mavent.com
- Ellie Mae Inc. -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0b:7b:e1:78:63:57:66:37:14:83:dc:d3:53:85:41:bc was issued on by DigiCert Inc.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Ellie Mae Inc.
Organization:
Ellie Mae Inc.
State / Province:
California
Locality: Pleasanton
Country: US
Locality: Pleasanton
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:7b:e1:78:63:57:66:37:14:83:dc:d3:53:85:41:bcSerial Number (int): 15264733547518856953867107271086260668
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 1a:4d:59:cb:cb:a0:e4:a5:7e:fa:f0:e7:53:b3:c1:e2:9b:60:1f:4c
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 5a:e4:f3:5e:6d:e3:be:3f:c5:f1:00:bf:24:fe:f3:18:2a:c1:6b:08
Fingerprint (sha256): e7:2a:87:36:f7:86:70:ca:d5:ea:45:ca:4e:f7:38:41:79:e4:d3:6d:59:06:93:7a:97:cb:0a:17:cf:14:91:c1
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6-1.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6-1.crl
Check the revocation status for certificate mavent.com
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mavent.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
service.elliemae.com
portalui.data.elliemae.com
portalapi.data.elliemae.com
portal1.data.elliemae.com
portal.data.elliemae.com
pilot01.mavent.com
mavent.com
dsconcept.datalake.ellielabs.com
dcui-customer.qa.datalake.rd.elliemae.io
dcui-customer.int2.datalake.rd.elliemae.io
dcui-customer.dsqa.datalake.rd.elliemae.io
dcui-customer.dsint2.datalake.rd.elliemae.io
comply07bcptest.mavent.com
comply07.mavent.com
comply06bcptest.mavent.com
comply06.mavent.com
comply05bcptest.mavent.com
comply05.mavent.com
comply01bcptest.mavent.com
comply01.mavent.com
portalui.data.elliemae.com
portalapi.data.elliemae.com
portal1.data.elliemae.com
portal.data.elliemae.com
pilot01.mavent.com
mavent.com
dsconcept.datalake.ellielabs.com
dcui-customer.qa.datalake.rd.elliemae.io
dcui-customer.int2.datalake.rd.elliemae.io
dcui-customer.dsqa.datalake.rd.elliemae.io
dcui-customer.dsint2.datalake.rd.elliemae.io
comply07bcptest.mavent.com
comply07.mavent.com
comply06bcptest.mavent.com
comply06.mavent.com
comply05bcptest.mavent.com
comply05.mavent.com
comply01bcptest.mavent.com
comply01.mavent.com
Other certificates including the domain name mavent.com
(limited to 100 certificates)
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
*.mavent.com
*.mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
*.mavent.com
mavent.com
*.mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
*.mavent.com
*.mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
*.mavent.com
mavent.com
*.mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
*.mavent.com
mavent.com
mavent.com
mavent.com
mavent.com
Certificate
The complete raw certificate details for mavent.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH8TCCBtmgAwIBAgIQC3vheGNXZjcUg9zTU4VBvDANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjIwMjEzMDAwMDAwWhcN MjMwMjE1MjM1OTU5WjBlMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p YTETMBEGA1UEBxMKUGxlYXNhbnRvbjEXMBUGA1UEChMORWxsaWUgTWFlIEluYy4x EzARBgNVBAMTCm1hdmVudC5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQ4 EKuL55dfO1NDu83I3Mja1ofG2nDoKjT80W8vqWZfoQafuVm1S8w19PHys+5GD5W6 BCIPinCZ0uW+o12dtrWUo4IFfjCCBXowHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeN Rji0LOHG2eIwHQYDVR0OBBYEFBpNWcvLoOSlfvrw51OzweKbYB9MMIICRwYDVR0R BIICPjCCAjqCFHNlcnZpY2UuZWxsaWVtYWUuY29tghpwb3J0YWx1aS5kYXRhLmVs bGllbWFlLmNvbYIbcG9ydGFsYXBpLmRhdGEuZWxsaWVtYWUuY29tghlwb3J0YWwx LmRhdGEuZWxsaWVtYWUuY29tghhwb3J0YWwuZGF0YS5lbGxpZW1hZS5jb22CEnBp bG90MDEubWF2ZW50LmNvbYIKbWF2ZW50LmNvbYIgZHNjb25jZXB0LmRhdGFsYWtl LmVsbGllbGFicy5jb22CKGRjdWktY3VzdG9tZXIucWEuZGF0YWxha2UucmQuZWxs aWVtYWUuaW+CKmRjdWktY3VzdG9tZXIuaW50Mi5kYXRhbGFrZS5yZC5lbGxpZW1h ZS5pb4IqZGN1aS1jdXN0b21lci5kc3FhLmRhdGFsYWtlLnJkLmVsbGllbWFlLmlv gixkY3VpLWN1c3RvbWVyLmRzaW50Mi5kYXRhbGFrZS5yZC5lbGxpZW1hZS5pb4Ia Y29tcGx5MDdiY3B0ZXN0Lm1hdmVudC5jb22CE2NvbXBseTA3Lm1hdmVudC5jb22C GmNvbXBseTA2YmNwdGVzdC5tYXZlbnQuY29tghNjb21wbHkwNi5tYXZlbnQuY29t ghpjb21wbHkwNWJjcHRlc3QubWF2ZW50LmNvbYITY29tcGx5MDUubWF2ZW50LmNv bYIaY29tcGx5MDFiY3B0ZXN0Lm1hdmVudC5jb22CE2NvbXBseTAxLm1hdmVudC5j b20wDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjBvBgNVHR8EaDBmMDGgL6AthitodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3Nj