2wayssl-vipxmlapi-to-mobiwm2.verizon.com

- Verizon Data Services LLC -

Issued by DigiCert Baltimore CA-2 G2

About this certificate

This digital certificate with serial number 0a:8a:0f:c3:6f:e6:f5:1d:b6:5e:be:d8:0d:f9:83:45 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Verizon Data Services LLC

Organization: Verizon Data Services LLC
Organization unit: Infrastructure
State / Province: Florida
Locality: Temple Terrace
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:8a:0f:c3:6f:e6:f5:1d:b6:5e:be:d8:0d:f9:83:45
Serial Number (int): 14009136644594756554943168183233250117
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 98:82:e9:a0:d6:50:a6:31:d2:05:73:b8:86:f5:51:db:82:bf:53:b7
AuthorityKeyId: c0:12:b2:28:74:68:46:67:e9:70:25:74:1a:00:45:5b:06:7d:5c:44

Fingerprint (sha1): 25:94:9a:f5:df:6e:d9:5e:08:6e:e8:64:2b:6f:68:10:e5:fd:77:fe
Fingerprint (sha256): 00:11:48:a9:a0:d7:e4:48:9d:80:c4:25:e4:91:54:52:64:a1:7a:b1:4f:8b:e8:60:d7:fb:ed:55:a5:b7:83:3d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl

Check the revocation status for certificate 2wayssl-vipxmlapi-to-mobiwm2.verizon.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 2wayssl-vipxmlapi-to-mobiwm2.verizon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2wayssl-vipxmlapi-to-mobiwm2.verizon.com
www.2wayssl-vipxmlapi-to-mobiwm2.verizon.com

Other certificates including the domain name verizon.com

(limited to 100 certificates)
rssxuat2.ebiz.verizon.com
rssxuat2.ebiz.verizon.com
utesoauat2.ebiz.verizon.com
myvzlimitedtofull-sit-west.ebiz.verizon.com
SACU1LZEU9A03V.vzh.ent.verizon.com
p3srv-uat-t3.ebiz.verizon.com
63.21.80.28.vpc.verizon.com
f4gfhdcpa01.verizon.com
rssxuat2.ebiz.verizon.com
rsnv-k8s-np.ebiz.verizon.com
CO-Denver-1555BlakeSt-VZT.verizon.com
tpawpgkdva006-ilo.verizon.com
sunscda1.verizon.com
10-118-231-73.ebiz.verizon.com
evcservices-awseast.verizon.com
a1ufrdstw02.ebiz.verizon.com
2wayssl-vipxmlapi-to-mobiwm2.verizon.com
10-118-9-172.ebiz.verizon.com
uc-impres-pub-ne1.telecom.ouroath.com
rssxuat3.ebiz.verizon.com
10-119-224-179.ebiz.verizon.com
rssxuat1.ebiz.verizon.com
rssxdev3.ebiz.verizon.com
dcrmsace.verizon.com
rssxuat1.ebiz.verizon.com
sapportal.vsap.verizon.com
TPAWSICGVA070.ebiz.verizon.com
vzw2anpappidxcm.ebiz.verizon.com
rssxdev4.ebiz.verizon.com
63-21-72-221.ebiz.verizon.com
vz-vdhv-elb-enva.ebiz.verizon.com
tdclpeg1va017.verizon.com
eRepair-CD-BHR-UATCreation.ebiz.verizon.com
smarthub.verizon.com
vzc-stg1-vault-media.svcs.verizon.com
mdagwebprx01.verizon.com
paloalto2.verizon.com
vzw2bprdtmcidx32.vpc.verizon.com
mbdev2.ebiz.verizon.com
10-118-43-252.ebiz.verizon.com
delfdtw9.ebiz.verizon.com
ivatpasta01.ebiz.verizon.com
myverizonenterprise-ITTEST-eastorigin.verizon.com
openedge-tb1-regnva-fb1.verizon.com
atomcommon.verizon.com
gcs-tr.verizon.com
rssxuat1.ebiz.verizon.com
tdcwdcjwva01.tdc.vzwcorp.com
dt2fdta1.ebiz.verizon.com
rssxuat3.ebiz.verizon.com
*.cucdm.verizon.com
144-8-228-49.vpc.verizon.com
rssxdev3.ebiz.verizon.com
vanity3.lithium.com
efco.verizon.com
rssxdev4.ebiz.verizon.com
tdcwpct9va002.verizon.com
tpalpecqva018.verizon.com
nyhmpsa01pub01.verizon.com
143-251-44-161.vpc.verizon.com
10-118-35-15.ebiz.verizon.com
locus-informatica.ebiz.verizon.com
prod-billing-kube-taxexplanation-east.verizon.com
ivappwebservices1.verizon.com
10-118-0-160.ebiz.verizon.com
10-118-42-230.ebiz.verizon.com
10-119-3-51.ebiz.verizon.com
maauth003.verizon.com
dcrmgdssit.ebiz.verizon.com
tdclpgqzva087.verizon.com
rssxdev3.ebiz.verizon.com
qa1tz1-smrws1-oci-ad2.ebiz.verizon.com
billdirect.verizon.com
rssxdev3.ebiz.verizon.com
vz-vdhv-enve.ebiz.verizon.com
63-21-88-213.vpc.verizon.com
hnmscp04.verizon.com
fldlpecqva018.verizon.com
locus-pbspectrum-a.ebiz.verizon.com
vipr.verizon.com
uc-vcs-e2-ne1.telecom.ouroath.com
nmtest7.verizon.com
awsnplogsearch1.ebiz.verizon.com
bgnvdevext-east-yz.ebiz.verizon.com
mnte3aws.ebiz.verizon.com
rssxdev3.ebiz.verizon.com
fltmtrvzwfin18b.verizon.com
abrdmdf03vsgd01.verizon.com
rssxuat2.ebiz.verizon.com
rssxuat2.ebiz.verizon.com
apnv-baaisn-uat-west.ebiz.verizon.com
artotxfgcvsrv02.verizon.com
acdbre.verizon.com
rssxuat2.ebiz.verizon.com
wholesalegw4-fdc.verizon.com
prod-billing-kube-expressgateway-west.verizon.com
rssxdev3.ebiz.verizon.com
sacise1.verizon.com
mobilitycosell.verizon.com
rssxuat2.ebiz.verizon.com

