openshift.aa64c00bdb034b20964c.eastus.azmosa.io

- Microsoft Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:32:f6:5f:a8:a9:29:b0:53:3b:f1:d9:77:c7:c8:34 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: Washington
Locality: Redmond
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:32:f6:5f:a8:a9:29:b0:53:3b:f1:d9:77:c7:c8:34
Serial Number (int): 8239979869272160768036981338351847476
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 61:3a:3f:54:5f:24:8f:b2:d0:2d:91:69:1c:e5:a9:06:ba:c4:2d:8f
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 26:d6:d9:e9:e3:09:d1:0d:39:54:eb:1c:2f:39:df:b7:6f:31:7b:e5
Fingerprint (sha256): 00:2e:f9:2c:8a:e4:a4:24:7f:90:53:18:a1:9d:72:d2:ac:fc:05:7e:6f:79:91:a6:ef:dd:ce:58:1c:a6:cd:a3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate openshift.aa64c00bdb034b20964c.eastus.azmosa.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for openshift.aa64c00bdb034b20964c.eastus.azmosa.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

openshift.aa64c00bdb034b20964c.eastus.azmosa.io

Other certificates including the domain name azmosa.io

(limited to 100 certificates)
openshift.0c94a8f3fa0d4785b9cd.eastus.azmosa.io
*.apps.8132a98b9a5f49088c89.japaneast.azmosa.io
*.apps.3388ea7db0f74ca58558.southeastasia.azmosa.io
*.apps.af140d94ffb145a4abf6.westcentralus.azmosa.io
openshift.a804dcaaadb1494b8a80.eastus2.azmosa.io
*.apps.b39e26423a3b40c4b07d.eastus.azmosa.io
*.apps.5a03bf4df8c748aeae0d.centralus.azmosa.io
*.apps.982aa766cfb34c639b37.southeastasia.azmosa.io
openshift.31e6cc8e2fae4a09bba4.australiasoutheast.azmosa.io
openshift.c352bd9e382d4f578891.eastasia.azmosa.io
openshift.483b77e69f8441deb42c.francecentral.azmosa.io
*.apps.06cb078a53f149ba834e.southcentralus.azmosa.io
openshift.295247f4cb2c4dacaea2.eastus2.azmosa.io
*.apps.b5b5f1215bc64da49ca8.eastus2.azmosa.io
*.apps.a190f89c076143afb321.int.azmosa.io
openshift.ca0e05823cd34df28dbb.westus2.azmosa.io
*.apps.1679d5141d4f4026b58e.southcentralus.azmosa.io
*.apps.7082b47277024bf792ac.int.azmosa.io
openshift.a78d6c0b617f4de593dc.koreacentral.azmosa.io
*.apps.c9598515896b411085c8.eastus2.azmosa.io
openshift.ebfc3d2bf0c44e868e00.westeurope.azmosa.io
openshift.7de0b63aa47b4179828b.eastus.azmosa.io
openshift.393c2c4b9b0b4e8c8c14.westus.azmosa.io
openshift.7c45938a37e84b5791ce.southcentralus.azmosa.io
*.apps.2aca7a175b38404598d7.int.azmosa.io
openshift.824a1846106c4e01a52f.northeurope.azmosa.io
*.apps.606fa6b90299430c9963.westus.azmosa.io
openshift.e25df88ec69a4cd495b9.eastus2.azmosa.io
openshift.0d47f537816f4e0bb766.southeastasia.azmosa.io
openshift.7420fa4d00774fb9b508.centralus.azmosa.io
openshift.bd099c6feeb14ebcbe6f.eastus2.azmosa.io
*.apps.66fb8c21eaf94a89b325.int.azmosa.io
openshift.a33840a86a5c4767b07b.australiaeast.azmosa.io
*.apps.af57a20730564b5fb38c.westeurope.azmosa.io
*.apps.f7e67fc3481d469b94b8.westus2.azmosa.io
*.apps.6d2326545ef240eca650.southeastasia.azmosa.io
openshift.ec4d783e1b8b497aa754.eastasia.azmosa.io
*.apps.5a9d957ffa2d490ba4b6.eastus2euap.azmosa.io
