amers2.test.cp.thomsonreuters.com

- Thomson Reuters -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:3b:6e:b6:07:ba:cc:29:df:a6:08:72:0f:25:64:b5 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Thomson Reuters

Organization: Thomson Reuters
State / Province: Minnesota
Locality: Eagan
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:3b:6e:b6:07:ba:cc:29:df:a6:08:72:0f:25:64:b5
Serial Number (int): 12271642963691996372465965588436837557
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f1:f3:f3:7c:8f:3c:8d:2a:f1:36:6c:7d:81:39:96:80:30:5a:2e:89
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 49:84:e8:81:c7:f2:b0:fd:7f:ff:04:a4:63:d3:16:c0:88:71:4b:de
Fingerprint (sha256): 01:8b:b2:6f:6a:af:13:73:3b:ff:10:90:20:ef:59:94:11:fe:99:13:4f:f2:b6:e1:36:f6:87:6a:b3:2c:de:5a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate amers2.test.cp.thomsonreuters.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for amers2.test.cp.thomsonreuters.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amers2.test.cp.thomsonreuters.com

Other certificates including the domain name thomsonreuters.com

(limited to 100 certificates)
qa.eunison.thomsonreuters.com
hk.remoteaccess.thomsonreuters.com
lab-dfci.int.thomsonreuters.com
inews-login.thomsonreuters.com
calendar-entity-sat-use1.tr-tax-prod.aws-int.thomsonreuters.com
andrei-test.stpg-personal.space
c423dvxixaped.intqa.thomsonreuters.com
pi.thomsonreuters.com
www.highq.com
security-irm-dev.int.thomsonreuters.com
eage-vcucm-lab-pub.ten.thomsonreuters.com
euem-lsl-a01.int.thomsonreuters.com
apidocs.edp.thomsonreuters.com
thomsonreuters.com
qa2.questionnaire.polling.int.thomsonreuters.com
*.jiveon.com
www.highq.com
aconex-status.oraclecloud.com
amers1.stream.ia.thomsonreuters.com
emea1.heartbeat.cp.thomsonreuters.com
brightcoveservices-dev.api.thomsonreuters.com
prod-euw1.tpri-204979.fr.aws.thomsonreuters.com
uat-use1-oxp.tr-tax-prod.aws-int.thomsonreuters.com
andrei-test.stpg-personal.space
amers2.bizcharts.cp.thomsonreuters.com
sftp-qa.ebs.thomsonreuters.com
htcn-d3mnagm01.int.thomsonreuters.com
amers1.views4static3.cp.thomsonreuters.com
amers2.streaming-eue.cp.thomsonreuters.com
c645tayfin21a.int.thomsonreuters.com
amers1.gateway.cp.thomsonreuters.com
mailin7-tr.thomsonreuters.com
aconex-status.oraclecloud.com
legal.thomsonreuters.com.au
