enclave.byu.edu

- Brigham Young University -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 0e:73:c5:a6:44:d5:aa:04:b4:d3:d1:93:35:c0:61:40 was issued on by DigiCert Inc.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Brigham Young University

Company registration number: 565683-0140
Organization: Brigham Young University
State / Province: Utah
Locality: Provo
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:73:c5:a6:44:d5:aa:04:b4:d3:d1:93:35:c0:61:40
Serial Number (int): 19210314887590508901436297457711472960
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b6:a8:a3:1d:13:f2:14:de:6a:0d:98:de:7e:79:65:7d:70:e2:ce:9f
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): e2:ee:c3:4b:97:dd:06:04:39:92:94:82:3d:56:37:b4:62:bf:45:11
Fingerprint (sha256): 01:56:78:88:cb:8c:76:d8:10:05:31:b7:a7:f1:e0:d3:16:42:6a:a2:53:53:eb:90:e1:fb:b4:f4:0b:01:f6:98

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate enclave.byu.edu

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for enclave.byu.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

enclave.byu.edu
alumni.byu.edu
emeriti.byu.edu
byudiscounts.byu.edu
fooddrive.byu.edu
c2g.byu.edu
guesthoust.byu.edu
hinckleycenter.byu.edu
capsandgowns.byu.edu
homecoming.byu.edu
studentalumni.byu.edu
chapters.byu.edu
licensing.byu.edu
connect.byu.edu
lunch.byu.edu
byuconnect.byu.edu
rise.byu.edu
dayofcaring.byu.edu
alumni3.byu.edu
alumnicareers.byu.edu
aspen.byu.edu
aspengrove.byu.edu
byums.byu.edu
ur.byu.edu
watch4cougars.byu.edu
toolbox.byu.edu

Other certificates including the domain name byu.edu

(limited to 100 certificates)
mentoring.byu.edu
cdt.byu.edu
ifip.byu.edu
is.byu.edu
*.byu.edu
emsweb-dev.byu.edu
byu-oit-swat-trn.amazon.byu.edu
elcwriter.byu.edu
civatthemoa.byu.edu
print-drivers.byu.edu
byu7.domains.byu.edu
homecoming.byu.edu
arts-sandbox.cfacarts.byu.edu
jdtobe.byu.edu
helium13-idrac.byu.edu
crashplan.byu.edu
sup.osc.byu.edu
magiccvs.byu.edu
*.sim-dev.byu.edu
ysa49th.byu.edu
fhtl.byu.edu
titanium12-idrac.byu.edu
byu-oit-paymentsystems-dev.amazon.byu.edu
spacecraft.byu.edu
dev.byu.edu
phdprep.byu.edu
humanities.byu.edu
www.idealabs.byu.edu
humanities.byu.edu
cpcalendars.byucougarcapital.org
jpf.byu.edu
humwp-farm.byu.edu
employee.osc.byu.edu
corpusconference.byu.edu
oare.byu.edu
scholarsarchive.byu.edu
ifip.byu.edu
training.titleix.byu.edu
uconnectlabs.com
jrcb-event-scheduler.byu.edu
test.byu-org-trn.amazon.byu.edu
byu-dept-hawaii-dev.amazon.byu.edu
marvin.byu.edu
bluto.cs.byu.edu
loginerror.byu.edu
avi.fhtl.byu.edu
enclave.byu.edu
panda.byu.edu
*.dev-oit-byu.amazon.byu.edu
byu.edu
byushowcase2017.com
jrcb-cdn.byu.edu
vita.byu.edu
hbc.byu.edu
sebulba.cs.byu.edu
magiccvs.byu.edu
zappala.byu.edu
newsnet.byu.edu
uconnectlabs.com
rocket.byu.edu
vetfinder.fhtl.byu.edu
ifootball.byu.edu
gestudy.byu.edu
drupalebc.embc.byu.edu
byu8.domains.byu.edu
byu8.domains.byu.edu
aphasia.byu.edu
elc.byu.edu
osc.byu.edu
aluminum03-esxi.byu.edu
gestudy.byu.edu
acm.byu.edu
helium02-idrac.byu.edu
api.muschoir.byu.edu
compclinic.byu.edu
api.dental.byu.edu
saascon.byu.edu
api.cfacprweb.byu.edu
organplayingwiki.byu.edu
resourceplanning-dev.byu.edu
we.byu.edu
sitepublisher3.domainssupport.byu.edu
vita.byu.edu
*.byu.edu
ypay.byu.edu
byu-dept-shc-dev.amazon.byu.edu
ucs.byu.edu
msedev1.byu.edu
lsopencloud.byu.edu
sl2web.byu.edu
humwp-nonfarm.byu.edu
compliantmechanisms.byu.edu
hummedia.byu.edu
itb-lab-asa.byu.edu
jrcb-lar01.byu.edu
womeninbusiness.byu.edu
brand.byu.edu
imaal.byu.edu
*.cs.byu.edu
planningandassessment.byu.edu

Certificate

The complete raw certificate details for enclave.byu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19210314887590508901436297457711472960
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '565683-0140'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Provo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brigham Young University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'enclave.byu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 964521721090681104082789845854812880405126784457573060189024386945864418574695949699304025336858430702991791805820163122654130882348568556263802131423493362194273737750181453617041357276664551339612564700496873951552279347182451722724268169169883240087256947980827469399987345731383984103805858957347544193666200714596091879824508471102519220578152793066603029440928853313289249298204167306422054983917240942439945055618492401494022159448546222445427599513414218031432479191346681392613110832884167510031184445896232309563298851739257383269682886845705781743392411590073294477986913074533600879524191498743890360042616445114796029797310668599348262880203199971825013200704010790937728693564983861570789729613912801621485618948753291186580454402860523247520153498631140784996526511978665671877728400511458424072936636308397060590487262384705937032131406978736377068497494301889080943379223896995225629401206653515737664801100310632377816390949641270909964673050473637665866200826426514487809567268472060539331302834374094769374570207686953094810020846758551212780836549604849301376488147799043322835279725478947689487138723791962099821015346193254376079013635111949699998207758026397729440958365977644256450592647959176174766433348563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6a8a31d13f214de6a0d98de7e79657d70e2ce9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enclave.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emeriti.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byudiscounts.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fooddrive.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c2g.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guesthoust.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hinckleycenter.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capsandgowns.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homecoming.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentalumni.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapters.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licensing.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunch.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byuconnect.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rise.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayofcaring.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni3.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnicareers.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspen.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspengrove.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byums.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ur.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch4cougars.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toolbox.byu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007222097552a688baa62b78aaf3fc466e9af7a90b4f60f30e94c85b089aac27fbf17c31882899b05dcbdd046530293502b2ed8bc4b03d8731b2bbd8e8f45b14fbe1a6dfee0d3cb3a49bc45a7723643c306ecd233d57e0db98f9cc31a31bc9038a70e39e3b088ec885a6bcd842c38c3a7cd83e4d5b422b35e9372e09d11b1da8664e361ad979bab46e4a2b75e7bb77a90634388d603d6c081ce1db546c644906ee048c1436ac42674dd61210a5349c494caa0032c46ee166490200e47359266f899c4fc1751faea426af89350d94cfb3051ef545d73987d1da26e3741bbd6fa2efb33a2bcb7c8b57a93e4965019ce0a9a7aefb57d56f444d1c649b1d47ae25207b