ww13.vin65.com

- K1 Technology Corp DBA Vin65 -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 0f:45:0c:21:c7:84:bc:06:47:73:0b:46:1f:0e:ef:19 was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

K1 Technology Corp DBA Vin65

Organization: K1 Technology Corp DBA Vin65
State / Province: British Columbia
Locality: Abbotsford
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:45:0c:21:c7:84:bc:06:47:73:0b:46:1f:0e:ef:19
Serial Number (int): 20296934485205231074058452962548576025
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dc:3e:f9:5a:07:4a:6c:c6:b0:73:d1:2c:f9:66:bc:ac:58:a3:fe:e8
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): 86:94:80:00:7f:35:a2:c2:22:56:58:26:bb:f4:fd:b8:65:1e:d3:fe
Fingerprint (sha256): 01:e1:5c:a9:e6:5b:17:4b:22:f0:38:44:49:30:4f:d4:9e:ce:a4:45:75:b7:e8:07:00:6e:d0:81:7b:b1:02:91

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-g19.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g19.crl

Check the revocation status for certificate ww13.vin65.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ww13.vin65.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ww13.vin65.com
store.juslynvineyards.com
www.dutchercrossingwinery.com
www.rochioliwinery.com
m.rochioliwinery.com
www.dfvtastingroom.com
mobile.dfvtastingroom.com
www.oliverosoyoos.com
m.oliverosoyoos.com
m.cimarone.com
www.cimarone.com

Other certificates including the domain name vin65.com

(limited to 100 certificates)
ww3.vin65.com
lb3.aus.vin65.com
ww13.vin65.com
ww19.vin65.com
foley.vin65.com
ww9.vin65.com
foley.vin65.com
ww21.vin65.com
ww14.vin65.com
ww11.vin65.com
ww21.vin65.com
ww2.vin65.com
ww29.vin65.com
ww13.vin65.com
*.staging.vin65.com
lb2.aus.vin65.com
ww11.vin65.com
ww3.vin65.com
ww16.vin65.com
lb2.aus.vin65.com
ww1.vin65.com
ww27.vin65.com
ww34.vin65.com
ww8.vin65.com
ww13.vin65.com
redirector.vin65.com
ww17.vin65.com
ww16.vin65.com
ww10.vin65.com
lb3.aus.vin65.com
vin65.com
ww6.vin65.com
ww6.vin65.com
www.vin65.com.au
ww21.vin65.com
ww15.vin65.com
vin65.com
ww24.vin65.com
lb2.aus.vin65.com
ww24.vin65.com
ww12.vin65.com
ww23.vin65.com
ww14.vin65.com
ww29.vin65.com
ww15.vin65.com
*.vin65.com
ww18.vin65.com
ww7.vin65.com
lb2.aus.vin65.com
*.vin65.com
ww17.vin65.com
lb3.aus.vin65.com
ww22.vin65.com
www.vin65.com
ww10.vin65.com
ww20.vin65.com
lb3.aus.vin65.com
ww20.vin65.com
ww11.vin65.com
ww24.vin65.com
pos.vin65.com
ww29.vin65.com
ww19.vin65.com
ww5.vin65.com
ww21.vin65.com
ww9.vin65.com
ww22.vin65.com
ww19.vin65.com
ww34.vin65.com
vin65.com
ww2.vin65.com
ww17.vin65.com
ww10.vin65.com
lb2.aus.vin65.com
ww4.vin65.com
ww6.vin65.com
ww25.vin65.com
lb2.aus.vin65.com
ww4.vin65.com
ww19.vin65.com
ww7.vin65.com
generic.vin65.com
ww3.vin65.com
ww1.vin65.com
ww31.vin65.com
ww8.vin65.com
ww26.vin65.com
ww18.vin65.com
ww6.vin65.com
ww1.vin65.com
ww23.vin65.com
ww5.vin65.com
ww13.vin65.com
lb2.aus.vin65.com
ww1.vin65.com
ww4.vin65.com
ww5.vin65.com
ww11.vin65.com
ww29.vin65.com
www.vin65.com.au

Certificate

The complete raw certificate details for ww13.vin65.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+ybPhyvbLTfcQSfHNyR
xochSYFYnFdn1WUPjvHi5XDbknTNHFrXxSmzrlttnmbBtAXDmcNgNqSFbgagRw48
7XK8k3WsrpjBp56CVfExwMH32FX0bEVJXZMl7h5VnTfGx/W5e23DTaJuF15kLu+d
QyMB28Cq8VzPEpPSVqncRpGboh9VL6Da6IK/JfaGILAJncLVaOAXszHPVedKMYUo
OyrJtDk4DgRbLEGd/3ghqHmz6scii5C+Jcsvd7K/1/k1Vvyqk07txDg/m75Ribgc
rWQHsdWOirHAyHZAkjFkh7moU2wXr5zJQdK/3HB6vvHI3fQxG2jxJ//ax2NAoga7
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20296934485205231074058452962548576025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Abbotsford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'K1 Technology Corp DBA Vin65'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ww13.vin65.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26752957320352611954660542891531556393126979001604365071376903693009279463563732183783876345188435806434780846797973921194688910819504629535847058959770286832190608667976356765646327485314011210039827506800111674711570349999806052180939640607506855504544818268750850045635466507247608520684404378414796491815069855078088933159042717213275440344004894729258074823834389535930602434406129056726476522795639402190683805041424012845342550534514718038616558084553815903474134902826864424688151371131476418270689569820500609930010939444392114544018652558220448185667533773108168229921315036622596084387936883313284642945951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc3ef95a074a6cc6b073d12cf966bcac58a3fee8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (252 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww13.vin65.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.juslynvineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dutchercrossingwinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochioliwinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.rochioliwinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dfvtastingroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.dfvtastingroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oliverosoyoos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.oliverosoyoos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cimarone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cimarone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g19.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g19.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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