sgdsca.osc.oracle.com

- Oracle Corporation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:ec:60:7e:9f:81:31:07:d8:39:92:13:b0:9f:95:6a was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Oracle Corporation

Organization: Oracle Corporation
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:ec:60:7e:9f:81:31:07:d8:39:92:13:b0:9f:95:6a
Serial Number (int): 9202707176758441448412942436529050986
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 72:00:cf:dd:13:d8:32:81:4c:af:88:b2:e2:1b:fe:f1:a8:64:94:d7
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 66:11:9e:e8:b9:aa:67:50:4e:e9:21:b8:a4:2b:6f:aa:ef:d1:3e:e1
Fingerprint (sha256): 00:d0:06:59:0d:14:0f:1a:ac:3c:f8:c7:8c:59:1b:36:3b:ad:48:15:33:80:5f:20:fc:a4:db:65:7b:7b:69:8f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate sgdsca.osc.oracle.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sgdsca.osc.oracle.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sgdsca.osc.oracle.com

Other certificates including the domain name oracle.com

(limited to 100 certificates)
dockerhub-eloqua.us.oracle.com
uingv4001.us.oracle.com
wfivm01803.us.oracle.com
monacotest.us.oracle.com
cdpap.oracle.com
msp00adi.us.oracle.com
brmdc-ise-mg-3.aaa.oracle.com
aqaoraapp7.us.oracle.com
kkm00edj.in.oracle.com
den01xjs.us.oracle.com
www-stage.oracle.com
academy-stage.oraclecorp.com
hq-bps-staging-2.us.oracle.com
test.oracle.com
*.db.dc2.c9qaga.us.oracle.com
brmdc04-102-ja2500-1-vip.us.oracle.com
unifiermobile.in.oracle.com
wfdmzvm00629.us.oracle.com
opnec-vpn-us.oracle.com
slc17jyk.us.oracle.com
stg-cloud.oracle.com
championsnews.oracle.com
desktop-alt.osc.oracle.com
tyo-ips-2.jp.oracle.com
ilearningtest.oracle.com
adc-ips-11.us.oracle.com
appwfdmzvm00536.us.oracle.com
whq-ips-1.us.oracle.com
den02pil.us.oracle.com
lb-iad-peonetworking2-gxp-prod.oracle.com
llg00cej.uk.oracle.com
dev-project-log.us.oracle.com
leochat.us.oracle.com
download-secure.oracle.com
aqaoraapp16.us.oracle.com
gmp-dev.oraclecorp.com
pout.no.oracle.com
slc05cty.us.oracle.com
osnstaging-prod.oracle.com
msp52859.us.oracle.com
sgdsca.osc.oracle.com
den00sen.us.oracle.com
brmepoapp02.us.oracle.com
adcfodldap02.oracle.com
utiltw.tw.oracle.com
retailfortify.us.oracle.com
psfdr-prod11g.us.oracle.com
oecet.oracle.com
busgf1203.us.oracle.com
hidmp0761.us.oracle.com
ca-oltf-services-ps.us.oracle.com
den02mbg.us.oracle.com
gmp-dev.oraclecorp.com
utilhk.hk.oracle.com
llg-q2-ips-2.llg.oracle.com
auc02mgr.us.oracle.com
rodgwf02.oracle.com
ngcc-sit-integration.oracle.com
www-legacy-stage.oracle.com
aolesc34.us.oracle.com
odc-addthis-prod-01.oracle.com
jpidgv0001.jp.oracle.com
rws3270880.us.oracle.com
busgl0910.us.oracle.com
jiuhua.cn.oracle.com
*.us1.cloud.oracle.com
bma.us.oracle.com
den02azy.us.oracle.com
hdssimphony.uk.oracle.com
jpsh-expc-2b.jp.oracle.com
salescentral-dev.oraclecorp.com
slc01bgk.us.oracle.com
docs-uat2.us.oracle.com
den00lkj.us.oracle.com
msp00bcg.us.oracle.com
epdc01odgwe02.oracle.com
omm-stage.us.oracle.com
mandaprimavera.oraclecorp.com
dnovmlx44.us.oracle.com
pqa-stage.us.oracle.com
aserp2010.oracle.com
osnstaging.oracle.com
retriever.us.oracle.com
ospct.oracle.com
kkm00ckx.in.oracle.com
slc04yqt.us.oracle.com
mydesktop-mig.oraclecorp.com
championsnews.oracle.com
apex-ext-stg.appoci.oracle.com
rgbu-mfpeecs-qaedc01ab-ext.us.oracle.com
wfdmzvm00555.us.oracle.com
slc10akr.us.oracle.com
lb-drc-nonprod-int.oracle.com
utilus.us.oracle.com
den00gyi.us.oracle.com
userp2040c.us.oracle.com
slc040oodstor17.us.oracle.com
rws3270872.us.oracle.com
*.db.dc2.c9qaga.us.oracle.com
jdash.se.oracle.com

