connect.bgcpartners.com

- BGC Partners, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:7a:3f:8e:7f:8e:4b:28:56:60:af:39:e9:01:f6:63 was issued on by DigiCert Inc.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BGC Partners, Inc.

Organization: BGC Partners, Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:7a:3f:8e:7f:8e:4b:28:56:60:af:39:e9:01:f6:63
Serial Number (int): 8610117273131469924152456464830690915
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 00:ed:ea:fb:f4:7b:6e:2f:e2:a7:55:80:0a:b0:af:4a:8a:f2:bf:b8
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 27:76:bc:15:91:87:72:01:ad:2c:db:e7:7d:a4:90:28:f0:4d:fd:e6
Fingerprint (sha256): 01:43:95:e8:f1:c1:08:c4:a3:39:e5:a2:c1:06:00:56:45:d7:57:8f:16:e7:d2:16:6c:fd:84:53:c7:60:e6:06

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate connect.bgcpartners.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connect.bgcpartners.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connect.bgcpartners.com
pulse.ngkf.com
pulse.bgcpartners.com
connect.ngkf.com
connect.cantor.com
vendorconnect.bgcpartners.com
help.bgcpartners.com
help.ngkf.com
pulse.cantor.com
ra-amer2.cfinfrastructure.com
ra-amer3.cfinfrastructure.com
ra-amer1.cfinfrastructure.com
ra-emea1.cfinfrastructure.com
ra-emea2.cfinfrastructure.com
ra-apac1.cfinfrastructure.com
ra-apac2.cfinfrastructure.com

Other certificates including the domain name bgcpartners.com

(limited to 100 certificates)
connect.bgcpartners.com
gv.bgcpartners.com
connect.bgcpartners.com
fs.bgcpartners.com
autodiscover.bgcpartners.com
fs.bgcpartners.com
*.bgcpartners.com
stp.bgcpartners.com
*.bgcpartners.com
NJ2XPVIMP0815.amer.mra.bgcpartners.com
sip.bgcpartners.com
*.bgcpartners.com
nj2xpvexpe0817.amer.mra.bgcpartners.com
stp.bgcpartners.com
mfa.bgcpartners.com
NJ2XPVCUCM0812.amer.mra.bgcpartners.com
NJ2XPVCUCM0812.amer.mra.bgcpartners.com
stp.bgcpartners.com
nj2xpvexpc0816.amer.mra.bgcpartners.com
cttr-shrd-cndtr-02.cms.bgcpartners.com
tbpvexpe0819.amer.mra.bgcpartners.com
NJ2XPVCUC0814.amer.mra.bgcpartners.com
owa.amer.bgcpartners.com
NJ2XPVIMP0815-ms.amer.mra.bgcpartners.com
tboos.amer.bgcpartners.com
unavista.bgcpartners.com
nj2xpvexpc0818.amer.mra.bgcpartners.com
komand.bgcpartners.com
connect.bgcpartners.com
tbpinfgtrap01.bgcpartners.com
autodiscover.bgcpartners.com
mobileiron.bgcpartners.com
*.bgcpartners.com
hr.bgcpartners.com
logging.bgcpartners.com
tbpvexpc0816.amer.mra.bgcpartners.com
hr.bgcpartners.com
NJ2XPVIMP0815.amer.mra.bgcpartners.com
pulse.bgcpartners.com
nj2xpvexpe0819.amer.mra.bgcpartners.com
bgccscmg.bgcpartners.com
edge2.emea.mra.bgcpartners.com
bgccmg.bgcpartners.com
sentry.bgcpartners.com
edge1.emea.mra.bgcpartners.com
basemetals.bgcpartners.com
fs.bgcpartners.com
tbpinfgtrap01.bgcpartners.com
bgccscmg.bgcpartners.com
*.bgcpartners.com
*.bgcpartners.com
NJ2XPVCUCM0812.amer.mra.bgcpartners.com
mfaint.bgcpartners.com
connect.bgcpartners.com
mobileiron.bgcpartners.com
*.bgcpartners.com
owa.amer.bgcpartners.com
sip.bgcpartners.com
basemetals.bgcpartners.com
*.bgcpartners.com
stp.bgcpartners.com
stp.bgcpartners.com
stp.bgcpartners.com
owa.amer.bgcpartners.com
securemail.cantor.com
pulse.bgcpartners.com
owa.apac.bgcpartners.com
edge1.emea.mra.bgcpartners.com
sts.bgcpartners.com
download.bgcpartners.com
*.bgcpartners.com
tboos.amer.bgcpartners.com
edge1.emea.mra.bgcpartners.com
tbpvexpe0817.amer.mra.bgcpartners.com
owa.emea.bgcpartners.com
sgp.basemetals.bgcpartners.com
connect.bgcpartners.com
us.basemetals.bgcpartners.com
autodiscover.bgcpartners.com
nj2x-shrd-cndtr-01.cms.bgcpartners.com
edge2.emea.mra.bgcpartners.com
nj2xpvexpe0817.amer.mra.bgcpartners.com
webmail.espeed.co.uk
datastream.bgcpartners.com
owa.amer.bgcpartners.com
owa.amer.bgcpartners.com
sgp.basemetals.bgcpartners.com
sts.bgcpartners.com
us.basemetals.bgcpartners.com
stp.bgcpartners.com
pulse.bgcpartners.com
connect.bgcpartners.com
stp.bgcpartners.com
connect.bgcpartners.com
dcp.bgcpartners.com
us.basemetals.bgcpartners.com
fxcreditlimit.bgcpartners.com
autodiscover.bgcpartners.com
stp.bgcpartners.com
login-poten.bgcpartners.com

