prod-billing-kube-expressgateway-west.verizon.com

- Verizon Data Services LLC -

Issued by DigiCert Baltimore CA-2 G2

About this certificate

This digital certificate with serial number 03:57:4a:b1:66:79:c2:b7:d8:67:c2:b5:4a:bd:e8:1c was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Verizon Data Services LLC

Organization: Verizon Data Services LLC
Organization unit: IT Security
State / Province: Florida
Locality: Temple Terrace
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:57:4a:b1:66:79:c2:b7:d8:67:c2:b5:4a:bd:e8:1c
Serial Number (int): 4440928767457383427188756174136535068
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: af:47:9a:d5:8f:be:52:93:bb:ce:df:ce:a5:63:fd:64:95:a6:e4:34
AuthorityKeyId: c0:12:b2:28:74:68:46:67:e9:70:25:74:1a:00:45:5b:06:7d:5c:44

Fingerprint (sha1): 65:f3:2f:1f:75:5a:30:e8:f0:d5:45:cb:0f:35:73:47:39:cc:66:07
Fingerprint (sha256): 00:65:38:f4:1c:fe:b7:bb:43:2e:66:fe:72:9a:45:45:ef:bf:96:99:68:8e:b1:0e:c5:eb:8b:ae:0d:cd:b5:47

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl

Check the revocation status for certificate prod-billing-kube-expressgateway-west.verizon.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod-billing-kube-expressgateway-west.verizon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod-billing-kube-expressgateway-west.verizon.com
prod-billing-kube-expressgateway.verizon.com

Other certificates including the domain name verizon.com

(limited to 100 certificates)
rssxuat2.ebiz.verizon.com
rssxuat2.ebiz.verizon.com
utesoauat2.ebiz.verizon.com
myvzlimitedtofull-sit-west.ebiz.verizon.com
SACU1LZEU9A03V.vzh.ent.verizon.com
p3srv-uat-t3.ebiz.verizon.com
63.21.80.28.vpc.verizon.com
f4gfhdcpa01.verizon.com
rssxuat2.ebiz.verizon.com
rsnv-k8s-np.ebiz.verizon.com
CO-Denver-1555BlakeSt-VZT.verizon.com
tpawpgkdva006-ilo.verizon.com
sunscda1.verizon.com
10-118-231-73.ebiz.verizon.com
evcservices-awseast.verizon.com
a1ufrdstw02.ebiz.verizon.com
2wayssl-vipxmlapi-to-mobiwm2.verizon.com
10-118-9-172.ebiz.verizon.com
uc-impres-pub-ne1.telecom.ouroath.com
rssxuat3.ebiz.verizon.com
10-119-224-179.ebiz.verizon.com
rssxuat1.ebiz.verizon.com
rssxdev3.ebiz.verizon.com
dcrmsace.verizon.com
rssxuat1.ebiz.verizon.com
sapportal.vsap.verizon.com
TPAWSICGVA070.ebiz.verizon.com
vzw2anpappidxcm.ebiz.verizon.com
rssxdev4.ebiz.verizon.com
63-21-72-221.ebiz.verizon.com
vz-vdhv-elb-enva.ebiz.verizon.com
tdclpeg1va017.verizon.com
eRepair-CD-BHR-UATCreation.ebiz.verizon.com
smarthub.verizon.com
vzc-stg1-vault-media.svcs.verizon.com
mdagwebprx01.verizon.com
paloalto2.verizon.com
vzw2bprdtmcidx32.vpc.verizon.com
mbdev2.ebiz.verizon.com
10-118-43-252.ebiz.verizon.com
delfdtw9.ebiz.verizon.com
ivatpasta01.ebiz.verizon.com
myverizonenterprise-ITTEST-eastorigin.verizon.com
openedge-tb1-regnva-fb1.verizon.com
atomcommon.verizon.com
gcs-tr.verizon.com
rssxuat1.ebiz.verizon.com
tdcwdcjwva01.tdc.vzwcorp.com
dt2fdta1.ebiz.verizon.com
rssxuat3.ebiz.verizon.com
*.cucdm.verizon.com
144-8-228-49.vpc.verizon.com
rssxdev3.ebiz.verizon.com
vanity3.lithium.com
efco.verizon.com
rssxdev4.ebiz.verizon.com
tdcwpct9va002.verizon.com
tpalpecqva018.verizon.com
nyhmpsa01pub01.verizon.com
143-251-44-161.vpc.verizon.com
10-118-35-15.ebiz.verizon.com
locus-informatica.ebiz.verizon.com
prod-billing-kube-taxexplanation-east.verizon.com
ivappwebservices1.verizon.com
10-118-0-160.ebiz.verizon.com
10-118-42-230.ebiz.verizon.com
10-119-3-51.ebiz.verizon.com
maauth003.verizon.com
dcrmgdssit.ebiz.verizon.com
tdclpgqzva087.verizon.com
rssxdev3.ebiz.verizon.com
qa1tz1-smrws1-oci-ad2.ebiz.verizon.com
billdirect.verizon.com
rssxdev3.ebiz.verizon.com
vz-vdhv-enve.ebiz.verizon.com
63-21-88-213.vpc.verizon.com
hnmscp04.verizon.com
fldlpecqva018.verizon.com
locus-pbspectrum-a.ebiz.verizon.com
vipr.verizon.com
uc-vcs-e2-ne1.telecom.ouroath.com
nmtest7.verizon.com
awsnplogsearch1.ebiz.verizon.com
bgnvdevext-east-yz.ebiz.verizon.com
mnte3aws.ebiz.verizon.com
rssxdev3.ebiz.verizon.com
fltmtrvzwfin18b.verizon.com
abrdmdf03vsgd01.verizon.com
rssxuat2.ebiz.verizon.com
rssxuat2.ebiz.verizon.com
apnv-baaisn-uat-west.ebiz.verizon.com
artotxfgcvsrv02.verizon.com
acdbre.verizon.com
rssxuat2.ebiz.verizon.com
wholesalegw4-fdc.verizon.com
prod-billing-kube-expressgateway-west.verizon.com
rssxdev3.ebiz.verizon.com
sacise1.verizon.com
mobilitycosell.verizon.com
rssxuat2.ebiz.verizon.com