Certificate

The complete raw certificate details for sgdsca.osc.oracle.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGyjCCBbKgAwIBAgIQBuxgfp+BMQfYOZITsJ+VajANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzEwMDYwMDAwMDBa
Fw0yNDEwMTYyMzU5NTlaMHYxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9y
bmlhMRUwEwYDVQQHEwxSZWR3b29kIENpdHkxGzAZBgNVBAoTEk9yYWNsZSBDb3Jw
b3JhdGlvbjEeMBwGA1UEAxMVc2dkc2NhLm9zYy5vcmFjbGUuY29tMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT7XBNmYM5VL4q7g8MdVWOmq+6oYD0DN
kLUylrSINHDx7SUYI8tznKLJ1SpUXzL3pKIP7EROyrcnyMRN3rG7FV/wGXWN0HKb
0dlP7myRqJKkmpP0wHe0a/T1PwSQTgao/86TMclxy9ZyCJ/TjDBBdkMIUGBBEEIs
js/I1ONcs2FR2H7+UbePBIYxeNQr62ZpD328IOXXEdfqXOnVM3pW4+imayDV0W6x
cC/Na6IyC8kqMdN4emj/9DsC9vTGRNxcKbev5GcueOjzUfU1MSetdq69Kgr6G+i6
DpbTnOM2uSxTLr+u+ItMVuG5HSFZ/JxXvCWNtIJsKXD/nQPJ++6yiQIDAQABo4ID
eTCCA3UwHwYDVR0jBBgwFoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0OBBYE
FHIAz90T2DKBTK+IsuIb/vGoZJTXMCAGA1UdEQQZMBeCFXNnZHNjYS5vc2Mub3Jh
Y2xlLmNvbTA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRw
Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRw
Oi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0Ex
LTQuY3JsMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRU
TFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMH8GCCsGAQUFBwEBBHMwcTAkBggrBgEF
BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEkGCCsGAQUFBzAChj1odHRw
Oi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIw
Q0ExLTEuY3J0MAwGA1UdEwEB/wQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsB
aQB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABiwczmqsAAAQD
AEcwRQIgRcr+Elx3WCrfdokYAZdByPsL7Nlru6rJCwWs1cHG1FoCIQD0fBhOJNAc
DZZ2z9114GhP1Qz5hSwCk2V8BtWqyeOQzQB3AEiw42vapkc0D+VqAvqdMOscUgHL
Vt0sgdm7v6s52IRzAAABiwczmpgAAAQDAEgwRgIhAMKMimSwv6/YG8WhQfBRFkgN
nXkwy0f9e4kbZfstb30TAiEA30HFaxdpVvab6OoQqIzTuQ04DR31yad7XiZxMpXb
Q0sAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYsHM5qLAAAE
AwBHMEUCIEzXG1jV53gwwEEABHlCJQKtiEw/PP6zYUPCyuo5CfAgAiEAlFqkVBE3
6s8UzFtyiJeMEsQiWn+dW6M0DCwaDImsAvAwDQYJKoZIhvcNAQELBQADggEBACkp
M2enMP8cMLXFvvwHa7WE9vtjl0PlDFPG+vESZsZyfNHcZGPXO39ubMeGvAyocFO1
8VGvTg/WPqzGt01ANTmPmF7npTKEQsU3r97/cjLFOSQOeQ7/d0Ff/MMUkOZx0fo8
e96Gubh7pH54PYG+2A0zEoqALJzTqCT1oEuKK/j+vzLrekeoMD2xvLmjkaoF3ZJ7
zHgsxPQPxS2KZK7fYTX7ZxK9UtCoZXcX1pP5eRHOWgVYqG5COKfFSCfV/gHqIK8+
esbLzVK9RjSQXeHjy96qFsK75Cb5e1x7OJmlQ0I0fdQYtq/UTz3xlzLpZSppMrrn
lxxZyCHGWE3qFmJYlQ8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT7XBNmYM5VL4q7g8MdV
WOmq+6oYD0DNkLUylrSINHDx7SUYI8tznKLJ1SpUXzL3pKIP7EROyrcnyMRN3rG7
FV/wGXWN0HKb0dlP7myRqJKkmpP0wHe0a/T1PwSQTgao/86TMclxy9ZyCJ/TjDBB
dkMIUGBBEEIsjs/I1ONcs2FR2H7+UbePBIYxeNQr62ZpD328IOXXEdfqXOnVM3pW
4+imayDV0W6xcC/Na6IyC8kqMdN4emj/9DsC9vTGRNxcKbev5GcueOjzUfU1MSet
dq69Kgr6G+i6DpbTnOM2uSxTLr+u+ItMVuG5HSFZ/JxXvCWNtIJsKXD/nQPJ++6y
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9202707176758441448412942436529050986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sgdsca.osc.oracle.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17830588518579783916519413962955943382482684694574996375243436747143971694071924592394439256086043534616033813113069736977665465160687175871193648693808425664977954804523689608069292823243420545492177954961147545719179149027433077378156239340511954471628924021165261253959626672248869588922088752480202708134424056654914750199383902542964650165128646421853464855883910430139119312265849605950945153281462465715160502279442780624592661370504849130173837661636065959332488868605819340136815881939521273816593880290469996854516038937528228256080675633402446650320143603751425009799125417857732968136529959987950484632201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7200cfdd13d832814caf88b2e21bfef1a86494d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgdsca.osc.oracle.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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