gavinnewsom.com
Issued by Starfield Secure Certificate Authority - G2
About this certificate
This digital certificate with serial number 36:6c:67:1f:8d:be:a3:09 was issued on by Starfield Technologies, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gavinnewsom.com,OU=Domain Control Validated
Starfield Technologies, Inc.
Organization:
Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
Organization unit: http://certs.starfieldtech.com/repository/
State / Province:
Arizona
Locality: Scottsdale
Country: US
Locality: Scottsdale
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 36:6c:67:1f:8d:be:a3:09Serial Number (int): 3921622760752587529
Serial Number lenght: 62 bits, 8 octets
SubjectKeyId: 7e:d5:52:6d:40:5e:84:ff:35:6c:a0:6e:65:42:62:6d:d3:fb:35:67
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63
Fingerprint (sha1): b3:f0:21:b5:73:c5:28:57:a2:ad:6d:bc:1b:c5:3a:0c:2a:87:e3:5b
Fingerprint (sha256): e9:77:81:3d:64:4f:6c:a2:3e:8c:1b:ae:ba:51:9a:3a:2d:a1:c7:9a:d7:ea:cf:3b:ff:bc:10:09:1d:ad:1b:6a
Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt
Revocation information
OCSP Server: http://ocsp.starfieldtech.com/CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-187.crl
Check the revocation status for certificate gavinnewsom.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gavinnewsom.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gavinnewsom.com
www.gavinnewsom.com
www.gavinnewsom.com
Other certificates including the domain name gavinnewsom.com
(limited to 100 certificates)
sni32094.cloudflaressl.com
sni32094.cloudflaressl.com
act.johnfetterman.com
gavinnewsom.com
www.gavinnewsom.com
sni32094.cloudflaressl.com
act.boldprogressives.org
act.ilhanomar.com
gavinnewsom.com
sni32094.cloudflaressl.com
act.ourrevolution.com
peoplesmillion.whitehelmets.org
act.colorofchange.org
sni32094.cloudflaressl.com
gavinnewsom.com
act.peoplesconvoy.com
act.elizabethwarren.com
sni32094.cloudflaressl.com
act.campaigntoendqualifiedimmunity.org
gavinnewsom.com
action.pollinis.org
act.jamieraskin.com
sni32094.cloudflaressl.com
gavinnewsom.com
sni32094.cloudflaressl.com
sni32094.cloudflaressl.com
gavinnewsom.com
gavinnewsom.com
gavinnewsom.com
sni32094.cloudflaressl.com
sni32094.cloudflaressl.com
act.gunsensevoter.org
www-default.actionkit.com
sni32094.cloudflaressl.com
act.realjusticepac.org
shop.gavinnewsom.com
gavinnewsom.com
act.powerthepolls.org
faithfulamerica.org
gavinnewsom.com
sni32094.cloudflaressl.com
act.abwt.org
sni32094.cloudflaressl.com
act.ruraldemocratsturnoutfund.com
shop.gavinnewsom.com
action.pollinis.org
act.defendvotingrights.org
act.jstreet.org
sni32094.cloudflaressl.com
act.democratic-strategy.org
gavinnewsom.com
gavinnewsom.com
act.progressflorida.org
sni32094.cloudflaressl.com
sni32094.cloudflaressl.com
sni32094.cloudflaressl.com
act.gavinnewsom.com
shop.gavinnewsom.com
shop.gavinnewsom.com
sni32094.cloudflaressl.com
gavinnewsom.com
act.nuestropac.com
act.jamieraskin.com
act.dsausa.org
gavinnewsom.com
www.nowarwithiran.org
act.bcndp.ca
sni32094.cloudflaressl.com
sni32094.cloudflaressl.com
act.johnfetterman.com
gavinnewsom.com
www.gavinnewsom.com
sni32094.cloudflaressl.com
act.boldprogressives.org
