mail.crl.edu
- The Center For Research Libraries -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 06:dc:c6:62:4e:79:25:77:c9:5e:72:98:41:50:aa:9d was issued on by DigiCert Inc.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
The Center For Research Libraries
Organization:
The Center For Research Libraries
State / Province:
Illinois
Locality: Chicago
Country: US
Locality: Chicago
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:dc:c6:62:4e:79:25:77:c9:5e:72:98:41:50:aa:9dSerial Number (int): 9121696989334894471819434763844889245
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 33:68:47:93:a4:66:3d:b0:f2:a8:34:5e:58:0b:2c:79:ed:e0:12:82
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 19:80:af:7e:e0:be:9a:8b:c7:95:c9:13:3c:17:45:7d:ca:a9:51:a5
Fingerprint (sha256): c1:15:ae:d7:f0:4a:bc:3e:51:0d:e5:0d:90:70:d1:99:1d:f7:45:b9:2d:1d:4c:63:a5:38:c3:c2:48:00:b2:ee
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl
Check the revocation status for certificate mail.crl.edu
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.crl.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.crl.edu
illiad.crl.edu
mylogin.crl.edu
edesiderata.crl.edu
workspace.crl.edu
dds.crl.edu
gcollections.crl.edu
mail.crl.edu
illiad.crl.edu
mylogin.crl.edu
edesiderata.crl.edu
workspace.crl.edu
dds.crl.edu
gcollections.crl.edu
mail.crl.edu
Other certificates including the domain name crl.edu
(limited to 100 certificates)
streetfilms.org
mail.crl.edu
gcollections.crl.edu
streetfilms.org
mylogin.crl.edu
www.crl.edu
mail.crl.edu
trailguides.crl.edu
edesiderata.crl.edu
trailguides.crl.edu
dds.crl.edu
trailguides.crl.edu
mail.crl.edu
streetfilms.org
streetfilms.org
mylogin.crl.edu
streetfilms.org
liblicense.crl.edu
trailguides.crl.edu
trailguides.crl.edu
liblicense.crl.edu
*.crl.edu
www-apps.crl.edu
www.crl.edu
illiad.crl.edu
workspace.crl.edu
crl.edu
*.crl.edu
afrinul.crl.edu
*.crl.edu
*.crl.edu
trailguides.crl.edu
mail.crl.edu
crl.edu
mail.crl.edu
edesiderata.crl.edu
trailguides.crl.edu
gcollections.crl.edu
trailguides.crl.edu
workspace.crl.edu
crl.edu
edesiderata.crl.edu
gcollections.crl.edu
crl.edu
streetfilms.org
streetfilms.org
mail.crl.edu
*.crl.edu
streetfilms.org
crl.edu
www.crl.edu
edesiderata.crl.edu
crl.edu
edesiderata.crl.edu
crl.edu
www-apps.crl.edu
dds.crl.edu
dds.crl.edu
adat.crl.edu
trailguides.crl.edu
www.crl.edu
dds.crl.edu
trailguides.crl.edu
mail.crl.edu
*.crl.edu
crl.edu
illiad.crl.edu
dds.crl.edu
*.crl.edu
edesiderata.crl.edu
trailguides.crl.edu
www.crl.edu
crl.edu
mail.crl.edu
edesiderata.crl.edu
trailguides.crl.edu
streetfilms.org
trailguides.crl.edu
edesiderata.crl.edu
edesiderata.crl.edu
*.crl.edu
liblicense.crl.edu
mail.crl.edu
gcollections.crl.edu
streetfilms.org
mylogin.crl.edu
www.crl.edu
mail.crl.edu
trailguides.crl.edu
edesiderata.crl.edu
trailguides.crl.edu
dds.crl.edu
trailguides.crl.edu
mail.crl.edu
streetfilms.org
streetfilms.org
mylogin.crl.edu
streetfilms.org
liblicense.crl.edu
trailguides.crl.edu
trailguides.crl.edu
liblicense.crl.edu
*.crl.edu
www-apps.crl.edu
www.crl.edu
illiad.crl.edu
workspace.crl.edu
crl.edu
*.crl.edu
afrinul.crl.edu
*.crl.edu
*.crl.edu
trailguides.crl.edu
mail.crl.edu
crl.edu
mail.crl.edu
edesiderata.crl.edu
trailguides.crl.edu
gcollections.crl.edu
trailguides.crl.edu
workspace.crl.edu
crl.edu
edesiderata.crl.edu
gcollections.crl.edu
crl.edu
streetfilms.org
streetfilms.org
mail.crl.edu
*.crl.edu
streetfilms.org
crl.edu
www.crl.edu
edesiderata.crl.edu
crl.edu
edesiderata.crl.edu
crl.edu
www-apps.crl.edu
dds.crl.edu
dds.crl.edu
adat.crl.edu
trailguides.crl.edu
www.crl.edu
dds.crl.edu
trailguides.crl.edu
mail.crl.edu
*.crl.edu
crl.edu
illiad.crl.edu
dds.crl.edu
*.crl.edu
edesiderata.crl.edu
trailguides.crl.edu
www.crl.edu
crl.edu
mail.crl.edu
edesiderata.crl.edu
trailguides.crl.edu
streetfilms.org
trailguides.crl.edu
edesiderata.crl.edu
edesiderata.crl.edu
*.crl.edu
liblicense.crl.edu
Certificate