*.apps.63eed59d5f7c4c3cbc51.ukwest.azmosa.io
openshift.aa64c00bdb034b20964c.eastus.azmosa.io
*.apps.ec92b5ef5de544d28cb9.southcentralus.azmosa.io
*.apps.1b3c27c1dc4f409d8bbd.eastus.azmosa.io
*.apps.06025a6eb27c493dab29.int.azmosa.io
*.apps.49c47751ea884c5c90b2.northeurope.azmosa.io
openshift.3e7bb33eb3114d35b976.australiaeast.azmosa.io
*.apps.0cd6fcf4cf704bab9080.eastus2.azmosa.io
openshift.5374140ecbe443368a2f.canadaeast.azmosa.io
*.apps.fee463651e8b4a01bd17.int.azmosa.io
openshift.be0d25d60e1647ba96b6.int.azmosa.io
*.apps.680bee40cd74463da252.westeurope.azmosa.io
openshift.a412a181baef4e5ba279.westeurope.azmosa.io
*.apps.32c616eca896451eb327.southeastasia.azmosa.io
*.apps.62237e3037fa4c9ea10e.centralus.azmosa.io
openshift.5a38a04659114a8bb9a4.canadaeast.azmosa.io
openshift.d618a79ea32945f8898c.ukwest.azmosa.io
openshift.bcf608096cac40828a88.westeurope.azmosa.io
openshift.14a27accd95643e99020.ukwest.azmosa.io
openshift.c14d2e2aa70d40968bd0.eastus.azmosa.io
openshift.a15f874123db4e92bc00.eastus2.azmosa.io
openshift.7df277a23b35450d8b04.int.azmosa.io
*.apps.d2a09bd4602247d0b84d.southcentralus.azmosa.io
openshift.1a617e9c4eff4c98bb3f.int.azmosa.io
openshift.6f29b4c21cd642e1aaaf.eastus.azmosa.io
*.apps.d2e7861894d7408883dd.westeurope.azmosa.io
*.apps.355a15fca88f4a5494b5.westus2.azmosa.io
openshift.b98c6be82fec4ed5b950.westcentralus.azmosa.io
openshift.e7f762e4a00d478283ec.int.azmosa.io
openshift.b9810747301746e88db7.eastus.azmosa.io
openshift.c8e8775a777c4642a38e.westcentralus.azmosa.io
*.apps.c8d18183e9b749959e96.australiasoutheast.azmosa.io
openshift.10da199ebd3546958f98.northeurope.azmosa.io
openshift.f19e4f8ef6a447aeb730.canadacentral.azmosa.io
openshift.ff5e6261b804416db15c.canadacentral.azmosa.io
*.apps.ec0fc71b54a544e393e2.canadaeast.azmosa.io
openshift.fc3312329a6642439aa0.francecentral.azmosa.io
openshift.3c6f521b7774419cbd1d.westus2.azmosa.io
openshift.8effc2a488004730a168.int.azmosa.io
*.apps.e44ca97b582840b8acce.southcentralus.azmosa.io
openshift.480aeaf8697c4bcc92bc.int.azmosa.io
openshift.7334d77c25ad495e9daf.centralus.azmosa.io
openshift.438341974ea647a68330.eastus.azmosa.io
*.apps.f00b0721da474aadaa45.centralus.azmosa.io
*.apps.47aeb4783db64d9abcb1.westus.azmosa.io
openshift.05252c62c95b4dcc9f03.int.azmosa.io
*.apps.08c1e655df03446983ca.eastus2.azmosa.io
*.apps.29a50240a3944711b36c.northcentralus.azmosa.io
openshift.164a7a32fdc54fe593b7.westus.azmosa.io
openshift.4c465c932fc94d84b259.brazilsouth.azmosa.io
*.apps.41648ad32d4c4cdd8df2.ukwest.azmosa.io
openshift.f7cdad2f8d3645838498.eastasia.azmosa.io
*.apps.68050ed773344a1aa193.westeurope.azmosa.io
openshift.302e148ad39f4650873e.northeurope.azmosa.io
*.apps.e8ccf9660e534f6595b7.int.azmosa.io
openshift.7bae44a52c7a4f32b119.westus2.azmosa.io
openshift.3a1e7837216944168d90.int.azmosa.io
*.apps.8fea5067d5c042d59ec7.westus2.azmosa.io
*.apps.aa584b2e85d34f94896d.eastus2.azmosa.io
*.apps.4282641a8e144470b9af.centralindia.azmosa.io
*.apps.5f82dabc6d0740598dc4.eastus.azmosa.io
*.apps.b76ed58764c1433a8c89.canadaeast.azmosa.io

