*.brazos.org
- Brazos River Authority -
Issued by DigiCert SHA2 High Assurance Server CA
About this certificate
This digital certificate with serial number 0d:a0:7b:a9:71:2c:16:ca:bb:19:3d:ea:ec:63:fc:b2 was issued on by DigiCert Inc.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Brazos River Authority
Organization:
Brazos River Authority
Organization unit: IT
Organization unit: IT
State / Province:
Texas
Locality: Waco
Country: US
Locality: Waco
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:a0:7b:a9:71:2c:16:ca:bb:19:3d:ea:ec:63:fc:b2Serial Number (int): 18113239603535299312111407526974848178
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 12:a0:8a:8a:06:c3:4f:15:8d:34:13:6a:db:23:e0:9a:0c:9c:ff:7f
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b
Fingerprint (sha1): 81:c8:c5:12:0e:5a:82:d5:d0:ee:5a:01:2d:5d:fb:d9:e4:eb:09:c1
Fingerprint (sha256): be:6c:94:45:a2:53:72:51:42:dc:b6:26:09:7c:05:84:2c:35:ea:64:81:61:9a:0f:9e:e0:f6:f2:46:e2:41:e1
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl
Check the revocation status for certificate *.brazos.org
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.brazos.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.brazos.org
crpdata.brazos.org
brazos.org
crpdata.brazos.org
brazos.org
Other certificates including the domain name brazos.org
(limited to 100 certificates)
*.brazos.org
*.brazos.org
tickets.ec-comptech.com
*.brazos.org
webmail.brazos.org
webmail.brazos.org
*.brazos.org
webmail.brazos.org
helpdesk.brazos.org
helpdesk.porticopm.com
www.brazos.org
sft.brazos.org
sip.brazos.org
clfhelpdesk.clf.uk
*.brazos.org
*.brazos.org
*.brazos.org
mail.brazos.org
www.brazos.org
helpdesk.porticopm.com
*.brazos.org
helpdesk.brazos.org
www.brazos.org
*.brazos.org
www.brazos.org
helpdesk.brazos.org
directaccess.brazos.org
sip.brazos.org
*.brazos.org
helpdesk.porticopm.com
*.brazos.org
*.brazos.org
rdgw-srv.brazos.org
mail.brazos.org
*.brazos.org
helpdesk.brazos.org
tickets.ec-comptech.com
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
helpdesk.porticopm.com
*.brazos.org
*.brazos.org
*.brazos.org
sip.brazos.org
www.brazos.org
*.brazos.org
tickets.ec-comptech.com
*.brazos.org
mail2.brazos.org
tickets.ec-comptech.com
clfhelpdesk.clf.uk
www.brazos.org
mail.brazos.org
directaccess.brazos.org
*.brazos.org
sip.brazos.org
clfhelpdesk.clf.uk
clfhelpdesk.clf.uk
www.brazos.org
webmail.brazos.org
rpad1.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
legacy.brazos.org
*.brazos.org
tickets.ec-comptech.com
*.brazos.org
webmail.brazos.org
webmail.brazos.org
*.brazos.org
webmail.brazos.org
helpdesk.brazos.org
helpdesk.porticopm.com
www.brazos.org
sft.brazos.org
sip.brazos.org
clfhelpdesk.clf.uk
*.brazos.org
*.brazos.org
*.brazos.org
mail.brazos.org
www.brazos.org
helpdesk.porticopm.com
*.brazos.org
helpdesk.brazos.org
www.brazos.org
*.brazos.org
www.brazos.org
helpdesk.brazos.org
directaccess.brazos.org
sip.brazos.org
*.brazos.org
helpdesk.porticopm.com
*.brazos.org
*.brazos.org