Certificate

The complete raw certificate details for connect.bgcpartners.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGrzgGOY82vMi0RYgtAy
VAheNqnIX5u1EdrpUndd69XsfttZxnUVYJEttaKx/xZrHftf4b0ilEvo4J4Yz4QB
fuNWVEfpBWfmXbMxNrxxEPjzTMSORNuOs4rcDJ5npY9SPXF8pmHnDnxY/ZtzxDrj
tpYjhLGlJwn6dPKmuJEF2ZPjdzsAeD1w6hno4DxBrFSkMPlhMbO/1zC/4l/kmfJ1
IouxjoY8vx77ajbn3atJtSM3YWB5iMCcpdSbW62o1Ljwg6MtprYhKVG0QeKaP4gF
femaCunACmmfwKlK+wFA4rgyeDJSmC4CkKdzJpxqgtX0UWdAjrxWdr94u+GT0lf1
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8610117273131469924152456464830690915
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BGC Partners, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connect.bgcpartners.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19745915166115472022958695104457760101739240720875794433109173220437785334378122419082537467929213502052459088228647220232313050054866222640166697106397030874230571680967680639384737157942066338649215838372725300585881706701060468590703591166959916032408695583386718388269004266039752526372235517400474421954490704146283264827638340617572653804894642546953463863144474632722741960486497604646936749515793600175136022237601932433619732889479183894915655964682387545487039205327082134143890604685117278105401327028297195063424318560511033579565229984401820614928454872111167198320425650174084995345623303351916842972641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00edeafbf47b6e2fe2a755800ab0af4a8af2bfb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (409 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.bgcpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse.ngkf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse.bgcpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ngkf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cantor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendorconnect.bgcpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.bgcpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.ngkf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse.cantor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra-amer2.cfinfrastructure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra-amer3.cfinfrastructure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra-amer1.cfinfrastructure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra-emea1.cfinfrastructure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra-emea2.cfinfrastructure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra-apac1.cfinfrastructure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ra-apac2.cfinfrastructure.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001710d4d101e0000040300463044022041315647cc11356aaa3640b741b1c7a90f4ef6a71827791bb0172a3335b14be602207f45d8f73b6dcbbd41c9819c3831937b30a4b299452f88741fba2e7526d9f5530076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001710d4d106f00000403004730450221009ea76473109bc6e6692c263b5f32612f0bbdd6104018fab9d1972fc998cc0e00022060de9ccda5aacb3e96dff49bc56657c0da66f20d12d15676314ee9674a8a3057
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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