Certificate

The complete raw certificate details for openshift.aa64c00bdb034b20964c.eastus.azmosa.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIQBjL2X6ipKbBTO/HZd8fINDANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjAwMzE4MDAwMDAwWhcN
MjIwMzE4MTIwMDAwWjCBjjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0
b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3Jh
dGlvbjE4MDYGA1UEAxMvb3BlbnNoaWZ0LmFhNjRjMDBiZGIwMzRiMjA5NjRjLmVh
c3R1cy5hem1vc2EuaW8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+
PvjUfY5lGMlLwihhYinMqxKRC0AGHVgphAVkA7/M0ushzA5/V9iOl/VY30Lcjtat
fqDYd9DqMCx2npJh5Sj93dTAE5v/mPLNxCj3VBgKjoHnxeoUlPdeGjm1lvpWXHPs
IG4Kvpp8EKu67FnW0fqYsrFwjbi3PUbLdPQY4EvgFj/J+PFD4VxH0lRY1GMqlMlw
gRme2DtrAeiyu5G6grEGCEfAlSL9OUe0O1Fu++2Rg8s3phd31HMDDqqvs/o/FsL2
vYAX2s6rwJnxOwt++2P47Kd+opoU8RZihlvTb6gO7jHKyJSBdlD+SU8sqqz0a6dB
sMTp6YrsK7e1Ru7Z4OgdAgMBAAGjggILMIICBzAfBgNVHSMEGDAWgBQPgGEcgjFh
1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUYTo/VF8kj7LQLZFpHOWpBrrELY8wOgYD
VR0RBDMwMYIvb3BlbnNoaWZ0LmFhNjRjMDBiZGIwMzRiMjA5NjRjLmVhc3R1cy5h
em1vc2EuaW8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5j
b20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQu
Y29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAo
BggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwB
AgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp
Y2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv
bS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADAT
BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGra4K9ZMsLHw
LpBA2uwQDDM40b7yi1Ax5nrlyOeULXw06zfMeUVkkhIDP8cF0/FVYeINaaykRxoo
mT4CKW5IirUsLu8XbMRtZF3lqWpRlfHJf7bAKdIoMDbu8mQ2cd0DpBMlTqqsiota
LExzDEA+UH4XX9yN2fUGSMhcl7A/vTqTxo7DAEsMGQcO9tFNr+r72t/3ZtFOFegq
M4FdhqfFqL9oTx1FmEa72cIxFkO2YXEGd6NnMFOty1WmGSlJF4vw/0P2B4wIgi1m
j0LST3NS4pExtFP6ph9l4lu3G7SLQ4u++15qE7myxMRgQiNJ52sFd92hhdX1rzPq
y3S3OCIGXw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj741H2OZRjJS8IoYWIp
zKsSkQtABh1YKYQFZAO/zNLrIcwOf1fYjpf1WN9C3I7WrX6g2HfQ6jAsdp6SYeUo
/d3UwBOb/5jyzcQo91QYCo6B58XqFJT3Xho5tZb6Vlxz7CBuCr6afBCruuxZ1tH6
mLKxcI24tz1Gy3T0GOBL4BY/yfjxQ+FcR9JUWNRjKpTJcIEZntg7awHosruRuoKx
BghHwJUi/TlHtDtRbvvtkYPLN6YXd9RzAw6qr7P6PxbC9r2AF9rOq8CZ8TsLfvtj
+OynfqKaFPEWYoZb02+oDu4xysiUgXZQ/klPLKqs9GunQbDE6emK7Cu3tUbu2eDo
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8239979869272160768036981338351847476
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'openshift.aa64c00bdb034b20964c.eastus.azmosa.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24016330590325446368976115410065156137563514352421397548618783739439312596119696601915730148074724026654201747389426208279951941620219094683139132886802707237229840416143457610382976029520186847095128029061421615420906504780555570712818682828239746926616192533759106293561577137336679701548664389831242587762372903896349400372102169363523970094533357311821445851782175445015335284292788034216556388992283021172272678692682698903594338722874328923534170026897256376136525711679447132184941105727716050324495591898405916653910453674852773585940558755387739044433937764760310070970812792028011111343057353632469628282909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							613a3f545f248fb2d02d91691ce5a906bac42d8f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openshift.aa64c00bdb034b20964c.eastus.azmosa.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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