rdgw-srv.brazos.org
mail.brazos.org
*.brazos.org
helpdesk.brazos.org
tickets.ec-comptech.com
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
helpdesk.porticopm.com
*.brazos.org
*.brazos.org
*.brazos.org
sip.brazos.org
www.brazos.org
*.brazos.org
tickets.ec-comptech.com
*.brazos.org
mail2.brazos.org
tickets.ec-comptech.com
clfhelpdesk.clf.uk
www.brazos.org
mail.brazos.org
directaccess.brazos.org
*.brazos.org
sip.brazos.org
clfhelpdesk.clf.uk
clfhelpdesk.clf.uk
www.brazos.org
webmail.brazos.org
rpad1.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
legacy.brazos.org
Certificate
The complete raw certificate details for *.brazos.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH9DCCBtygAwIBAgIQDaB7qXEsFsq7GT3q7GP8sjANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xOTAzMjgwMDAwMDBaFw0yMTA2MjUxMjAwMDBa MHExCzAJBgNVBAYTAlVTMQ4wDAYDVQQIEwVUZXhhczENMAsGA1UEBxMEV2FjbzEf MB0GA1UEChMWQnJhem9zIFJpdmVyIEF1dGhvcml0eTELMAkGA1UECxMCSVQxFTAT BgNVBAMMDCouYnJhem9zLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC ggIBAIqYgZmPSgzFex07+K0k7cTE82P3ii+ALhH3J7m/dN5gL0BmXgehIJeeD256 mLySf1M50uWPghPW2tWDDIZAo0x68rKLSQ3vJkDs4fkqfPd8GY/0zgyv0dVMCR51 Xkw+iLXeBeSuDQ9CHEqnAvR0x57dQftYbmy/4VJeOhkBIhz5jxLf48DnsXpJJBLt aDkeHpu9axINZSBE/u0iPf0d2s3n5z50f96784ToZEn04ez4syrIQLYXTuGHTXcU ncBmVdNDLmETkBiM+bK5naGiBInBKYRJCx8L2BdTG3XgGnTOUPHjVtvUqY3QsWnY ziWzmSZR/UDEgBCdfG1qcXPt/fKw2mrNgydNs1F1AxS4lQ+jYazSKEKrSuYL0OQ3 qNGog2McHUxpLwh3TGawOPuS2Sy0FuHApKILyEvqJ7qSPyW1UTVKkvvr4sPaBzRl 54V9gT0GGBpW+zSc+6Rpf/XvZXR7ldQO44DYPYV0RDMPbvpYwOK9rBzQ20oW4ky0 AxcR9oqG4XCvgHDpk3KtLoH3ps+Nm1WGA+XwgvzGKsUgyaamEXg4NVShZe3eUUa/ S9oAtPaR9mFad3Q91Usu5+Cef7Q6mK49gdZfS7wvnYxOdQftQxjPFLVLT9cdKmEv Sa1SSLK0qm+UKIwbrkkd4hfRKT25wp0j+1g0U72cUnJNdwqZAgMBAAGjggOHMIID gzAfBgNVHSMEGDAWgBRRaP+QrwIHdTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQUEqCK igbDTxWNNBNq2yPgmgyc/38wNwYDVR0RBDAwLoIMKi5icmF6b3Mub3JnghJjcnBk YXRhLmJyYXpvcy5vcmeCCmJyYXpvcy5vcmcwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5odHRw Oi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYuY3JsMDSgMqAw hi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYuY3Js MEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMIGDBggrBgEFBQcBAQR3MHUw JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBNBggrBgEFBQcw AoZBaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkhpZ2hB c3N1cmFuY2VTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkC BAIEggFuBIIBagFoAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAA AAFpxfkZxgAABAMARzBFAiAByjTuji7a1w1smQNJjTOkfwR8UfY3Gf1U44oGb8jx eQIhAJ2nJ7QA+dogoh2Bw6JYqeJgOnFruyCwdmUwKkjFn2SNAHYAh3W/51l8+IxD mV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFpxfkazwAABAMARzBFAiEA+qbyUWvq 6/x2A+UB72OW3kHvFPKHpxfb4UHkn6JeV8oCIHPp5rUCUrD2UzQgcfVi3STrAEx3 vTglz97o5IluyhUBAHYARJRlLrDuzq/EQAfYqP4owNrmgr7YyzG1P9MzlrW2gagA AAFpxfkZPgAABAMARzBFAiAsnmce209B80/UixaPM9ehIedgX1JDy1hcsLgpjU/K kwIhALmEaRwSp6ATR2kiQWlzNU1lld1Lg+I40IfyvsiobWJzMA0GCSqGSIb3DQEB CwUAA4IBAQBmVektCSHhxJ+SdIhuSwabn3INHmJUXidwW0BOB6qvv69DTQ3PVgM7 