www.egencia.cn
- AMERICAN EXPRESS GLOBAL BUSINESS TRAVEL -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 04:38:55:15:a8:0a:36:b9:16:f6:93:b2:05:1a:97:99 was issued on by DigiCert Inc.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
AMERICAN EXPRESS GLOBAL BUSINESS TRAVEL
Organization:
AMERICAN EXPRESS GLOBAL BUSINESS TRAVEL
State / Province:
New York
Locality: New York
Country: US
Locality: New York
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:38:55:15:a8:0a:36:b9:16:f6:93:b2:05:1a:97:99Serial Number (int): 5609406327831166360624579756863166361
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: e3:2a:c9:54:0a:56:b3:26:f6:12:d0:39:6a:41:02:a8:1f:42:27:96
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 18:4b:a3:ea:1f:93:5b:43:26:63:46:df:17:88:56:b8:22:06:9c:7a
Fingerprint (sha256): b4:57:26:ee:ae:a0:e2:94:78:0e:f3:af:a8:b7:52:3c:62:3a:8b:bf:f9:ae:03:2e:85:56:c4:1a:54:fe:90:dd
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate www.egencia.cn
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.egencia.cn
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Agreement
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.egencia.cn
egencia.cn
mobile.egencia.cn
www.assets.egencia.cn
wwph.egencia.cn
assets.egencia.cn
egencia.cn
mobile.egencia.cn
www.assets.egencia.cn
wwph.egencia.cn
assets.egencia.cn
Other certificates including the domain name egencia.cn
(limited to 100 certificates)
www.egencia.com
www.egencia.eu
wwph.egencia.cn
www.egencia.com
www.egencia.com
lyncweb.expedia.biz
wwph.egencia.com
www.egencia.com
www.egencia.com
www.egencia.cn
cdn.egencia.com
www.egencia.com
egencia.ae
egencia.com
reporting.egencia.com
*.int-maui.sb.karmalab.net
www.egencia.com
egencia.com
wwwegenciacom.int-maui.sb.karmalab.net
www.egencia.com
www.egencia.com
www.egencia.cn
reporting.egencia.com
wwph.egencia.com
www.egencia.cn
www.egencia.com
www.egencia.cn
www.egencia.com
*.prod.egencia.cloud
www.egencia.com
egencia.eu
www.egencia.com
wwph.egencia.cn
www.egencia.cn
www.egencia.com
www.egencia.com
www.egencia.com
www.egencia.com
www.egencia.com
egencia.com
wwph.egencia.cn
www.egencia.com
*.int-maui.sb.karmalab.net
egencia.com
egencia.ae
www.egencia.com
www.egencia.cn
lyncweb.expedia.biz
www.egencia.cn
reporting.egencia.com
wwph.egencia.com
m.egencia.com
www.egencia.com
mobile.egencia.com
www.egencia.com
reporting.egencia.com
wwph.egencia.cn
www.egencia.cn
*.int-maui.sb.karmalab.net
wwph.egencia.com
*.prod.egencia.cloud
wwph.egencia.cn
www.egencia.com
egencia.ae
www.egencia.cn
www.egencia.com
www.egencia.com
*.prod.egencia.cloud
client-reports.egencia.com
egencia.com
www.egencia.com
wwph.egencia.cn
www.egencia.com
egencia.ae
www.egencia.com
*.int-maui.sb.karmalab.net
www.egencia.com
reporting.egencia.com
www.egencia.com
mail.egencia.eu
wwph.egencia.com
*.prod.egencia.cloud
wwph.egencia.cn
www.egencia.cn
*.int-maui.sb.karmalab.net
www.egencia.com
www.egencia.com