tpri-204979.tr-fr-nonprod.aws-int.thomsonreuters.com
goldtier-shell.financial.thomsonreuters.com
wel-int.ewp.thomsonreuters.com
iw-chart1.ocb.iwealth.thomsonreuters.com
dftest.datafusion.thomsonreuters.com
EAGE-VCUCM-LAB-PUB.int.thomsonreuters.com
tms1.int.thomsonreuters.com
stgqa.tacss.thomsonreuters.com
orchwebvm01.int.thomsonreuters.com
qed.nextgen-apigw.9297.aws.thomsonreuters.com
dep-ci-services.tr-tax-nonprod.aws-int.thomsonreuters.com
admin-portal-alpha.collab.int.thomsonreuters.com
londontvcloud.rtv.thomsonreuters.com
oneauthentication.int.thomsonreuters.com
cpa-orchestrator-dev.tr-tax-nonprod.aws-int.thomsonreuters.com
stg.clk.iwealth.thomsonreuters.com
apps.cp.thomsonreuters.com
beta.blockoneiq.thomsonreuters.com
snowplow.projectne.thomsonreuters.com
www.practicetechnology.thomsonreuters.com
www.highq.com
globalproductcatalog.thomsonreuters.com
cms.insiderred.thomsonreuters.com
hhtrust.wellsky.com
qa.support.int.thomsonreuters.com
philips.cdb.thomsonreuters.com
ws.staging.1p.thomsonreuters.com
www.highq.com
license.prod.taxone.thomsonreuters.com
dev-billingsupport.checkpoint.thomsonreuters.com
emerald-ingest.0712.aws-int.thomsonreuters.com
*.thomsonreuters.com
serengeti.boomstickautoservices.int.thomsonreuters.com
corporates-status.thomsonreuters.com
www.highq.com
amers2.test.cp.thomsonreuters.com
prodw8.support.rg.thomsonreuters.com
c378wtgfin11a.int.thomsonreuters.com
mojito.thomsonreuters.com
build.aaa.int.thomsonreuters.com
3130e863.status.cleafy.cloud
AMERS1.BIZCHARTS.CP.THOMSONREUTERS.COM
businesssystems-htd.90719.aws.thomsonreuters.com
dev.eunison.thomsonreuters.com
transactions.thomsonreuters.com
leapfrog-ssl-7.gcs-web.com
mysitedev.thomsonreuters.com
5646535253557248-fe3.pantheonsite.io
c800hubqed.int.thomsonreuters.com
uatdante.int.thomsonreuters.com
amers2.admin.cp.thomsonreuters.com
updates.thomsonreuters.com
us2p-license-ime.int.thomsonreuters.com
sts.ocb.iwealth.thomsonreuters.com
dev-legaledcenter.thomsonreuters.com
eage-vcucm-lab-pub.ten.thomsonreuters.com
api.inferno-ci.int.thomsonreuters.com
graphics.thomsonreuters.com
www.highq.com
5646535253557248-fe3.pantheonsite.io
apac1.eikon.cp.thomsonreuters.com
os-app-callback.1642.aws.thomsonreuters.com
apac1.streaming-fxall.cp.thomsonreuters.com
*.eg.int.thomsonreuters.com
linsi-api-dev.tr-corporate-nonprod.aws-int.thomsonreuters.com
chat.thomsonreuters.com