act.ilhanomar.com
gavinnewsom.com
sni32094.cloudflaressl.com
act.ourrevolution.com
peoplesmillion.whitehelmets.org
act.colorofchange.org
sni32094.cloudflaressl.com
gavinnewsom.com
act.peoplesconvoy.com
act.elizabethwarren.com
sni32094.cloudflaressl.com
act.campaigntoendqualifiedimmunity.org
gavinnewsom.com
action.pollinis.org
act.jamieraskin.com
sni32094.cloudflaressl.com
gavinnewsom.com
sni32094.cloudflaressl.com
sni32094.cloudflaressl.com
gavinnewsom.com
gavinnewsom.com
gavinnewsom.com
sni32094.cloudflaressl.com
sni32094.cloudflaressl.com
act.gunsensevoter.org
www-default.actionkit.com
sni32094.cloudflaressl.com
act.realjusticepac.org
shop.gavinnewsom.com
gavinnewsom.com
act.powerthepolls.org
faithfulamerica.org
gavinnewsom.com
sni32094.cloudflaressl.com
act.abwt.org
sni32094.cloudflaressl.com
act.ruraldemocratsturnoutfund.com
shop.gavinnewsom.com
action.pollinis.org
act.defendvotingrights.org
act.jstreet.org
sni32094.cloudflaressl.com
act.democratic-strategy.org
gavinnewsom.com
gavinnewsom.com
act.progressflorida.org
sni32094.cloudflaressl.com
sni32094.cloudflaressl.com
sni32094.cloudflaressl.com
act.gavinnewsom.com
shop.gavinnewsom.com
shop.gavinnewsom.com
sni32094.cloudflaressl.com
gavinnewsom.com
act.nuestropac.com
act.jamieraskin.com
act.dsausa.org
gavinnewsom.com
www.nowarwithiran.org
act.bcndp.ca
sni32094.cloudflaressl.com
Certificate
The complete raw certificate details for gavinnewsom.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIINmxnH42+owkwDQYJKoZIhvcNAQELBQAwgcYxCzAJBgNV BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUw IwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTMwMQYDVQQLEypo dHRwOi8vY2VydHMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8xNDAyBgNV BAMTK1N0YXJmaWVsZCBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIw HhcNMjAwMzI1MDIzMjU1WhcNMjEwMzI1MDIzMjU1WjA9MSEwHwYDVQQLExhEb21h aW4gQ29udHJvbCBWYWxpZGF0ZWQxGDAWBgNVBAMTD2dhdmlubmV3c29tLmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMJLDqPA1v1ypcJKH5yw08tc hRBCKDwjxxkp6Uh6MGiSI2KCgUX6W10E78Zz4Bdy9w8n/l4ruOO1LO1wZYP8fizo S82M7Hj8TtW8pczgLUD51qLYD0Acq8KEmK/SJ787CVKQtqrYxyQc9JFbLhFmDCRC OyetDSwzKo/wEgPBl2dz7NzGUC8jOAtXS4cObYo88ol23fFqQ0M+NELQE2vESq0q FcDGPmyRhMfySlT5T2RhB7RKIlgpty6WQ2Q8qFOxW6iioW21dISlOMk5D+n27Bur nmJEf2OaGOKNUTnCENYHHVxxmxUpJtK24WJuYtAVjGA5JWEWoKg9lohwpTuNGfEC AwEAAaOCAuMwggLfMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA9BgNVHR8ENjA0MDKgMKAuhixodHRw Oi8vY3JsLnN0YXJmaWVsZHRlY2guY29tL3NmaWcyczEtMTg3LmNybDBjBgNVHSAE XDBaME4GC2CGSAGG/W4BBxcBMD8wPQYIKwYBBQUHAgEWMWh0dHA6Ly9jZXJ0aWZp Y2F0ZXMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMIGC BggrBgEFBQcBAQR2MHQwKgYIKwYBBQUHMAGGHmh0dHA6Ly9vY3NwLnN0YXJmaWVs ZHRlY2guY29tLzBGBggrBgEFBQcwAoY6aHR0cDovL2NlcnRpZmljYXRlcy5zdGFy ZmllbGR0ZWNoLmNvbS9yZXBvc2l0b3J5L3NmaWcyLmNydDAfBgNVHSMEGDAWgBQl RYFoUCY4PTstLL7Natm2PbNmYzAvBgNVHREEKDAmgg9nYXZpbm5ld3NvbS5jb22C E3d3dy5nYXZpbm5ld3NvbS5jb20wHQYDVR0OBBYEFH7VUm1AXoT/NWygbmVCYm3T +zVnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcApLkJkLQYWBSHuxOizGdwCjw1 mAT5G9+443fNDsgN3BAAAAFxD4keXQAABAMASDBGAiEAgi4sI8kxvjgNv3QCdG7a pOwkYegugtcXkiG4U4EKrHsCIQDQAN9nehNHKZX2NBvcSWHK2fwUI6JLxQ11FRbc