b-0.hexagon-cdn.com
- Sift Science, Inc. -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0b:05:fa:09:1c:c1:5c:a5:68:b9:e9:5f:5e:9d:de:38 was issued on by DigiCert Inc.
With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Sift Science, Inc.
Organization:
Sift Science, Inc.
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:05:fa:09:1c:c1:5c:a5:68:b9:e9:5f:5e:9d:de:38Serial Number (int): 14652540762280464753228356070349332024
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 61:c7:a2:98:48:56:9f:57:6b:34:6f:39:18:20:6c:14:47:cc:59:24
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 32:82:a0:18:83:a3:6e:e9:61:c9:06:0d:82:f4:d6:00:8b:aa:1f:44
Fingerprint (sha256): d6:38:85:59:99:79:81:a0:cb:79:65:5a:b1:0d:e2:ca:1a:d7:fe:9b:d2:6d:a4:1e:34:8c:e3:70:e9:35:36:9a
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl
Check the revocation status for certificate b-0.hexagon-cdn.com
17
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for b-0.hexagon-cdn.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
b-0.hexagon-cdn.com
images.adaptivecheckout.com
camel.headfarming.com
assets.experticity.com
sift.opentable.com
sift.opentable.ie
sift.opentable.nl
sift.opentable.com.au
ss.musthird.com
ss.musthird.cn
insight.blockchain.com
prevention.nordvpn.com
sift.opentable.co.uk
sift.opentable.jp
sift.opentable.com.mx
sift.opentable.de
siftjs.razorpay.com
images.adaptivecheckout.com
camel.headfarming.com
assets.experticity.com
sift.opentable.com
sift.opentable.ie
sift.opentable.nl
sift.opentable.com.au
ss.musthird.com
ss.musthird.cn
insight.blockchain.com
prevention.nordvpn.com
sift.opentable.co.uk
sift.opentable.jp
sift.opentable.com.mx
sift.opentable.de
siftjs.razorpay.com
Other certificates including the domain name hexagon-cdn.com
(limited to 100 certificates)
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.prod.gcp.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.prod.gcp.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.prod.gcp.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.prod.gcp.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
Certificate
The complete raw certificate details for b-0.hexagon-cdn.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH+DCCBuCgAwIBAgIQCwX6CRzBXKVouelfXp3eODANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjEwOTE2MDAwMDAwWhcN MjIwNDA4MjM1OTU5WjB1MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p YTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEbMBkGA1UEChMSU2lmdCBTY2llbmNl LCBJbmMuMRwwGgYDVQQDExNiLTAuaGV4YWdvbi1jZG4uY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjDrbAbmgDEJ9PQub6TFgs/qYT1CX1zK3WOl rtL+/FmDRw0TUWnfzXApiqGbOuXeo+LheQDUAC8+Ub24SybilfYm1iyGHCib5iTS NNPhASQo6/G2/Kuug6MXNGuZ/rVM7s9VmFIQnCzpfMpXxDyTbDtmRsdooR7sr8xD ci6dK3zA97E+9fYrWUl8NEkQL22j1vWhV2nNcF1EYY328EdYb1WCO0fBoY2PWVI5 8eZyeHnUg4nqohwlbbxMDSqhLsl82MVjkRItSIS11CNUtiLsIFfBWzZ5FrG5DXh6 7jI64vIHY0gWvLJwY/uzAhLhON5NPsoMX0yLYCTOFjWDtAdaVwIDAQABo4IEqjCC BKYwHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFGHH ophIVp9XazRvORggbBRHzFkkMIIBeAYDVR0RBIIBbzCCAWuCE2ItMC5oZXhhZ29u LWNkbi5jb22CG2ltYWdlcy5hZGFwdGl2ZWNoZWNrb3V0LmNvbYIVY2FtZWwuaGVh ZGZhcm1pbmcuY29tghZhc3NldHMuZXhwZXJ0aWNpdHkuY29tghJzaWZ0Lm9wZW50 YWJsZS5jb22CEXNpZnQub3BlbnRhYmxlLmllghFzaWZ0Lm9wZW50YWJsZS5ubIIV c2lmdC5vcGVudGFibGUuY29tLmF1gg9zcy5tdXN0aGlyZC5jb22CDnNzLm11c3Ro aXJkLmNughZpbnNpZ2h0LmJsb2NrY2hhaW4uY29tghZwcmV2ZW50aW9uLm5vcmR2 cG4uY29tghRzaWZ0Lm9wZW50YWJsZS5jby51a4IRc2lmdC5vcGVudGFibGUuanCC FXNpZnQub3BlbnRhYmxlLmNvbS5teIIRc2lmdC5vcGVudGFibGUuZGWCE3NpZnRq cy5yYXpvcnBheS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdp Y2VydC5jb20vc3NjYS1zaGEyLWc3LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGln aWNlcnQuY29tL3NzY2Etc2hhMi1nNy5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIw KTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHwGCCsG AQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t MEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl cnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwggF+BgorBgEE