cxo-aptest.cxo.storage.hpecorp.net

- Hewlett Packard Enterprise Company -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0a:82:4d:c0:db:7c:b6:29:f6:54:20:e7:d1:07:e8:62 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Hewlett Packard Enterprise Company

Organization: Hewlett Packard Enterprise Company
Organization unit: 3PAR
State / Province: California
Locality: Palo Alto
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:82:4d:c0:db:7c:b6:29:f6:54:20:e7:d1:07:e8:62
Serial Number (int): 13968855574733354435395518601691129954
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d2:d1:34:37:42:7b:26:63:9a:7c:73:30:40:af:b9:cd:56:41:e9:66
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 6c:5e:e4:d0:a2:93:d7:b7:7c:c1:d4:0b:af:81:f8:ed:7f:93:05:ce
Fingerprint (sha256): 01:a1:be:6e:1b:34:1e:e9:e7:a4:0c:84:ec:30:ad:b1:ed:10:d0:82:13:e2:94:d8:ac:98:b8:d3:41:58:03:c0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate cxo-aptest.cxo.storage.hpecorp.net

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cxo-aptest.cxo.storage.hpecorp.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cxo-aptest.storage.hpecorp.net
pe1950-01.cxo.storage.hpecorp.net
aptest.storage.hpecorp.net
pe1950-01.3pardata.com
aptest.cxo.storage.hpecorp.net
cxo-aptest.cxo.storage.hpecorp.net

Other certificates including the domain name hpecorp.net

(limited to 100 certificates)
minio-itg-dcos.dc01.its.hpecorp.net
cce02hpqcppmbyod.houston.hpe.com
address-service.core.hpecorp.net
hpeguestlogin.hpecorp.net
rtc16prdfepool761.aus.ucrtc.hpecorp.net
tpartner.sgi.com
api-ext-pro.support.hpe.com
matter-itg.legal.int.hpe.com
rtc16itgfepool91.houston.hpe.com
g9w8651g.houston.hpecorp.net
rtc16prdfepool793.sgp.ucrtc.hpecorp.net
csvnbbn-pro.bbn.hpecorp.net
cxo-aptest.cxo.storage.hpecorp.net
ctf-arc-pro.austin.hpecorp.net
intmail-itg.houston.hpecorp.net
C4w23548.itcs.hpecorp.net
iAuthCAS.houston.hpe.com
hc4t06244.itcs.hpecorp.net
c9w19579.itcs.hpecorp.net
ent312.sharepoint.hpe.com
nexus-itg.houston.hpecorp.net
uidlogin.glb.itcs.hpecorp.net
g4t7817g.houston.hp.com
rtc16prdedgeint791.sgp.ucrtc.hpecorp.net
csvnind-pro.idp.hpecorp.net
rtc16prdfepool13.austin.ucrtc.hpecorp.net
abdtest2.test.hpecorp.net
csvnaus1-itg.austin.hpecorp.net
nexus-apac.austin.hpecorp.net
axir2protoworker.itcs.hpecorp.net
ctf-central-pro.austin.hpecorp.net
c4w09100.itcs.hpe.com
onepass-enduserservice.it.hpe.com
rtc16prdfepool92.houston.ucrtc.hpecorp.net
abdtest2.test.hpecorp.net
hpe-apipoc.itcs.hpe.com
csvnaus1-pro.austin.hpecorp.net
appdev-1.houston.hpecorp.net
csvnind-pro.idp.hpecorp.net
csvn1-pro.il.hpecorp.net
F5.us.rdlabs.hpecorp.net
ent301.sharepoint.hpe.com
licenseportal-g4w9680g.houston.hpecorp.net
g9w8506g.houston.hpecorp.net
rtc16prdfepool421.bbn.ucrtc.hpecorp.net
djr.corp.hpe.com
rtc16prdfepool92.houston.ucrtc.hpecorp.net
p1l00471g.dc01.its.hpecorp.net
c9w29907.itcs.hpecorp.net
c9w30273.itcs.hpecorp.net
csvnand-pro.us.hpecorp.net
p2l00325g.dc02.its.hpecorp.net
kibana-itg-docker.dc01.its.hpecorp.net
c9w25239.itcs.hpecorp.net
rtc16prdfepool543.sdc.ucrtc.hpecorp.net
www.vdi.fr.hpecorp.net
rtc16prdfepool11.austin.ucrtc.hpecorp.net
c4w25099.itcs.hpe.com
uidlogin.glb.itcs.hpecorp.net
globalpartnerlocator-admin-itg.itcs.hpecorp.net
bukrepo.uk.rdlabs.hpecorp.net
C0051372.itcs.hpecorp.net
cxo-repomaster.cxo.storage.hpecorp.net
tpd-twiki.storage.hpecorp.net
s2937.in.rdlabs.hpecorp.net
pdapi-dev-houston.itcs.hpecorp.net
cdarchive-dlc.3pardata.com
c9w29907.itcs.hpecorp.net
hc4t02441.itcs.hpecorp.net
salus.int.hpe.com
hpn-byod.us.hpecorp.net
c0047724.itcs.hpecorp.net
rtc16prdfepool792.sgp.ucrtc.hpecorp.net
sbesp.houston.hpe.com
hpe-jenkins-itg.dc02.its.hpecorp.net
csvnaus1-itg.austin.hpecorp.net
hc4t06206.itcs.hpecorp.net
rtc16prdedgeint11.austin.ucrtc.hpecorp.net
svcproxy-itg.it.hpe.com
sisscan.in.rdlabs.hpecorp.net
rtc16prdedgeint541.sdc.ucrtc.hpecorp.net
c9t14297.itcs.hpecorp.net
hpspp.houston.hpe.com
rtc16prdfepool91.houston.ucrtc.hpecorp.net
rtc16prdfepool421.bbn.ucrtc.hpecorp.net
rtc16prdfepool792.sgp.ucrtc.hpecorp.net
rtc16itgedgeint11.austin.ucrtc.hpecorp.net
g4t7675g.houston.hpecorp.net
h20349.www2.hpe.com
c4w21389.itcs.hpecorp.net
earlyeval-pro.itcs.hpe.com
p1l00472g.dc01.its.hpecorp.net
c4t04635.itcs.hpecorp.net
g9w8651g.houston.hpecorp.net
hpecas.hpecorp.net
h20350.www2.hpe.com
condor.itcs.hpe.com
github.hpe.com
hc9t08341.itcs.hpecorp.net
cxo-bugs57.cxo.storage.hpecorp.net

