ereturn.usa.canon.com

- Canon U.S.A., INC. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:0f:a4:b3:20:a0:e9:32:0f:df:1c:fc:f7:78:42:10 was issued on by DigiCert Inc.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Canon U.S.A., INC.

Organization: Canon U.S.A., INC.
Organization unit: INFORMATION TECHNOLOGY-F5-One Canon VIP
State / Province: New York
Locality: Melville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:0f:a4:b3:20:a0:e9:32:0f:df:1c:fc:f7:78:42:10
Serial Number (int): 1410452955777076894890480981939601936
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: c1:b2:ca:42:6a:12:05:ee:88:ac:fe:c6:c0:22:6b:4e:ae:84:f8:c8
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 30:a8:6e:08:a4:be:6a:22:ec:de:b9:1f:1d:89:c8:0e:85:29:27:88
Fingerprint (sha256): 02:52:52:16:a9:b9:dc:7b:45:2e:94:57:70:53:16:82:fd:16:ea:18:19:d8:76:53:cc:fd:41:a4:6d:c9:37:be

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate ereturn.usa.canon.com

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ereturn.usa.canon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

carepak.canon.com
www.2minpcr.com
supportmatters.pro.usa.canon.com
rebates.usa.canon.com
ebb.cusa.canon.com
ecarepak.usa.canon.com
www.ecarepak.usa.canon.com
enablingcreativity.usa.canon.com
ereturn.usa.canon.com
www.ereturn.usa.canon.com
expo.usa.canon.com
www.expo.usa.canon.com
forum.virtualimaging-fl.com
ftp.virtualimaging-fl.com
glassfirst.com
www.glassfirst.com
glassfirst.usa.canon.com
www.glassfirst.usa.canon.com
gseriescameras.usa.canon.com
lenses.usa.canon.com
www.lenses.usa.canon.com
mseriescameras.usa.canon.com
networkcameras.usa.canon.com
www.networkcameras.usa.canon.com
proprinter.usa.canon.com
www.proprinter.usa.canon.com
seeimpossible.usa.canon.com
www.seeimpossible.usa.canon.com
sensors.usa.canon.com
www.sensors.usa.canon.com
test.canonesp.com
test.canonlenses.com
varioprint.net
www.varioprint.net
variostream.net
www.variostream.net
cinemaeos.usa.canon.com
www.cinemaeos.usa.canon.com
printinginnovations.cusa.canon.com
www.printinginnovations.cusa.canon.com
pro.usa.canon.com
www.pro.usa.canon.com
gamutdestinations.com
www.gamutdestinations.com
developercommunity.usa.canon.com
devcom.usa.canon.com