AdZ5AgQCBIIBbgSCAWoBaAB2ACl5vvCeOTkh8FZzn2Old+W+V32cYAr4+U1dJlwl XceEAAABe/CY5O4AAAQDAEcwRQIhANMctMVY22og/y69QuYldzHlYep82yifOF6I X4427rSaAiBbmRtARSQtltTuKzV36Z8E8t1Q2LCnzHxBz0fMzI4wsAB2AFGjsPX9 AXmcVm24N3iPDKR6zBsny/eeiEKaDf7UiwXlAAABe/CY5UkAAAQDAEcwRQIhAPh2 c0FPaZOtbEv+imEcccOKpCxC0QwZvYsLre8kHFZmAiAGbeAfStIv84vWn3KHfeqB j04uDaSXU7CrpOEdqdvvPAB2AEHIyrHfIkZKEMahOglCh15OMYsbA+vrS8do8JBi lgb2AAABe/CY5SAAAAQDAEcwRQIhAKp1bVvqepuMgEpfqRcjxicB6m14f6ci/E62 PmvP1wBPAiB1xKvFXGkm6QQALLBKgSFG0iijquh613JYFqn1l7inWTANBgkqhkiG 9w0BAQsFAAOCAQEAIb5FHVf7BmUIbpYd3xBGcjG2XgiK4BIEa/gQfHa/6SUUu31A 2SOMFsBWvTxgTrfk5I4Bfk6hxRsS4+2EFoZzWFQvh4MFD0Q0VeWNkeP8NCGng5fO E6GsZtJL6cnd/8u5WAJtuet/zt6o7Q7rYc20cO0Ym6iCKprrSHOgi9rcRFuyq8xk aAa4ukz+ofV4ZC8ZKmiggnFq2I+Um505Rb1Ey26eRpj5sHqAtY2mH1kqnWCidnaC 3TFHZWFyih/imWbabP2KkFEVr0QXXcuIO1rJv3YgMdSGBtq63KL5oy12Jmudid1P TsS0IBWUtxlmjLhLfzKTgMSMb5YyEHuAivu7Vw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjDrbAbmgDEJ9PQub6TF gs/qYT1CX1zK3WOlrtL+/FmDRw0TUWnfzXApiqGbOuXeo+LheQDUAC8+Ub24Sybi lfYm1iyGHCib5iTSNNPhASQo6/G2/Kuug6MXNGuZ/rVM7s9VmFIQnCzpfMpXxDyT bDtmRsdooR7sr8xDci6dK3zA97E+9fYrWUl8NEkQL22j1vWhV2nNcF1EYY328EdY b1WCO0fBoY2PWVI58eZyeHnUg4nqohwlbbxMDSqhLsl82MVjkRItSIS11CNUtiLs IFfBWzZ5FrG5DXh67jI64vIHY0gWvLJwY/uzAhLhON5NPsoMX0yLYCTOFjWDtAda VwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14652540762280464753228356070349332024 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sift Science, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'b-0.hexagon-cdn.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26029213985287841492695171720415799278338338201227608948635451900683065133038128220963876950315492964246329989226930375986345476934998751634088635484072176574489713700655585682761785770212892171579694719446751579242860925813336071305342886508994949395402178039700384063794211817720615661668181340400103793527828950536351465909296135079855803740884917250457591868722460760752431209293537205750177119380300974290398993187045860279203604053839277017081136064424674915016402056445293842870451340900168845606047172430598434693788330503897985688716341930692648955873214477902988359619276011919897711773398735520774859741783 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 61c7a29848569f576b346f3918206c1447cc5924 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-0.hexagon-cdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.adaptivecheckout.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camel.headfarming.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.experticity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sift.opentable.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sift.opentable.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sift.opentable.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sift.opentable.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss.musthird.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss.musthird.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.blockchain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prevention.nordvpn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sift.opentable.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sift.opentable.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sift.opentable.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sift.opentable.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siftjs.razorpay.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0021be451d57fb0665086e961ddf10467231b65e088ae012046bf8107c76bfe92514bb7d40d9238c16c056bd3c604eb7e4e48e017e4ea1c51b12e3ed8416867358542f8783050f443455e58d91e3fc3421a78397ce13a1ac66d24be9c9ddffcbb958026db9eb7fcedea8ed0eeb61cdb470ed189ba8822a9aeb4873a08bdadc445bb2abcc646806b8ba4cfea1f578642f192a68a082716ad88f949b9d3945bd44cb6e9e4698f9b07a80b58da61f592a9d60a2767682dd31476561728a1fe29966da6cfd8a905115af44175dcb883b5ac9bf762031d48606dabadca2f9a32d76266b9d89dd4f4ec4b4201594b719668cb84b7f329380c48c6f9632107b808afbbb57