*.prod.egencia.cloud
lyncweb.expedia.biz
*.prod.egencia.cloud
www.egencia.com
www.egencia.com
www.egencia.com
www.egencia.com
mobile.egencia.com
www.egencia.com
www.egencia.com
egencia.eu
client-reports.egencia.com
www.egencia.cn
www.egencia.eu
wwph.egencia.cn
www.egencia.com
www.egencia.com
lyncweb.expedia.biz
wwph.egencia.com
www.egencia.com
www.egencia.com
www.egencia.cn
cdn.egencia.com
www.egencia.com
egencia.ae
egencia.com
reporting.egencia.com
*.int-maui.sb.karmalab.net
www.egencia.com
egencia.com
wwwegenciacom.int-maui.sb.karmalab.net
www.egencia.com
www.egencia.com
www.egencia.cn
reporting.egencia.com
wwph.egencia.com
www.egencia.cn
www.egencia.com
www.egencia.cn
www.egencia.com
*.prod.egencia.cloud
www.egencia.com
egencia.eu
www.egencia.com
wwph.egencia.cn
www.egencia.cn
www.egencia.com
www.egencia.com
www.egencia.com
www.egencia.com
www.egencia.com
egencia.com
wwph.egencia.cn
www.egencia.com
*.int-maui.sb.karmalab.net
egencia.com
egencia.ae
www.egencia.com
www.egencia.cn
lyncweb.expedia.biz
www.egencia.cn
reporting.egencia.com
wwph.egencia.com
m.egencia.com
www.egencia.com
mobile.egencia.com
www.egencia.com
reporting.egencia.com
wwph.egencia.cn
www.egencia.cn
*.int-maui.sb.karmalab.net
wwph.egencia.com
*.prod.egencia.cloud
wwph.egencia.cn
www.egencia.com
egencia.ae
www.egencia.cn
www.egencia.com
www.egencia.com
*.prod.egencia.cloud
client-reports.egencia.com
egencia.com
www.egencia.com
wwph.egencia.cn
www.egencia.com
egencia.ae
www.egencia.com
*.int-maui.sb.karmalab.net
www.egencia.com
reporting.egencia.com
www.egencia.com
mail.egencia.eu
wwph.egencia.com
*.prod.egencia.cloud
wwph.egencia.cn
www.egencia.cn
*.int-maui.sb.karmalab.net
www.egencia.com
www.egencia.com
*.prod.egencia.cloud
lyncweb.expedia.biz
*.prod.egencia.cloud
www.egencia.com
www.egencia.com
www.egencia.com
www.egencia.com
mobile.egencia.com
www.egencia.com
www.egencia.com
egencia.eu
client-reports.egencia.com
www.egencia.cn
Certificate
The complete raw certificate details for www.egencia.cn in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIQBDhVFagKNrkW9pOyBRqXmTANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yNDAxMTEwMDAwMDBa Fw0yNTAxMTAyMzU5NTlaMH4xCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9y azERMA8GA1UEBxMITmV3IFlvcmsxMDAuBgNVBAoTJ0FNRVJJQ0FOIEVYUFJFU1Mg R0xPQkFMIEJVU0lORVNTIFRSQVZFTDEXMBUGA1UEAxMOd3d3LmVnZW5jaWEuY24w WTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAATx2vBi1Z6Zq4pmr/OetvnjLQMe2aJ5 HVpP6WtlCzo7U11Z0I7h10yBFIeKjSNZPsZBRaCXQBhDtW9FdH/Bkfy2o4IDzDCC A8gwHwYDVR0jBBgwFoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0OBBYEFOMq yVQKVrMm9hLQOWpBAqgfQieWMHMGA1UdEQRsMGqCDnd3dy5lZ2VuY2lhLmNuggpl Z2VuY2lhLmNughFtb2JpbGUuZWdlbmNpYS5jboIVd3d3LmFzc2V0cy5lZ2VuY2lh LmNugg93d3BoLmVnZW5jaWEuY26CEWFzc2V0cy5lZ2VuY2lhLmNuMD4GA1UdIAQ3 MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQu Y29tL0NQUzAOBgNVHQ8BAf8EBAMCA4gwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMIGPBgNVHR8EgYcwgYQwQKA+oDyGOmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0 LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwQKA+oDyGOmh0 dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBD QTEtNC5jcmwwfwYIKwYBBQUHAQEEczBxMCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz cC5kaWdpY2VydC5jb20wSQYIKwYBBQUHMAKGPWh0dHA6Ly9jYWNlcnRzLmRpZ2lj ZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwDAYDVR0T AQH/BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcAzxFW7tUufK/zh1vZ aS6b6RpxZ0qwF+ysAdJbd87MOwgAAAGM+UipKgAABAMASDBGAiEA3ewfRL9+PVC/ EnXdvGIB7nUKqph/Z2XYS6uX4rKOMHcCIQC9Bj6lizYHYOKky3l9+WcUtklO5LaZ Scd7L/qtf8yfOQB2AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAAB jPlIqRMAAAQDAEcwRQIgG4hXzNvLMUNpkruMYmzRUaP6BMP/eNKMNvgsVVXtQeYC IQDUj8W1J7FkfZZP3LnSBWjzigOwAxXj/rG41c4iSEnfyAB2AH1ZHhLheCp7HGFn fF79+NCHXBSgTpWeuQMv2Q6MLnm4AAABjPlIqO4AAAQDAEcwRQIhAOCxHNaF/zpQ NXMWovKt+rpPax3du2/EssbxjVS8sox5AiA0J40r1w1SIC9MdUY9JWkuvCnmacLx UYoUPZaD0vtLjjANBgkqhkiG9w0BAQsFAAOCAQEAL7P/34vwYSxzMp3uw3o9f9t0 igmaaQxpXvTOnFSdtWGr2olLM1GrAWh0RfFcv8PuqvoaztOxIF82c/5n3OG3LQE0 aPueeozLlyFL5Uppc/1pa1rOMxhSWdZ6MOSqe5h0/ysh1R14h+SJ6ZLIUi+I+/LK YJjxsttvQNCL03l5zlysBjXpLhgppe/UbhUapp42MH4iiRZ14/c7QKK68QZA+ZKr xTQeUiaiuN3yDwWxLApEvBuFR3+1dROg9gYwqZc+VpBTf4y+n+6cK2Q42skkdZmN KrUjYwapte1C/miyR+ooUPbMjwyFZv5ajZDEFd6Vr1gdW4GTCt/+AsRBNuE6Cw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE8drwYtWemauKZq/znrb54y0DHtmi eR1aT+lrZQs6O1NdWdCO4ddMgRSHio0jWT7GQUWgl0AYQ7VvRXR/wZH8tg== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5609406327831166360624579756863166361 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AMERICAN EXPRESS GLOBAL BUSINESS TRAVEL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.egencia.cn' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004f1daf062d59e99ab8a66aff39eb6f9e32d031ed9a2791d5a4fe96b650b3a3b535d59d08ee1d74c8114878a8d23593ec64145a097401843b56f45747fc191fcb6 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e32ac9540a56b326f612d0396a4102a81f422796 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.egencia.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assets.egencia.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwph.egencia.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.egencia.cn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 0388 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 002fb3ffdf8bf0612c73329deec37a3d7fdb748a099a690c695ef4ce9c549db561abda894b3351ab01687445f15cbfc3eeaafa1aced3b1205f3673fe67dce1b72d013468fb9e7a8ccb97214be54a6973fd696b5ace33185259d67a30e4aa7b9874ff2b21d51d7887e489e992c8522f88fbf2ca6098f1b2db6f40d08bd37979ce5cac0635e92e1829a5efd46e151aa69e36307e22891675e3f73b40a2baf10640f992abc5341e5226a2b8ddf20f05b12c0a44bc1b85477fb57513a0f60630a9973e5690537f8cbe9fee9c2b6438dac92475998d2ab5236306a9b5ed42fe68b247ea2850f6cc8f0c8566fe5a8d90c415de95af581d5b81930adffe02c44136e13a0b