Certificate

The complete raw certificate details for cxo-aptest.cxo.storage.hpecorp.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxExpF+Pxzid/5VWjGL36
K/qdE8rl8mIepELEe7dXJLm9qRYiAQwSBVYAM1eqAw3X8U5Al8p7zJzAUbonU/Yk
ABgyzY043Z7JVjyb3s8TmtFTCQ/XOPfareMBOFZvFNGJ6PmZJtpglddXGAXMpuSB
44zdUkkKiG760Vjqxw9dIlPgDX98L0J0fQCtLmINJGSlvhrOQ/x/ZSHKOicilaDG
vtPaTFt2Xv/lMuvzkpyfQdoq2NqwVz5WccRe8fd6EB1wtC8JvB6ttVrsEutFWLS+
WbNe0IaMAQ3B1URXs2IAbpgCAN7c+pM1PaEJciZQxJwTHYXe7Q/Dl3Hsddg9ack3
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13968855574733354435395518601691129954
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Palo Alto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hewlett Packard Enterprise Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3PAR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cxo-aptest.cxo.storage.hpecorp.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24780387205480066473353944717529771146475309206357911848799168195259611258593152122603693832711067283130557143149744351703828069876842148719592370239089083556994995670035068039062153217863131147663466160654776528615825465639366106470414096867899027187180827662279125995697471334339833486216342983386667056543546656231861478011707298206499318220652705932295497161972732609602026572464811873893980120345617134278432366215361682074268485336101311322842216201477490063395320601700817288676451779524068946756645599112534143419583651776805901393010269882408255861405246415740997266031281365572546034148898035544429238499307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2d13437427b26639a7c733040afb9cd5641e966
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (190 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxo-aptest.storage.hpecorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pe1950-01.cxo.storage.hpecorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aptest.storage.hpecorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pe1950-01.3pardata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aptest.cxo.storage.hpecorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxo-aptest.cxo.storage.hpecorp.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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