1. who's the root CA? the website itself seems to use digicert.

2. what's the validation length?