vzc-stg1-vault-media.svcs.verizon.com

- Verizon Data Services, LLC -

Issued by DigiCert Baltimore CA-2 G2

About this certificate

This digital certificate with serial number 0a:5c:2a:34:72:8a:10:ca:06:eb:5f:28:12:77:99:61 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Verizon Data Services, LLC

Organization: Verizon Data Services, LLC
Organization unit: PDMO
State / Province: Florida
Locality: Temple Terrace
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:5c:2a:34:72:8a:10:ca:06:eb:5f:28:12:77:99:61
Serial Number (int): 13770827285350369150111019187786193249
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5f:a1:c1:0e:55:25:36:ad:a8:16:eb:6f:84:90:52:62:73:6a:1d:af
AuthorityKeyId: c0:12:b2:28:74:68:46:67:e9:70:25:74:1a:00:45:5b:06:7d:5c:44

Fingerprint (sha1): 8b:5e:b9:5c:f1:59:9f:c3:48:f2:4b:3c:c5:1b:69:5d:48:bb:6b:bb
Fingerprint (sha256): 00:26:37:3c:eb:e2:fa:40:ae:43:65:98:a5:e7:38:dd:f7:c3:a7:1a:d2:1b:6a:a1:c9:43:93:de:46:dc:85:7e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl

Check the revocation status for certificate vzc-stg1-vault-media.svcs.verizon.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vzc-stg1-vault-media.svcs.verizon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vzc-stg1-vault-media.svcs.verizon.com

Other certificates including the domain name verizon.com

(limited to 100 certificates)
rssxuat2.ebiz.verizon.com
rssxuat2.ebiz.verizon.com
utesoauat2.ebiz.verizon.com
myvzlimitedtofull-sit-west.ebiz.verizon.com
SACU1LZEU9A03V.vzh.ent.verizon.com
p3srv-uat-t3.ebiz.verizon.com
63.21.80.28.vpc.verizon.com
f4gfhdcpa01.verizon.com
rssxuat2.ebiz.verizon.com
rsnv-k8s-np.ebiz.verizon.com
CO-Denver-1555BlakeSt-VZT.verizon.com
tpawpgkdva006-ilo.verizon.com
sunscda1.verizon.com
10-118-231-73.ebiz.verizon.com
evcservices-awseast.verizon.com
a1ufrdstw02.ebiz.verizon.com
2wayssl-vipxmlapi-to-mobiwm2.verizon.com
10-118-9-172.ebiz.verizon.com
uc-impres-pub-ne1.telecom.ouroath.com
rssxuat3.ebiz.verizon.com
10-119-224-179.ebiz.verizon.com
rssxuat1.ebiz.verizon.com
rssxdev3.ebiz.verizon.com
dcrmsace.verizon.com
rssxuat1.ebiz.verizon.com
sapportal.vsap.verizon.com
TPAWSICGVA070.ebiz.verizon.com
vzw2anpappidxcm.ebiz.verizon.com
rssxdev4.ebiz.verizon.com
63-21-72-221.ebiz.verizon.com
vz-vdhv-elb-enva.ebiz.verizon.com
tdclpeg1va017.verizon.com
eRepair-CD-BHR-UATCreation.ebiz.verizon.com
smarthub.verizon.com
vzc-stg1-vault-media.svcs.verizon.com
mdagwebprx01.verizon.com
paloalto2.verizon.com
vzw2bprdtmcidx32.vpc.verizon.com
mbdev2.ebiz.verizon.com
10-118-43-252.ebiz.verizon.com
delfdtw9.ebiz.verizon.com
ivatpasta01.ebiz.verizon.com
myverizonenterprise-ITTEST-eastorigin.verizon.com
openedge-tb1-regnva-fb1.verizon.com
atomcommon.verizon.com
gcs-tr.verizon.com
rssxuat1.ebiz.verizon.com
tdcwdcjwva01.tdc.vzwcorp.com
dt2fdta1.ebiz.verizon.com
rssxuat3.ebiz.verizon.com
*.cucdm.verizon.com
144-8-228-49.vpc.verizon.com
rssxdev3.ebiz.verizon.com
vanity3.lithium.com
efco.verizon.com
rssxdev4.ebiz.verizon.com
tdcwpct9va002.verizon.com
tpalpecqva018.verizon.com
nyhmpsa01pub01.verizon.com
143-251-44-161.vpc.verizon.com
10-118-35-15.ebiz.verizon.com
locus-informatica.ebiz.verizon.com
prod-billing-kube-taxexplanation-east.verizon.com
ivappwebservices1.verizon.com
10-118-0-160.ebiz.verizon.com
10-118-42-230.ebiz.verizon.com
10-119-3-51.ebiz.verizon.com
maauth003.verizon.com
dcrmgdssit.ebiz.verizon.com
tdclpgqzva087.verizon.com
rssxdev3.ebiz.verizon.com
qa1tz1-smrws1-oci-ad2.ebiz.verizon.com
billdirect.verizon.com
rssxdev3.ebiz.verizon.com
vz-vdhv-enve.ebiz.verizon.com
63-21-88-213.vpc.verizon.com
hnmscp04.verizon.com
fldlpecqva018.verizon.com
locus-pbspectrum-a.ebiz.verizon.com
vipr.verizon.com
uc-vcs-e2-ne1.telecom.ouroath.com
nmtest7.verizon.com
awsnplogsearch1.ebiz.verizon.com
bgnvdevext-east-yz.ebiz.verizon.com
mnte3aws.ebiz.verizon.com
rssxdev3.ebiz.verizon.com
fltmtrvzwfin18b.verizon.com
abrdmdf03vsgd01.verizon.com
rssxuat2.ebiz.verizon.com
rssxuat2.ebiz.verizon.com
apnv-baaisn-uat-west.ebiz.verizon.com
artotxfgcvsrv02.verizon.com
acdbre.verizon.com
rssxuat2.ebiz.verizon.com
wholesalegw4-fdc.verizon.com
prod-billing-kube-expressgateway-west.verizon.com
rssxdev3.ebiz.verizon.com
sacise1.verizon.com
mobilitycosell.verizon.com
rssxuat2.ebiz.verizon.com