The complete raw certificate details for mail.crl.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIQBtzGYk55JXfJXnKYQVCqnTANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTcxMjA2MDAwMDAwWhcN MjAwMTEwMTIwMDAwWjB1MQswCQYDVQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMx EDAOBgNVBAcTB0NoaWNhZ28xKjAoBgNVBAoTIVRoZSBDZW50ZXIgRm9yIFJlc2Vh cmNoIExpYnJhcmllczEVMBMGA1UEAxMMbWFpbC5jcmwuZWR1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lk1BJHVWDZPoD3ySS+MW177RT4JjK2Dnjrc 40BjXsEzicJUuWII9XldeAttU5eSQgOt501spHhAR8vWyhjZPgmJ0bV7rTvy4yXu Kef58xOfmn4YlWSLug21KNCPzwWZyjKPUDc7g9t9yM6bkGVbH7JzVGSRwGv51KWn 5ljqKfuMFSt2j3p2F2mUtFuzRfxz8q6xgelY8E+9snkfx19fjlNe1vrPZsLie3fw SzHTVMU9sI8IwbOPYoMMCLjF79oQ97+TjZrDltuO/dFuSiXJ0/F/CESNFCMFbGx0 5/prsuq+0ejhJBeFPG6MPQTmE7zE02np4FqQ8rC7ZRnOP2jOhwIDAQABo4ICTzCC AkswHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFDNo R5OkZj2w8qg0XlgLLHnt4BKCMIGSBgNVHREEgYowgYeCC3d3dy5jcmwuZWR1gg5p bGxpYWQuY3JsLmVkdYIPbXlsb2dpbi5jcmwuZWR1ghNlZGVzaWRlcmF0YS5jcmwu ZWR1ghF3b3Jrc3BhY2UuY3JsLmVkdYILZGRzLmNybC5lZHWCFGdjb2xsZWN0aW9u cy5jcmwuZWR1ggxtYWlsLmNybC5lZHUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8v Y3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0cDov L2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3 BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQu Y29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhho dHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNl cnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQw DAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAQEAHWkD91OshI6OUOmP5eaM bt6sclbAmTANZy44kFUTYtjbVUORm6V0a1gAwR3Ve8ZGZ2XIKt8EcYSnqp4/IMVW QWK5unM+J3nyaCfof3Uel0oUf3SxtLSlEYmrh+CNcodw8mqQxLGrp2S8Cxx7/GCB hDqagUHKo87sxJeVXIAIx7yT6AiOWAl0Q+2575UBNbOSjjUcWYIrkPCJ+aO80Oea vq1TO64m/yE5l/efPoJjgt8Sz5XTj8RNC4Fh52U8k/iEnUZcGAthUhoskwBV5DBO LxevF7z266Xv8O40OMhCJCFFDZ0cU7zVcvfW+KuDj0q7yDTqwEfRpIy+SuGNJUWx hw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lk1BJHVWDZPoD3ySS+M W177RT4JjK2Dnjrc40BjXsEzicJUuWII9XldeAttU5eSQgOt501spHhAR8vWyhjZ PgmJ0bV7rTvy4yXuKef58xOfmn4YlWSLug21KNCPzwWZyjKPUDc7g9t9yM6bkGVb H7JzVGSRwGv51KWn5ljqKfuMFSt2j3p2F2mUtFuzRfxz8q6xgelY8E+9snkfx19f jlNe1vrPZsLie3fwSzHTVMU9sI8IwbOPYoMMCLjF79oQ97+TjZrDltuO/dFuSiXJ 0/F/CESNFCMFbGx05/prsuq+0ejhJBeFPG6MPQTmE7zE02np4FqQ8rC7ZRnOP2jO hwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9121696989334894471819434763844889245 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Center For Research Libraries' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.crl.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30088706242931077088427952162643505947842023771930801620343005182042093089959113534083656959878027113572373283506251480248275416742205734580824140728988298710134728754888300187025843994678252718752385271783014831245916196551601070763138505761413921167601798542948237340978509701119080296086733125437855163690293732565712607272215492207779870452721811519053144114786211499843670479229045872939236620993491049145913408778759640460692570863421831405834614389671558562407437424109734574136406142560873583030412128227353680106670557449761703415917749041223905463936098334969653818181504379087385259645242126037033171865223 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 33684793a4663db0f2a8345e580b2c79ede01282 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (138 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crl.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illiad.crl.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylogin.crl.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edesiderata.crl.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workspace.crl.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dds.crl.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcollections.crl.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.crl.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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