Certificate

The complete raw certificate details for amers2.test.cp.thomsonreuters.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGtzCCBZ+gAwIBAgIQCTtutge6zCnfpghyDyVktTANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwMjE1MDAwMDAwWhcN
MjAwMjE2MTIwMDAwWjB3MQswCQYDVQQGEwJVUzESMBAGA1UECBMJTWlubmVzb3Rh
MQ4wDAYDVQQHEwVFYWdhbjEYMBYGA1UEChMPVGhvbXNvbiBSZXV0ZXJzMSowKAYD
VQQDEyFhbWVyczIudGVzdC5jcC50aG9tc29ucmV1dGVycy5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/MPljkPaghXZXhdKLX7L9vUaQs/bpIvz
jB2txSico5Jhh2ZXwJSDjAzebEHWt1+sbtTXjpvPRCqJ/WuMCF+WVuEpQFDgA+Cz
c7n8LNQex6WZgzdLrm95jwMQWRUyG1C6Xm1lcDtkDcPlQiXIdsom6RX5hdpRf84M
nxXMznnbRenE3eDN2Q94XHzpM9XQHmkLSCH4vOyTzS7FDAax2ByC7Y/NmEj6V7te
prVjqOUN+RCB+4C0eU6uUlcDs6pqCXEhxR5P8sUkoQVczPPs6wNcpou80KK0Rla2
pnE3IcwQuwMqfFQ2HkBQcVp2Hp5rFnIacdsFnsGodoVHQ6yuhJZDAgMBAAGjggNn
MIIDYzAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQU
8fPzfI88jSrxNmx9gTmWgDBaLokwLAYDVR0RBCUwI4IhYW1lcnMyLnRlc3QuY3Au
dGhvbXNvbnJldXRlcnMuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMu
ZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0
LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZI
AYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9D
UFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDov
L29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5k
aWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAkGA1Ud
EwQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AKS5CZC0GFgUh7sTosxn
cAo8NZgE+RvfuON3zQ7IDdwQAAABYZpkjyAAAAQDAEcwRQIhAJoj+0xQyTiAXzf9
v7wk0qOroN9sCKobqJocLgzexFX5AiA83Td9ziiZFGfkAn1Zj2KnZAybgKxB2mlb
RSke5IZLggB2AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABYZpk
j+YAAAQDAEcwRQIhAJqs60QhbzLeugjAtNogwhoEIN1+2SGPjlMuBf/+t0auAiAC
u5o/Y1/VbDFLxeLNskUf/dFzuA9LYODQOfAxmtWnlgB2ALvZ37wfinG1k5Qjl6qS
e0c4V5UKq1LoGpCWZDaOHtGFAAABYZpkj9sAAAQDAEcwRQIhALnEWF4CdLoOVPj8
zt40KpeqtwnYpCOg7QnCiZQaRWL2AiBlzZFtme6VJSGrvUUbdeZfcWSF59alu90z
cayNiIothzANBgkqhkiG9w0BAQsFAAOCAQEABGs4yKm+pxH0O4Y5hcCOs2xal7H7
t1z6Kw9e9N3lW/uBnQpv7nbYtBx//4+999hzM0K9k5GKOPxIkwkAJOVRTBuRZTp6
8XCEyxFx2B9qTkuj11AS/7Wa81WTZU5XaU+CmdmwiU9xIfN9sh9mt5BKdjpQER/o
SQZ5GmkWW8NZY46jfdTMnOmWZR9knXIwa5tivWIj5VCbEU6hjNY0nJqSrUdHExeh
kr/Nuse2AylGjaOJs3M5gB/i0KnOe0MMNV0t2DOCNCatWK7m7z6VN7wGLU4vjYZZ
nWp17BcBXm6kqPiruzmUV+5kZLCak/TbKTrplF9SQfEA8W9h5QRjmreSew==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvzD5Y5D2oIV2V4XSi1+
y/b1GkLP26SL84wdrcUonKOSYYdmV8CUg4wM3mxB1rdfrG7U146bz0Qqif1rjAhf
llbhKUBQ4APgs3O5/CzUHselmYM3S65veY8DEFkVMhtQul5tZXA7ZA3D5UIlyHbK
JukV+YXaUX/ODJ8VzM5520XpxN3gzdkPeFx86TPV0B5pC0gh+Lzsk80uxQwGsdgc
gu2PzZhI+le7Xqa1Y6jlDfkQgfuAtHlOrlJXA7OqaglxIcUeT/LFJKEFXMzz7OsD
XKaLvNCitEZWtqZxNyHMELsDKnxUNh5AUHFadh6eaxZyGnHbBZ7BqHaFR0OsroSW
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12271642963691996372465965588436837557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Eagan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thomson Reuters'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amers2.test.cp.thomsonreuters.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22595061460191110723171541973970225107235165035427005527385453695672669151389213362449879823807123764207537143915050219910324530602057585468377308064690090329059168136389033980895954549806450315113731404602552975612160070032112410113777998839607762960127373342117428194260366659219248313708064564980039911113934445138709746247551428608642463648739889741135953218352373204304535702692710682507111175748931783184516355225217484069028676078589383468429371224279521310154657727750792899997341533366013027053137603519259055322478407284373983397256429392612400400863808548308548004650254671671589532449455555945285237904963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1f3f37c8f3c8d2af1366c7d81399680305a2e89
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amers2.test.cp.thomsonreuters.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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