HI7YGQB1AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT/TM5a1toGoAAABcQ+JICIA AAQDAEYwRAIgDqM1poa7FFFojtbEqu+N+SCKlM5BK18c0RaJ8qY7bGYCIA7RppwE ejyvO6hLeCJSswGpGJwylRE5W4avzFk5DCVTMA0GCSqGSIb3DQEBCwUAA4IBAQDc T1x++hrYHEEvV9U2rUeXO+0hvWalrwP7lZhwpYVVTqUS5O++AYZnVgE7s1lCDNIR JLaWW8cwkVOvQX5uydbc7raM6MtcAz4YPovj3dkcfWHigzwxcGtnIA9yb56wYbc4 9/KfpVlu8iIlR4Y5GOWDLhugWH5k36lDv+Byh18LMR/8XRhMSIPIjQYpnE8faRHk 4uXcyFhAEd7wGmfzbiWGglJ5X47sonQP7QD4rSa5znM8/yi9eUTlrdlIsingIOrT SdAUV+b8BkZ5DIWAyZupj7wNXkE9ADYjviyMby5XNM8Kublijp2EVC0KSqDiTstv XckLBmlvnAajrjUcxYN6 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwksOo8DW/XKlwkofnLDT y1yFEEIoPCPHGSnpSHowaJIjYoKBRfpbXQTvxnPgF3L3Dyf+Xiu447Us7XBlg/x+ LOhLzYzsePxO1bylzOAtQPnWotgPQByrwoSYr9InvzsJUpC2qtjHJBz0kVsuEWYM JEI7J60NLDMqj/ASA8GXZ3Ps3MZQLyM4C1dLhw5tijzyiXbd8WpDQz40QtATa8RK rSoVwMY+bJGEx/JKVPlPZGEHtEoiWCm3LpZDZDyoU7FbqKKhbbV0hKU4yTkP6fbs G6ueYkR/Y5oY4o1ROcIQ1gcdXHGbFSkm0rbhYm5i0BWMYDklYRagqD2WiHClO40Z 8QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3921622760752587529 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 02:32:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-25 02:32:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gavinnewsom.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24527243241378172452243483060232678971121102521705597078360791282278303735451209989205651230435695910826913665691610884384524406588898600189801778256489725854910165503257693907677926632924226738556746712396655794919939721398696864686305190736956523014457960806717171819135799353473188660793102032619349014364652450600999721834592740908095557073016413726151362368895920564649898276730468554760500537259341892650960659858566773094178116170530702021917762641421065825477545396642160127301769291548341221786883852495661511947786868063293168747436450412438774786408299128084962766766081283714989500070756950510350896011761 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-187.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gavinnewsom.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gavinnewsom.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7ed5526d405e84ff356ca06e6542626dd3fb3567 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001710f891e5d0000040300483046022100822e2c23c931be380dbf7402746edaa4ec2461e82e82d7179221b853810aac7b022100d000df677a13472995f6341bdc4961cad9fc1423a24bc50d751516dc1c8ed8190075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001710f892022000004030046304402200ea335a686bb1451688ed6c4aaef8df9208a94ce412b5f1cd11689f2a63b6c6602200ed1a69c047a3caf3ba84b782252b301a9189c329511395b86afcc59390c2553 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00dc4f5c7efa1ad81c412f57d536ad47973bed21bd66a5af03fb959870a585554ea512e4efbe01866756013bb359420cd21124b6965bc7309153af417e6ec9d6dceeb68ce8cb5c033e183e8be3ddd91c7d61e2833c31706b67200f726f9eb061b738f7f29fa5596ef2222547863918e5832e1ba0587e64dfa943bfe072875f0b311ffc5d184c4883c88d06299c4f1f6911e4e2e5dcc8584011def01a67f36e25868252795f8eeca2740fed00f8ad26b9ce733cff28bd7944e5add948b229e020ead349d01457e6fc0646790c8580c99ba98fbc0d5e413d003623be2c8c6f2e5734cf0ab9b9628e9d84542d0a4aa0e24ecb6f5dc90b06696f9c06a3ae351cc5837a