Other certificates including the domain name canon.com

(limited to 100 certificates)
secure07.stage.lithium.com
quickscan.ciis.canon.com
magentoapi.usa.canon.com
canammobileconnect.usa.canon.com
nwstg.cusa.canon.com
lfsstorefront.com
*.dev-apps.cusa.canon.com
www.cfsdealerportal.com
nyrhdz21.cusa.canon.com
WMBMQPRD.cusa.canon.com
commerce.mylan.csa.canon.com
cusa.canon.com
taxserviceqa.usa.canon.com
secure1.canon.com
essdmtes1qa.cusa.canon.com
nyrhdz20.cusa.canon.com
s21fsrcbrqa.cusa.canon.com
access.ciis.canon.com
Replenish.usa.canon.com
thinkinkdigital.com
www.employee-rewards.cusa.canon.com
secure1.canon.com
essdmtes2qa.cusa.canon.com
ecarriers.csa.canon.com
www.developersupport.canon.com
canonusaextranets.cusa.canon.com
chatbot-dev.ciis.canon.com
www.cla.canon.com
mps.cbps.canon.com
contentqa.cusa.canon.com
www.developersupport.canon.com
ereturn.usa.canon.com
www.support.cusa.canon.com
csa.canon.com
secure04.lithium.com
adseast.solutions.canon.com
msdjira.sc.rd.canon.com
s21.cusa.canon.com
ereturn.usa.canon.com
secure04.lithium.com
s21fsrcbrop.cusa.canon.com
ereturn.usa.canon.com
shop.usa.canon.com
shop.dev.csa.canon.com
mycanon.stg.cusa.canon.com
events.biggestfantour.com
shopqa-auth.cusa.canon.com
cdf.dt-ext.vpn.ciis.canon.com
learn.usa.canon.com
shop.usa.canon.com
imagination.usa.canon.com
web1cdvny.cfs.canon.com
esbprd.cusa.canon.com
ereturn.usa.canon.com
thinkinkdigital.com
secure04.lithium.com
globaldispatchsolution.api.esb.usa.canon.com
ccldev.cusa.canon.com
www.servicetrainingsolutions.cusa.canon.com
adscentral.solutions.canon.com
preview.partnernet.usa.canon.com
canonva.cvi.canon.com
cvi.canon.com
rtbcx.jp.canon.com
VAARCOTFORT.CUSA.CANON.COM
in-fedservice.cusa.canon.com
unbe.sxg.cusa.canon.com
ciis.canon.com
vapgp01.cusa.canon.com
cpfprismadirect.cusa.canon.com
akamai-san195.exacttarget.com
magentocloud37.map.fastly.net
www.cla.canon.com
esbqa-2.cusa.canon.com
raise.usa.canon.com
magentocloud52.map.fastly.net
www.developersupport.canon.com
secure11.lithium.com
mycsa.s21qa.csa.canon.com
ess1.csa.canon.com
lsarprx.cusa.canon.com
upload-photos.dtp-community.usa.canon.com
shortstack.usa.canon.com
email2.cusa.canon.com
varhdv117.cusa.canon.com
www.support.cusa.canon.com
secure11.lithium.com
impact-uat.csa.canon.com
kbsupport.cusa.canon.com
events.ciis.canon.com
ereturn.usa.canon.com
cfsdealerportal.com
taxservice.usa.canon.com
secure07.stage.lithium.com
*.cusa.canon.com
www.support.cusa.canon.com
travelexpensecusaqa.cusa.canon.com
oneweb.api-stg.esb.usa.canon.com
mnyacs1121.cusa.canon.com
smarterdocs.corp.cbps.canon.com

Certificate

The complete raw certificate details for ereturn.usa.canon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4KNIs/yTljBmWhFsMA4
tRFVp6ET9FvNhhM31DoFhVprDFH6APKXHiOXlqCprsBUHUHIhTGNbLk46SN1AhuY
fDLGsSwOFHh3tUYaf+teRQYJ+g/LBjAH9pcvkSWWqZ/17FulQ8B4rqx7xszY4KBI
Kn97hsZ38ceL9oHkYTA8fZk3XjvBXAroAK7l73er6Im483g6bVBG5Zob2mdvBMOj
eNYIKdHcJsfHoEUCIO1sKEw23LX0/HwpX8o1o2EkWeSu6kabLOTHwvA43MF5GHT7
6nWtg/dbSiTtUYZvy7JLizEXW5f61J2SLLjicfcm9M54DUHJlk/sAXLUfQZ9QEQc
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1410452955777076894890480981939601936
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Melville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canon U.S.A., INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INFORMATION TECHNOLOGY-F5-One Canon VIP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ereturn.usa.canon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23670940280191829057313933575394637051076655198085500447289268438188327606108411277465358337906496501949134270718408851487330331829977602689333320589429911642604930635334256295675304583943643937641895686201996569527180117824222408032138301328590843236276984303851077693653399040455253792285325575506480291649556317689455576767382197267363577082215267590922730588042621612389019152325434097927926948442778126664313889701226760302401273033239590456186595066993489436053471736023452459613735986968809083370942757165996441870334327286509079579203283247180985178185486227038373692208852467943536780092879362485453471358099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1b2ca426a1205ee88acfec6c0226b4eae84f8c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carepak.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2minpcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportmatters.pro.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebates.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebb.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecarepak.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecarepak.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enablingcreativity.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereturn.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ereturn.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expo.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expo.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.virtualimaging-fl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.virtualimaging-fl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glassfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glassfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glassfirst.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glassfirst.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gseriescameras.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lenses.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lenses.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mseriescameras.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'networkcameras.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.networkcameras.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proprinter.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proprinter.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeimpossible.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seeimpossible.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sensors.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sensors.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.canonesp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.canonlenses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varioprint.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.varioprint.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'variostream.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.variostream.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemaeos.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinemaeos.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printinginnovations.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.printinginnovations.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamutdestinations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamutdestinations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developercommunity.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devcom.usa.canon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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