Certificate

The complete raw certificate details for prod-billing-kube-expressgateway-west.verizon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp7Nkm/S7QHCX/FWDEQz
FJAFel1fW6S0SbskegvNwD/h4MOCXz3BQM7S92Ex6gW3+zRtzG1o1QHDwcaBe2qi
Z9quKU5fu5GxLankzM9ht284FVWLxD3LzUqbaib6qFfyRP2kH/RwA7Xf722bW26/
PwrIDBDxJLcz0Yniil9CyzBg+CgOvPmFCH3f9Q8bEq4OZ7xTZukmRIJqOPiK7xbE
aRBdS05UuSSotjuEAlshAHl9W5FRlKpwO9JKMKmrw3ykh+icrSGQVuC9r+kBlwmT
jGAYXnjZf/lz5sA1HsY6sdNcrStTrUO0EwyVr4VG9QUFBwUNig6Wt0b+6YisNU9u
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4440928767457383427188756174136535068
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Baltimore CA-2 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Temple Terrace'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Data Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod-billing-kube-expressgateway-west.verizon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24063586629196716494419093487149915476764560363532760369687811201655942217680805529642816868364991130383221965172407540446184979718379238504052497128943358920227620372965907234500836147400085882617719003092482189516102238149041831430323183756850210649397000186202046975811854648801134493634182669277729856894815981743511041024394658129793670221525157894131791626160329757822344528637074367929996710931759187772709728166227202337272797216761865657353606983375005283672825429077671525400419079992036847508619010316562310194965688328226691430125524863236079222181114424299463772728879212658571268526238230268695758728807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c012b22874684667e97025741a00455b067d5c44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af479ad58fbe5293bbcedfcea563fd6495a6e434
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-billing-kube-expressgateway-west.verizon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-billing-kube-expressgateway.verizon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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