Certificate

The complete raw certificate details for 2wayssl-vipxmlapi-to-mobiwm2.verizon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgIQCooPw2/m9R22Xr7YDfmDRTANBgkqhkiG9w0BAQsFADBk
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSMwIQYDVQQDExpEaWdpQ2VydCBCYWx0aW1vcmUgQ0Et
MiBHMjAeFw0xOTEwMjQwMDAwMDBaFw0yMTEwMjgxMjAwMDBaMIGoMQswCQYDVQQG
EwJVUzEQMA4GA1UECBMHRmxvcmlkYTEXMBUGA1UEBxMOVGVtcGxlIFRlcnJhY2Ux
IjAgBgNVBAoTGVZlcml6b24gRGF0YSBTZXJ2aWNlcyBMTEMxFzAVBgNVBAsTDklu
ZnJhc3RydWN0dXJlMTEwLwYDVQQDEygyd2F5c3NsLXZpcHhtbGFwaS10by1tb2Jp
d20yLnZlcml6b24uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
vooj6W21SkzYrAOAu3xe31fAwLEzLn5zdLWrBuOgTUcZqFyzqWtb2KAz5vu/wTrj
62B2Q9vPPPvCLyVLsatgVifnTRGwCIaAmPOSjXxQzz5Oz/IrCP9uxb7clTpCsQGL
5ofIy4E0WdIHiXtnfLZM6sIsyqRVqEG5juRZChWOCahTBX3GIZgjM53Yhl8pRfs/
oprEkuLwTZ6jz/zPMhWMQK/Ad14JIcFkKBSHpMOxF/qrupy3Ra9IOiFgHsXy0ETy
ppTYGCfQfpu1pgA/GU1jNUpiD1YXMpcS9JKkV026tiQXzMOGY9Xlr0N7a0tE/5xk
3b4k68ypv0OYWmFRGmLKoQIDAQABo4ICRjCCAkIwHwYDVR0jBBgwFoAUwBKyKHRo
RmfpcCV0GgBFWwZ9XEQwHQYDVR0OBBYEFJiC6aDWUKYx0gVzuIb1UduCv1O3MGEG
A1UdEQRaMFiCKDJ3YXlzc2wtdmlweG1sYXBpLXRvLW1vYml3bTIudmVyaXpvbi5j
b22CLHd3dy4yd2F5c3NsLXZpcHhtbGFwaS10by1tb2Jpd20yLnZlcml6b24uY29t
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
gYEGA1UdHwR6MHgwOqA4oDaGNGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdp
Q2VydEJhbHRpbW9yZUNBLTJHMi5jcmwwOqA4oDaGNGh0dHA6Ly9jcmw0LmRpZ2lj
ZXJ0LmNvbS9EaWdpQ2VydEJhbHRpbW9yZUNBLTJHMi5jcmwwTAYDVR0gBEUwQzA3
BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQu
Y29tL0NQUzAIBgZngQwBAgIweQYIKwYBBQUHAQEEbTBrMCQGCCsGAQUFBzABhhho
dHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQwYIKwYBBQUHMAKGN2h0dHA6Ly9jYWNl
cnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEJhbHRpbW9yZUNBLTJHMi5jcnQwDAYD
VR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHG3eNWuEhevQRIzjBKS7BGoiI8ejmnvOZ39acMZUZN+tNZDRsgkeKm8yGHcz
bAPxbEAmGd2LQ5DSSU7MI4Co29VEyqlDyZ8xhlDBu4dwcWYXPcMbkOyJxBUlgflt
g32mIsCGq7KIjosoX1oWlq8rYUnUmvbJitqqY1mOB+jtWaMIQhG538TBI7cNM+j5
vOXnq9T7JjV4mGdtqAE+dDp42epvhk8bm4ZJDhSX66k2UNKImAwWRAz6nQ31jXET
39yCFKdFZAaAMQ3c0ZJEr+jiaOG+Ngwwq7vyTpSLfwSM/AZps0oDCQoiS8aecG6P
lpGrh+i4qNfT+0hDBAdCeRLw7Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvooj6W21SkzYrAOAu3xe
31fAwLEzLn5zdLWrBuOgTUcZqFyzqWtb2KAz5vu/wTrj62B2Q9vPPPvCLyVLsatg