Certificate

The complete raw certificate details for vzc-stg1-vault-media.svcs.verizon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CEMwEW/oZm/5NBR5J12
abw6mSt6dQkko+Ide74VhE2vEg8/k1IO/syS7TacR0ru3t0FwEtzsTtNcIOvuE29
XjtgiUSfRZp/sas4wMb+6th+4pCg+KvX1qaVBarkuqralxWXUqbVMOdmYIzxuBEF
R/aCOt6T8kEOSXOEf/LnauPnEn+Zcf6HCs7RBVyCVg+a9pRXPUsyrIDRtd0xokeS
FKGhwIe0NygI/zxEegIizT7jjZ1dPrhRVJYncEAr0PFHzjV0HSm+6H9YmjZw0tww
PQndmm0OoM4X4ocIOfQJeSoKBxbpRxTowjxFRzNqRffPGlKzV4px4cH5WSPhU9TQ
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13770827285350369150111019187786193249
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Baltimore CA-2 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Temple Terrace'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Data Services, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PDMO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vzc-stg1-vault-media.svcs.verizon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27788724560689243054845940345046051141631715993381773658985307375752153735570561723586264455769181203850239356968868882638886724788947286934865848169809792479860325125654853899013326992093991534994575934615792923770469691468101151925757652268008264725372401731955883126571648368570117056762984570984964246284841409573126124405265964172478255565860557949241255589427476588904723787189907033548849982414420371645675631816046667179811131424291609859078455757391743229878710213888055958724769382643464712830273977828833871041134885402829592379740210891462278826631271993761045790686347737618701557436136810800396367089753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c012b22874684667e97025741a00455b067d5c44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5fa1c10e552536ada816eb6f84905262736a1daf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vzc-stg1-vault-media.svcs.verizon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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