oa.gmcr.com

- Keurig Green Mountain, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0d:5e:10:36:b4:bf:8f:a9:d5:00:f8:99:9d:a7:1c:d0 was issued on by DigiCert Inc.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Keurig Green Mountain, Inc.

Organization: Keurig Green Mountain, Inc.
State / Province: Vermont
Locality: Waterbury
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:5e:10:36:b4:bf:8f:a9:d5:00:f8:99:9d:a7:1c:d0
Serial Number (int): 17768368702719499372476217873731624144
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 88:ac:f2:3c:7b:cb:7b:76:ee:92:4c:b7:45:40:44:1a:e9:33:d3:50
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 41:18:0e:41:d3:80:a5:d5:d0:12:ec:bc:32:2a:87:11:ee:f1:87:c2
Fingerprint (sha256): 01:25:40:c8:3d:2a:90:3b:40:72:37:1f:c3:e6:95:5b:51:ca:e1:0d:7d:08:70:db:c2:7b:0c:8a:5a:96:f1:98

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate oa.gmcr.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oa.gmcr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oa.gmcr.com
webmail.gmcr.com
webmail.keurig.com
autodiscover.gmcr.com
autodiscover.keurig.com
Autodiscover.lauthentiqueposecafe.com
autodiscover.cafeh2o.com
Autodiscover.vanhoutte.com
hybrid.gmcr.com
Mobile.gmcr.com
smtp.gmcr.com
Ews.sbl.gmcr.com

Other certificates including the domain name gmcr.com

(limited to 100 certificates)
intranet.gmcr.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
oa.gmcr.com
www.greenmountaincoffee.com
iwa.dpsgit.com
kspgplvwebap03.gmcr.com
www.keurig.com
rmisvcs.gmcr.com
fs.keurig.com
gurpreet.gmcr.com
www.greenmountaincoffee.com
b2bservices.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
rds.keurig.com
*.gmcr.com
*.gmcr.com
www.gmcr.com
*.gmcr.com
www.keurig.com
kspgplvwebap01.gmcr.com
GMCRPUB-ms.gmcr.com
www.keurig.com
vpnb.gmcr.com
*.gmcr.com
gmcrvcse.gmcr.com
b2bservices.gmcr.com
kronos.gmcr.com
www.keurig.com
gmcrvcse.gmcr.com
gmcrvcsc.gmcr.com
www.gmcr.com
keudvwesapp02.gmcr.com
dmilwin2004.gmcr.com
*.dc4enexusnp.gmcr.com
GMCRCNXPUB-ms.gmcr.com
dc4enexusnp.gmcr.com
mazdvcdprpi01.gmcr.com
www.greenmountaincoffee.com
GMCRCUP.gmcr.com
*.gmcr.com
GMCRCNXPUB.gmcr.com
webmail.gmcr.com
*.gmcr.com
vpn-vt.gmcr.com
www.keurig.com
www.greenmountaincoffee.com
kbrlpavvbkif01.gmcr.com
connectedtechniciandev.gmcr.com
owa.gmcr.com
gmcrvcse.gmcr.com
*.gmcr.com
drew.gmcr.com
www.gmcr.com
fs.keurig.com
webfiles.gmcr.com
iwa.gmcr.com
www.keurigdrpepper.com
www.gmcr.com
*.gmcr.com
connectedtechnicianservices.gmcr.com
iwa.dpsgit.com
rds.keurig.com
oa.gmcr.com
kgocpavwbcap01.gmcr.com
www.keurig.com
oa.gmcr.com
gmcrvcsc.gmcr.com
gmcr.com
gmcrvcsc2.gmcr.com
dmilwin2004.gmcr.com
gmcrvcse2.gmcr.com
www.greenmountaincoffee.com
footprints.gmcr.com
KWLSPDPSTOSW01.gmcr.com
fs.keurig.com
GMCRCUP.gmcr.com
DMILWIN2004.gmcr.com
hvac.gmcr.com
KSPGDWVMESAP03.gmcr.com
www.gmcr.com
www.gmcr.com
www.keurig.com
connectedtechnicianuat.gmcr.com
www.gmcr.com
dmilwin2004.gmcr.com
GMCRCNXPUB-ms.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
dc4ejenkinsprod1.gmcr.com
www.gmcr.com
www.gmcr.com
*.gmcr.com
support.gmcr.com
GMCRPUB-ms.gmcr.com
connectedtechnicianservices.gmcr.com
kknxpwvwesap01.gmcr.com