YS1zaGEyLWc2LTEuY3JsMDGgL6AthitodHRwOi8vY3JsNC5kaWdpY2VydC5jb20v c3NjYS1zaGEyLWc2LTEuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYB BQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB8BggrBgEFBQcBAQRw MG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBGBggrBgEF BQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMlNl Y3VyZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSC AW8EggFrAWkAdwDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAX7w bh0oAAAEAwBIMEYCIQCExb0f6LLK3zRgfnmczV0s3IcsFjrogTb2SSo0mS9Z9wIh AIGkse9Ni98cKzeuUMuO/GRX9m8Lp2BBA0Py7yf1zAKCAHYANc8ZG7+xbFe/D61M bULLu7YnICZR6j/hKu+oA8M71kwAAAF+8G4dcgAABAMARzBFAiEAuieO1SoEw1Yg 2rOevcLCcnEwvxWCuNyv6/PVaFwFA+cCIFvdulIbPwW6DWCvW0u2yvfg+Pobd44a i58vy0rHNdl/AHYAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAF+ 8G4dkgAABAMARzBFAiAcSAxiod6uFnujhE6DbKr7suKEu+RK1I8YoGmGqwDklwIh AIC0bVoutOYhnntmGIQd9diOdjTHuo6lNE49xb6q5FQLMA0GCSqGSIb3DQEBCwUA A4IBAQCP9/hkBgq6pvFNR5Cyc7+TK9M7JuBoMZ8eOWocvRjiZjy1Gk03oK6h3vy1 lZ9txPYyLZTi8ybLKsejviVC3lRo/ks4iXhiYtt+fXv3PpXZcB4ZtyqWbzQVsLFM cBud1vKtY/ERgnziPDt8hXXkhB0OHTFoD8+oqHNfqnUTLJSrjOLU1GxGEAYt9ZSM bdKcMto/ePFF8lMYUGHjzsmCDy5YDeiZSieHf6L8EpmHn9xK5LyyluGwHB8x1zg0 kDISKlydK+Yh5zi2C6rmtCW6qu7LCipRQP+K6OV1a0TopxYsjYU8aAj7EzBANJiu VRhQnpXR9R9FBZ+dzkscBHHu/+JC -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEOBCri+eXXztTQ7vNyNzI2taHxtpw 6Co0/NFvL6lmX6EGn7lZtUvMNfTx8rPuRg+VugQiD4pwmdLlvqNdnba1lA== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15264733547518856953867107271086260668 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-15 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ellie Mae Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mavent.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 00043810ab8be7975f3b5343bbcdc8dcc8dad687c6da70e82a34fcd16f2fa9665fa1069fb959b54bcc35f4f1f2b3ee460f95ba04220f8a7099d2e5bea35d9db6b594 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1a4d59cbcba0e4a57efaf0e753b3c1e29b601f4c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (574 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalui.data.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalapi.data.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal1.data.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.data.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot01.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsconcept.datalake.ellielabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcui-customer.qa.datalake.rd.elliemae.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcui-customer.int2.datalake.rd.elliemae.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcui-customer.dsqa.datalake.rd.elliemae.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcui-customer.dsint2.datalake.rd.elliemae.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply07bcptest.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply07.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply06bcptest.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply06.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply05bcptest.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply05.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply01bcptest.mavent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comply01.mavent.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6-1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 0169007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017ef06e1d28000004030048304602210084c5bd1fe8b2cadf34607e799ccd5d2cdc872c163ae88136f6492a34992f59f702210081a4b1ef4d8bdf1c2b37ae50cb8efc6457f66f0ba760410343f2ef27f5cc028200760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017ef06e1d720000040300473045022100ba278ed52a04c35620dab39ebdc2c2727130bf1582b8dcafebf3d5685c0503e702205bddba521b3f05ba0d60af5b4bb6caf7e0f8fa1b778e1a8b9f2fcb4ac735d97f007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017ef06e1d92000004030047304502201c480c62a1deae167ba3844e836caafbb2e284bbe44ad48f18a06986ab00e49702210080b46d5a2eb4e6219e7b6618841df5d88e7634c7ba8ea5344e3dc5beaae4540b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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