cLWGVInMi8kWfYsS2xuwaaGbQdpN5f+mWEEWIOKmv86K8yiC89mlc6Nx/4XM1dbI ONEJv7szR0Yq+XW86FhtRYjA5lD4h4oYjw8+wNtysZOicYvRuwgn+DkYTRCfUvt9 KhHeMnFLZ454H6LlxlANwFhJ9ouUpuSPFjfuY/iGs3kwuUGphDJjaNoSO0XyfVKx IN3XhA9DyqTCEQ/91zdp3fy2fHkCvACaVCSs87r+c4sFPEMcdiIsGJjHK7uSSD3Y AMJGrHFvwtWnTqdaUhHonE37PW63Vjr9 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAipiBmY9KDMV7HTv4rSTt xMTzY/eKL4AuEfcnub903mAvQGZeB6Egl54PbnqYvJJ/UznS5Y+CE9ba1YMMhkCj THrysotJDe8mQOzh+Sp893wZj/TODK/R1UwJHnVeTD6Itd4F5K4ND0IcSqcC9HTH nt1B+1hubL/hUl46GQEiHPmPEt/jwOexekkkEu1oOR4em71rEg1lIET+7SI9/R3a zefnPnR/3rvzhOhkSfTh7PizKshAthdO4YdNdxSdwGZV00MuYROQGIz5srmdoaIE icEphEkLHwvYF1MbdeAadM5Q8eNW29SpjdCxadjOJbOZJlH9QMSAEJ18bWpxc+39 8rDaas2DJ02zUXUDFLiVD6NhrNIoQqtK5gvQ5Deo0aiDYxwdTGkvCHdMZrA4+5LZ LLQW4cCkogvIS+onupI/JbVRNUqS++viw9oHNGXnhX2BPQYYGlb7NJz7pGl/9e9l dHuV1A7jgNg9hXREMw9u+ljA4r2sHNDbShbiTLQDFxH2iobhcK+AcOmTcq0ugfem z42bVYYD5fCC/MYqxSDJpqYReDg1VKFl7d5RRr9L2gC09pH2YVp3dD3VSy7n4J5/ tDqYrj2B1l9LvC+djE51B+1DGM8UtUtP1x0qYS9JrVJIsrSqb5QojBuuSR3iF9Ep PbnCnSP7WDRTvZxSck13CpkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18113239603535299312111407526974848178 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-25 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brazos River Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.brazos.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 565421237697876254297260912444365262649757514052639694715471616483355128971152067986689126182070159455673381680517507534328581954032701409453680282292253075848776157167631821996510214954348651735310374160990746024551149696557249376442980969169561781226967238960468301606396259478680742635766492810662751773790124468923308448610829553175190782622306084463974874291808733667429383132229093358238846269661683144941563833362248322134443943938529680464092093342642886078697902484527857741923798194916735792776045996299825104047454364717282633720284730006160214384345245958004185604670272052715423620420787790586121068191564070327610279163689104963783910299878284607047392227025480130690417902289214765219907562080135894615561593646227776071922429823490183546767670021832768613249223880111897976442626632678991884811647115860184267389302900037734667074026357386530661713697858056171300634307408187523970755751243978610754443925671441493571429814035582660989748319725940367148959304525357558494142613116598618475130263731673745136657696274696643799621652618878982869224551786978378755094043211890152909474679169177347060252522192767949080457757291465819007493490017432906040225370013139851366718321365413367452690109716340339343199114300057 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 12a08a8a06c34f158d34136adb23e09a0c9cff7f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brazos.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crpdata.brazos.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazos.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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