wvmqqmxvimsap02.aeth.aetna.com

- Aetna Inc. -

Issued by Aetna Inc. Secure CA2

About this certificate

This digital certificate with serial number 0d:83:2b:2b:7c:2f:fb:ae:a0:4c:e9:7c:6f:cb:6b:cf was issued on by Aetna Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Aetna Inc.

Organization: Aetna Inc.
State / Province: Connecticut
Locality: Hartford
Country: US

Aetna Inc

Organization: Aetna Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:83:2b:2b:7c:2f:fb:ae:a0:4c:e9:7c:6f:cb:6b:cf
Serial Number (int): 17961030422530063168921942121421433807
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f5:e6:00:a8:22:66:cc:05:f7:a0:bf:db:bd:c2:00:91:37:32:2e:59
AuthorityKeyId: b9:ab:44:7a:fc:da:62:1b:09:1f:cf:3b:af:10:4b:89:81:14:63:23

Fingerprint (sha1): f8:38:7b:9a:67:29:61:98:9c:76:e1:59:b7:37:15:9f:f8:17:cf:c2
Fingerprint (sha256): 01:39:a5:08:a0:39:0b:4f:c2:15:1a:4e:5f:83:5f:36:ad:ec:79:c6:86:9b:b5:be:1a:11:45:ff:45:63:f8:fd

Issuing Certificate URL: http://cacerts.digicert.com/AetnaIncSecureCA2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/AetnaIncSecureCA2.crl
CRL Distribution Point: http://crl4.digicert.com/AetnaIncSecureCA2.crl

Check the revocation status for certificate wvmqqmxvimsap02.aeth.aetna.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wvmqqmxvimsap02.aeth.aetna.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wvmqqmxvimsap02.aeth.aetna.com

Other certificates including the domain name aetna.com

(limited to 100 certificates)
hyprprod.aetna.com
leapfrog-ssl-5.gcs-web.com
xrsconm3p.aetna.com
mvmpsccmcmp01.aeth.aetna.com
marketing-healthinsurance.aetna.com
leapfrog-ssl-5.gcs-web.com
DLPTestDevOps017.aetna.com
simplestepslife.aetna.com
prod.MQP591.aetna.com
cbhrcwss.aetna.com
stressapih6.aetna.com
dlptest020619.aetna.com
cats.ws.aetna.com
www.weaselect.aetna.com
client-v3wire.relaystaging.com
deviis117.aetna.com
test.MQT490.aetna.com
proddynamocm.aetna.com
strapi03mgr.int.aetna.com
test.MQT577.aetna.com
apipm.aetna.com
accessupgrade.art.aetna.com
www.bmshc.aetna.com
xaclddatapwr3q.aetna.com
eaz1eamppp10p.aetna.com
HFD-WC-VDC-2N.aetna.com
test.MQX023.aetna.com
obor-tpam.dev.ws.aetna.com
IndvRestIdMntSvc.ws.qa.aetna.com
MVMQAHHBEIS01.aeth.aetna.com
prod.MQP302.aetna.com
aebsqa2.aetna.com
lb2iib-sslhc-nonprod.aetna.com
webstats.aetna.com
test.MQS416.aetna.com
devstarsprovider.aetna.com
qa3ratebor.aetna.com
devdocs.aetna.com
api.aetna.com
qaintlweb.aetna.com
nab-az-vc02.aetna.com
WVMPQUMUVNEAP02.aeth.aetna.com
prod2ntlmauth.aetna.com
apih3.aetna.com
0628test-a.aetna.com
nice-ahm.aetna.com
agrc.aetna.com
ae94.aetna.com
sqacxt5-ws-pdloader.aetna.com
AHHBIDev.aetna.com
xaclddatapwr1d.aetna.com
vidg-m5qmgt.aetna.com
test.MQS570.aetna.com
WVMPQMXVSATAP01.aeth.aetna.com
amazon.aetna.com
transmitqa.aetna.com
mvmtcgaautoap01.aeth.aetna.com
federation.aetna.com
WVMPQMXVSAAAP05.aeth.aetna.com
drivertool.qa.ws.aetna.com
wvmqqmxvimsap02.aeth.aetna.com
devbawwc.aetna.com
ot.aetna.com
devappdynamics.aetna.com
prod.MQP425.aetna.com
xhadrepm2d.aetna.com
win-acs-wlan2-1.aetna.com
mvmpqmxvimsap02.aeth.aetna.com
teotest3.aetna.com
simplestepslife.aetna.com
devext.aetna.com
cloud.art.aetna.com
hepayorpreprod.aetna.com
www.aetna.com
salesforce.qapath3a.api.aetna.com
mvmpqmint20ap01.aeth.aetna.com
midpqmapsis02.aeth.aetna.com
MIDE-GSLBE-001-mgmt.aetna.com
prdyncm.aetna.com
trgvoluntary.aetna.com
qamember.aetna.com
test.MQQ341.aetna.com
prod.MQP376.aetna.com
PMDRDEV.aetna.com
mvmqnextitcap01.aeth.aetna.com
xnifiw1p.aetna.com
*.odbc.prodml.aetna.com
qaaetssomobile.aetna.com
stress2scm.aetna.com
wvmqaeirsis01.aeth.aetna.com
Dev2AFAAcctgservice.aetna.com
eimg.aetna.com
devci.aetna.com
test.MQQ830.aetna.com
stealthwatch-2.aetna.com
triplab.aetna.com
qa5701mbuqnxtapps.aetna.com
xtranet50.aetna.com
backupAgent.aetna.com
WVMTMDCE007IS01.aeth.aetna.com