VifnTRGwCIaAmPOSjXxQzz5Oz/IrCP9uxb7clTpCsQGL5ofIy4E0WdIHiXtnfLZM
6sIsyqRVqEG5juRZChWOCahTBX3GIZgjM53Yhl8pRfs/oprEkuLwTZ6jz/zPMhWM
QK/Ad14JIcFkKBSHpMOxF/qrupy3Ra9IOiFgHsXy0ETyppTYGCfQfpu1pgA/GU1j
NUpiD1YXMpcS9JKkV026tiQXzMOGY9Xlr0N7a0tE/5xk3b4k68ypv0OYWmFRGmLK
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14009136644594756554943168183233250117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Baltimore CA-2 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Temple Terrace'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Data Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Infrastructure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2wayssl-vipxmlapi-to-mobiwm2.verizon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24053397454757523169739814525050355417188729135655137128961373057721755270239857864616062265147897688592915823227835769742025735083702441310883898944921660550089453052535915083033451076379691705125689545271165254691643313764602110256996781225832638201567522206040735571346213745628600064324179564863780750253197115504137504218833031815887980158605059275992121178036552401565096771568847582806868036772652055902408054351138962236502970792973331686342037420834629402983644388053962227551216051790681183017057002116050444788491924283957817306843820297861435291610063884419394576603756507328604153813378213315423412341409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c012b22874684667e97025741a00455b067d5c44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9882e9a0d650a631d20573b886f551db82bf53b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2wayssl-vipxmlapi-to-mobiwm2.verizon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2wayssl-vipxmlapi-to-mobiwm2.verizon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001c6dde356b8485ebd0448ce304a4bb046a2223c7a39a7bce677f5a70c65464dfad3590d1b2091e2a6f321877336c03f16c402619dd8b4390d2494ecc2380a8dbd544caa943c99f318650c1bb87707166173dc31b90ec89c4152581f96d837da622c086abb2888e8b285f5a1696af2b6149d49af6c98adaaa63598e07e8ed59a3084211b9dfc4c123b70d33e8f9bce5e7abd4fb26357898676da8013e743a78d9ea6f864f1b9b86490e1497eba93650d288980c16440cfa9d0df58d7113dfdc8214a745640680310ddcd19244afe8e268e1be360c30abbbf24e948b7f048cfc0669b34a03090a224bc69e706e8f9691ab87e8b8a8d7d3fb48430407427912f0ed