.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail1.ccls.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail1.ccls.org
Other certificates including the domain name ccls.org
(limited to 100 certificates)
mail1.ccls.org
mail1.ccls.org
CCLS-ASA.ccls.org
catalog.ccls.org
catalog.ccls.org
mail1.ccls.org
CCLS-ASA.ccls.org
www.ccls.org
mail1.ccls.org
CCLS-ASA.ccls.org
www.ccls.org
catalog.ccls.org
catalog.ccls.org
CCLS-ASA.ccls.org
mail1.ccls.org
www.ccls.org
www.ccls.org
mail1.ccls.org
catalog.ccls.org
CCLS-ASA.ccls.org
mail1.ccls.org
mail1.ccls.org
www.ccls.org
mail1.ccls.org
CCLS-ASA.ccls.org
catalog.ccls.org
catalog.ccls.org
catalog.ccls.org
www.ccls.org
mail1.ccls.org
mail1.ccls.org
www.ccls.org
catalog.ccls.org
CCLS-ASA.ccls.org
catalog.ccls.org
mail1.ccls.org
www.ccls.org
www.ccls.org
www.ccls.org
catalog.ccls.org
mail1.ccls.org
CCLS-ASA.ccls.org
www.ccls.org
ccls-asa.ccls.org
catalog.ccls.org
catalog.ccls.org
mail1.ccls.org
www.ccls.org
CCLS-ASA.ccls.org
mail1.ccls.org
catalog.ccls.org
catalog.ccls.org
CCLS-ASA.ccls.org
www.ccls.org
catalog.ccls.org
CCLS-ASA.ccls.org
catalog.ccls.org
mail1.ccls.org
CCLS-ASA.ccls.org
catalog.ccls.org
catalog.ccls.org
mail1.ccls.org
CCLS-ASA.ccls.org
www.ccls.org
mail1.ccls.org
CCLS-ASA.ccls.org
www.ccls.org
catalog.ccls.org
catalog.ccls.org
CCLS-ASA.ccls.org
mail1.ccls.org
www.ccls.org
www.ccls.org
mail1.ccls.org
catalog.ccls.org
CCLS-ASA.ccls.org
mail1.ccls.org
mail1.ccls.org
www.ccls.org
mail1.ccls.org
CCLS-ASA.ccls.org
catalog.ccls.org
catalog.ccls.org
catalog.ccls.org
www.ccls.org
mail1.ccls.org
mail1.ccls.org
www.ccls.org
catalog.ccls.org
CCLS-ASA.ccls.org
catalog.ccls.org
mail1.ccls.org
www.ccls.org
www.ccls.org
www.ccls.org
catalog.ccls.org
mail1.ccls.org
CCLS-ASA.ccls.org
www.ccls.org
ccls-asa.ccls.org
catalog.ccls.org
catalog.ccls.org
mail1.ccls.org
www.ccls.org
CCLS-ASA.ccls.org
mail1.ccls.org
catalog.ccls.org
catalog.ccls.org
CCLS-ASA.ccls.org
www.ccls.org
catalog.ccls.org
CCLS-ASA.ccls.org
catalog.ccls.org
Certificate
The complete raw certificate details for mail1.ccls.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIQC2MlYmuT7h2EmOt6D444PjANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjAwMzExMDAwMDAwWhcN MjEwNTI3MTIwMDAwWjCBkTELMAkGA1UEBhMCVVMxFTATBgNVBAgTDFBlbm5zeWx2 YW5pYTEOMAwGA1UEBxMFRXh0b24xJjAkBgNVBAoTHUNoZXN0ZXIgQ291bnR5IExp YnJhcnkgU3lzdGVtMRowGAYDVQQLExFDb21wdXRlciBTZXJ2aWNlczEXMBUGA1UE AxMObWFpbDEuY2Nscy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYcPz1McfIQgN089nQ0AiylkvcQBsMGgCqslN8Y9lwSU7z4EeYfLvDi1UI5hWp uaN+DWJKfw7yVDDQiZMnNixqlKR0udp6hy13rWgXS5QgJdrATepYH3rg3qW5OODD YK1wL53uOUDA9+Pk6oY+K9l1Ai0kblEMvwPS2GpRfn6ibW5CBpOIplqxX9jPoG10 bTpBFVmH1EVZ9oxSUblZlmPE24v/wet8OhywPLhHRbvS47WXIN0uGzAe8q+L5161 PrhhWnwZrP4Xtor16hm7cov2Jrbt5PdRevKHWpMVYh4c/SD17xQQdsbB1lDPQ3Pa YCgj5zd1p4YWFJB+OeOO/YFZAgMBAAGjggHqMIIB5jAfBgNVHSMEGDAWgBQPgGEc gjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUxzQORBQQUVDT0trGsmBFlp28qw4w GQYDVR0RBBIwEIIObWFpbDEuY2Nscy5vcmcwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRw Oi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0 cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUw QzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNl cnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzAB hhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9j YWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5j cnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B AQsFAAOCAQEAR6BDOHakShXTTZO671OcCPo7aX+bRrHA1lZax4decli3FTdo97eO pWzO8+hPCmFsmFNSicGdi3uhDA5qZh+yEvoRPRji/H46GS2AHoh/ql8BB7F6qawM BbB1a8hIdi5L3VH64UMcWc+pkZPeJmDVsanYzsgT4RX7TNg7o59Phk8QH+DhEIe8 81Ko1vrnkIlsWVOiqajVoYBNhKKzNrvSlC2TSvTQles/KVzyGGYKu0cSU2Dnj2/Y 9VTcvS6rOPUq1d7nAjhPYfhmzgClnPWNuntMsX2dLjR14bY9WEyd3JABQIBzePjZ 1QR5VpQyiJCAt/Ia3DRAzqFh+vMIpcrlRA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HD89THHyEIDdPPZ0NAI spZL3EAbDBoAqrJTfGPZcElO8+BHmHy7w4tVCOYVqbmjfg1iSn8O8lQw0ImTJzYs apSkdLnaeoctd61oF0uUICXawE3qWB964N6luTjgw2CtcC+d7jlAwPfj5OqGPivZ dQItJG5RDL8D0thqUX5+om1uQgaTiKZasV/Yz6BtdG06QRVZh9RFWfaMUlG5WZZj xNuL/8HrfDocsDy4R0W70uO1lyDdLhswHvKvi+detT64YVp8Gaz+F7aK9eoZu3KL 9ia27eT3UXryh1qTFWIeHP0g9e8UEHbGwdZQz0Nz2mAoI+c3daeGFhSQfjnjjv2B WQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15136303589438016660977586489598556222 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-27 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Exton' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chester County Library System' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Computer Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail1.ccls.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27323190389433955658114891725841203745905639247584346269753209447324661867337409612197151126270829746133641418486338135181984598898515164783057027815956168093860746705323872172504408449091715808025960666473929625551651049433895285424730893798776163181092042029720472638771407276917475570455532582892708751765299726077216478852656755959735336652949768623317142493308567585222717911948715308068559927795010747446070990036222181383763203570629020441528181035011133721785063756052977197205273151995015024967090412252013665565923381217751217082460906934341819326272156063693478269618367937687055621735807030637631937282393 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c7340e4414105150d3d2dac6b26045969dbcab0e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail1.ccls.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0047a0433876a44a15d34d93baef539c08fa3b697f9b46b1c0d6565ac7875e7258b7153768f7b78ea56ccef3e84f0a616c98535289c19d8b7ba10c0e6a661fb212fa113d18e2fc7e3a192d801e887faa5f0107b17aa9ac0c05b0756bc848762e4bdd51fae1431c59cfa99193de2660d5b1a9d8cec813e115fb4cd83ba39f4f864f101fe0e11087bcf352a8d6fae790896c5953a2a9a8d5a1804d84a2b336bbd2942d934af4d095eb3f295cf218660abb47125360e78f6fd8f554dcbd2eab38f52ad5dee702384f61f866ce00a59cf58dba7b4cb17d9d2e3475e1b63d584c9ddc900140807378f8d9d50479569432889080b7f21adc3440cea161faf308a5cae544