Certificate

The complete raw certificate details for wvmqqmxvimsap02.aeth.aetna.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIQDYMrK3wv+66gTOl8b8trzzANBgkqhkiG9w0BAQsFADBB
MQswCQYDVQQGEwJVUzESMBAGA1UEChMJQWV0bmEgSW5jMR4wHAYDVQQDExVBZXRu
YSBJbmMuIFNlY3VyZSBDQTIwHhcNMTgwNzIzMDAwMDAwWhcNMjAwNzI5MTIwMDAw
WjB0MQswCQYDVQQGEwJVUzEUMBIGA1UECBMLQ29ubmVjdGljdXQxETAPBgNVBAcT
CEhhcnRmb3JkMRMwEQYDVQQKEwpBZXRuYSBJbmMuMScwJQYDVQQDEx53dm1xcW14
dmltc2FwMDIuYWV0aC5hZXRuYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCbYQyRM4PUy9xyiBhceKtBXIgD4wRc00GtvDXm2nBdhlpxr+/fGKV3
7Khek6js+V/RvU49ChenCs7k9NL/F3iknRyV9n/Z+wLYr+3We1LkIz6XpLlx6Z7a
TY7zPfq3v7Yd71v4khQJDLqTfmfZ+V6oP45++xbmKygsVmPJDcu5ZQmUYEECxM0y
w6y4Erj8JTdLZ8LXiOUDlbFs2j+WivphZ/E/ECMGxz6FvfshtRKmFEOZ8zFztEiR
jVxxqafEC00Q6KZld8+g4+UssEqsRBbfHnafaYFtGLhK3wJzMaDhrrQF2HtfTqs+
uVUi3aB5q63fzFc9iXlXsL8Edyg8/0vzAgMBAAGjggH7MIIB9zAfBgNVHSMEGDAW
gBS5q0R6/NpiGwkfzzuvEEuJgRRjIzAdBgNVHQ4EFgQU9eYAqCJmzAX3oL/bvcIA
kTcyLlkwKQYDVR0RBCIwIIIed3ZtcXFteHZpbXNhcDAyLmFldGguYWV0bmEuY29t
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
dQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0FldG5h
SW5jU2VjdXJlQ0EyLmNybDA0oDKgMIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29t
L0FldG5hSW5jU2VjdXJlQ0EyLmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAq
MCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeB
DAECAjBzBggrBgEFBQcBAQRnMGUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRp
Z2ljZXJ0LmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZGlnaWNlcnQu
Y29tL0FldG5hSW5jU2VjdXJlQ0EyLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB
1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDDf40mTYqwf/dBlSOPv7kq
+lcEimfH5anvUDtr99AeLVYYZKDMA3AeKc4PIhhEhO0BvzrQ/usfIKtALfcY2Gsy
uIEmDqCXAkxXavPa0SHVf/ZnSYEmrQDyfwOBm2Qh+o4suj7RB+KZVgdWSc7CKn5b
v65wOUDPQHe9OMbeR3GjrNLJ1BPbD9bzqDLx4C1mnnIKTLcYs7X527xhvvmNQnsj
llLkXHgum//s2ixlCsfWWj5ZqJ/WD0Jf72W7N1MtLizdJkmEqhcrd9N7vwwKXlnl
wxcJNJTRbNopNwSxI42ldMOucGWX53Q8eY+W8+gEzYQJOSZWvoZIp3HmdKgpKelr
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2EMkTOD1MvccogYXHir
QVyIA+MEXNNBrbw15tpwXYZaca/v3xild+yoXpOo7Plf0b1OPQoXpwrO5PTS/xd4
pJ0clfZ/2fsC2K/t1ntS5CM+l6S5ceme2k2O8z36t7+2He9b+JIUCQy6k35n2fle
qD+OfvsW5isoLFZjyQ3LuWUJlGBBAsTNMsOsuBK4/CU3S2fC14jlA5WxbNo/lor6
YWfxPxAjBsc+hb37IbUSphRDmfMxc7RIkY1ccamnxAtNEOimZXfPoOPlLLBKrEQW
3x52n2mBbRi4St8CczGg4a60Bdh7X06rPrlVIt2geaut38xXPYl5V7C/BHcoPP9L
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17961030422530063168921942121421433807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aetna Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aetna Inc. Secure CA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hartford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aetna Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wvmqqmxvimsap02.aeth.aetna.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19614793959954724561299245673311305955780466198884081068756400964430250524265514096061661083269119937991430353267106011755560837866388853781314381222945027822076362604534603305836475620617490224461565897269187991167349954894572254957977802451945556724693748928282455550455739974508858195834161742157160642438728372126591100017636301425973277930796385322864934627424577580937426899160708162115752073416386017834395824131351716309922357674897605446599821165187609818977948884733728861352565281502877628324776660668238974258353986094084044375904466296616400870969211994606495422267202721545941504294443329906633842052083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b9ab447afcda621b091fcf3baf104b8981146323
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f5e600a82266cc05f7a0bfdbbdc2009137322e59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvmqqmxvimsap02.aeth.aetna.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/AetnaIncSecureCA2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/AetnaIncSecureCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/AetnaIncSecureCA2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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