Certificate

The complete raw certificate details for oa.gmcr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgIQDV4QNrS/j6nVAPiZnacc0DANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0yMDAyMjYwMDAwMDBaFw0yMjAzMDkxMjAwMDBa
MG8xCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdWZXJtb250MRIwEAYDVQQHEwlXYXRl
cmJ1cnkxJDAiBgNVBAoTG0tldXJpZyBHcmVlbiBNb3VudGFpbiwgSW5jLjEUMBIG
A1UEAxMLb2EuZ21jci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSqe9coofIlS3OoMfPJahGbN9MMMHSr0scyDBT5o3YNDRz8F3nVlQfEGDokmj/
Pchgq/SS/LhlbDYJLn2lcS2V+cmixHRU/DskLXnCRVGk7OlaMn336v7BWsDngHe0
e3myVdF/vrm4WwCxtjvlbKqc/PUhBe9GQcy+bs6z9ppMnuBXe64Cx9EJhcq6Lbbn
WrWaO+BhoFMGBY9dDgXtkvYltbWXYRP7KPQdaJ24rJy2w2yHVyNuBV0sFeMv8G4s
7TjSA8R2yXMZ9O/0VRFxxTUbk5qLurLQvnHApTHrqc3d6zq0/TSeyJUJwu4xrrSo
od3D1FmQJ4EUF+EWfXRVT/jJAgMBAAGjggL1MIIC8TAfBgNVHSMEGDAWgBRRaP+Q
rwIHdTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQUiKzyPHvLe3bukky3RUBEGukz01Aw
ggEQBgNVHREEggEHMIIBA4ILb2EuZ21jci5jb22CEHdlYm1haWwuZ21jci5jb22C
EndlYm1haWwua2V1cmlnLmNvbYIVYXV0b2Rpc2NvdmVyLmdtY3IuY29tghdhdXRv
ZGlzY292ZXIua2V1cmlnLmNvbYIlQXV0b2Rpc2NvdmVyLmxhdXRoZW50aXF1ZXBv
c2VjYWZlLmNvbYIYYXV0b2Rpc2NvdmVyLmNhZmVoMm8uY29tghpBdXRvZGlzY292
ZXIudmFuaG91dHRlLmNvbYIPaHlicmlkLmdtY3IuY29tgg9Nb2JpbGUuZ21jci5j
b22CDXNtdHAuZ21jci5jb22CEEV3cy5zYmwuZ21jci5jb20wDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSg
MqAwhi5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYu
Y3JsMDSgMqAwhi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2
ZXItZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEW
HGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMIGDBggrBgEF
BQcBAQR3MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBN
BggrBgEFBQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0
U0hBMkhpZ2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADATBgor
BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRUxlJaDgASViJ9j
3x/aY2563QZKvDKClHYGSQN4M8VuDqxTBcqNS4hw1mYGg0+DklGn3OjpQnaRJPQO
XJbFZlkBjGf3AXdqyNkkQCALp6y4Myoyhci9G2cfST5lbwUt1rt7YJtjPq0fOYTS
gZ8DfyMk2HTJEVhQ4xHKzETqk5LdwMMcI2OVq6jPvBZPdT/P+Mo6JWNrOrug/lQt
aEBXosNErKDWzUwKd74vo+A8kFU3OVgowU8G8YirqzMEY2baVOhtjp0NDDNHxf7q
H+XDilHDd/28VAIHhunRhFJQngs512EvQbBy0/pZcMD/32CRHn3QRhYWpzSI2aJZ
K5kxlw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qnvXKKHyJUtzqDHzyWo
RmzfTDDB0q9LHMgwU+aN2DQ0c/Bd51ZUHxBg6JJo/z3IYKv0kvy4ZWw2CS59pXEt
lfnJosR0VPw7JC15wkVRpOzpWjJ99+r+wVrA54B3tHt5slXRf765uFsAsbY75Wyq
nPz1IQXvRkHMvm7Os/aaTJ7gV3uuAsfRCYXKui2251q1mjvgYaBTBgWPXQ4F7ZL2
JbW1l2ET+yj0HWiduKyctsNsh1cjbgVdLBXjL/BuLO040gPEdslzGfTv9FURccU1
G5Oai7qy0L5xwKUx66nN3es6tP00nsiVCcLuMa60qKHdw9RZkCeBFBfhFn10VU/4
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17768368702719499372476217873731624144
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vermont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterbury'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Keurig Green Mountain, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oa.gmcr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26593842118142428742853824571239168003404873351770868650573505044382694629036156456210736787167002288754152703755492614729254784186040184942012034789303822125307874475837861348759345866588549448780829223818559624278993804215569126173680538156565908076524060678212978216129521595702968977167831208820108071440060871250422867670945568024013331580769933630687926889868187834620803549416020620185510884763881259920898275245052452406538051078505187095880411827748521295602496290024319480230451817573822176638520932557956692968747278298406253510168576229374352698704964485954540397003078741668488205866073432377352682207433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88acf23c7bcb7b76ee924cb74540441ae933d350
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (263 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oa.gmcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.gmcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gmcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.lauthentiqueposecafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cafeh2o.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.vanhoutte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hybrid.gmcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Mobile.gmcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.gmcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Ews.sbl.gmcr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a11531949683800495889f63df1fda636e7add064abc328294760649037833c56e0eac5305ca8d4b8870d66606834f839251a7dce8e942769124f40e5c96c56659018c67f701776ac8d92440200ba7acb8332a3285c8bd1b671f493e656f052dd6bb7b609b633ead1f3984d2819f037f2324d874c9115850e311cacc44ea9392ddc0c31c236395aba8cfbc164f753fcff8ca3a25636b3abba0fe542d684057a2c344aca0d6cd4c0a77be2fa3e03c905537395828c14f06f188abab33046366da54e86d8e9d0d0c3347c5feea1fe5c38a51c377fdbc54020786e9d18452509e0b39d7612f41b072d3fa5970c0ffdf60911e7dd0461616a73488d9a2592b993197