pl.bestbuy.com

- Best Buy Co, Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:e9:2c:20:06:0a:9e:fd:51:7c:8d:ef:aa:d2:89:87 was issued on by DigiCert Inc.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Best Buy Co, Inc.

Organization: Best Buy Co, Inc.
Organization unit: Akamai SAN SSL OV
State / Province: Minnesota
Locality: Richfield
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:e9:2c:20:06:0a:9e:fd:51:7c:8d:ef:aa:d2:89:87
Serial Number (int): 17161436080651116566177231871778392455
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6b:f3:e3:f3:50:03:76:47:7c:c9:8a:ca:54:5d:e8:9a:ff:8d:fc:c3
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 5d:e6:3c:ca:28:fe:e8:21:5d:0d:4f:a9:17:be:4a:d4:92:a1:e4:95
Fingerprint (sha256): 02:a8:3f:42:3a:49:2f:8b:cc:4f:3f:f7:97:80:d6:28:e3:ac:cb:76:3a:e5:dc:5b:51:10:b4:32:bb:6d:7c:83

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate pl.bestbuy.com

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pl.bestbuy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pl.bestbuy.com
ssl.m.stage.bestbuy.com
stage.pisces.bbystatic.com
www-bbyca6.bestbuy.com
test.pisces.bbystatic.com
mdr-ssl.bestbuy.ca
misc-ssl-usweb.cloud-test.bbystatic.com
www.test.bestbuy.com
cloud-test.insigniaproducts.com
mexico.stage.bbystatic.com
www.stage.dynexproducts.com
www.stage.insigniaproducts.com
css-ssl-usweb.stage.bbystatic.com
denver-commerce-ssl.bestbuy.com
www.stage.pacificsales.com
apid-ext-cld.test.bestbuy.com
apid-ext-cld.stage.bestbuy.com
img.test.bbystatic.com
images.test.bestbuy.com
mdr.bestbuy.ca
cloud-test.rocketfishproducts.com
js-ssl-usweb.cloud-test.bbystatic.com
sts-ext-cld.test.bestbuy.com
assets.stage.bbystatic.com
www.test.bestbuy.com.mx
cloudtestcg2rta.bestbuy.com
cloud-test.pacificsales.com
app-ssl.cloud-test.bestbuy.com
pisces-ssl.test.bbystatic.com
commerce-ssl.stage.bestbuy.com
bbyazservices-pl.bestbuy.com
www.stage.bestbuy.com
mexico.test.bbystatic.com
denver-ssl.bestbuy.com
pl.deals.bestbuy.com
sts-ext-cld.stage.bestbuy.com
cloud-test-ssl.bestbuy.com
js-ssl-usweb.stage.bbystatic.com
staging-download.digitallibrary.bestbuy.com
bbyawstagservices-pl.l7ss.bestbuy.com
www.test.magnoliaav.com
images-ssl-usweb.cloud-test.bbystatic.com
api-proxy.test.bby-ext-gw.com
denver-mdot-ssl.bestbuy.com
api-proxy.stage.bby-ext-gw.com
apidr-ssl.bestbuy.ca
www-ssl.test.bestbuy.com
assets-dbx.stage.bbystatic.com
www-ssl.stage.bestbuy.com
calidad.bestbuy.com.mx
assets-dbx.test.bbystatic.com
crest.stage.bestbuy.com
images-ssl-usweb.stage.bbystatic.com
stagecg2rta.bestbuy.com
css-ssl-usweb.cloud-test.bbystatic.com
commerce-ssl.test.bestbuy.com
pl.context.bestbuy.com
pisces-ssl.stage.bbystatic.com
images.stage.bestbuy.com
apidr-ssl.futureshop.ca
img.stage.bbystatic.com
www.stage.bestbuy.com.mx
crest.test.bestbuy.com
uat.geeksquad.com
www.stage.magnoliaav.com
misc-ssl-usweb.stage.bbystatic.com
www.stage.rocketfishproducts.com
cloud-test.dynexproducts.com
assets.test.bbystatic.com
app-ssl.stage.bestbuy.com
prod-like.bestbuy.com.mx

Other certificates including the domain name bestbuy.com

(limited to 100 certificates)
san.bestbuy.com
attechapi-app-int-east.stage.browse.bestbuy.com
kibana.test.monitoring.bestbuy.com
bttnview-njs-int-east.test.browse.bestbuy.com
advsmlssrvc-app-int-west.prod.browse.bestbuy.com
swift1.prod.skyblue.bestbuy.com
access.bestbuy.com
addsource-app-int-east.prod.browse.bestbuy.com
pricevw-njs-ext-west.prod.browse.bestbuy.com
ofrsvapi-app-ext-east.test.browse.bestbuy.com
commerce-api.test.bestbuy.com
apid-app-west-int.prod.browse.bestbuy.com
identity-ingress-global.dev.gcp.bestbuy.com
apex-configservice-global.test.gcp.bestbuy.com
mexico-web-west.prod.browse.bestbuy.com
platmanpb-app-int-west.prod.browse.bestbuy.com
accessfedpl.bestbuy.com
lstsrvces-app-ext-east.test.browse.bestbuy.com
bestbuyconnect.com
drwsmpanntwlv-app-int-east.test.cgraph.bestbuy.com
priceviewn-app-ext-east.test.browse.bestbuy.com
profulfil-web-east.test.browse.bestbuy.com
bbytagservices.bestbuy.com
tableau-qa.na.bestbuy.com
dhodawkthrtne-app-int-east.prod.browse.bestbuy.com
marf-app-int-east.prod.browse.bestbuy.com
bryntstpplctn-app-int-east.prod.browse.bestbuy.com
trnrsksrv-app-int-west.prod.browse.bestbuy.com
airwatch-linux.bestbuy.com
ugc-slr-east.prod.browse.bestbuy.com
*.bestbuy.com
ordrhstrpblsh-app-int-west.prod.browse.bestbuy.com
leviathanapi-app-ext-east.stage.aws.bestbuy.com
aw.bestbuy.com
sherlock-core-stage.test.gcp.bestbuy.com
trk.email.bestbuy.com
sidcs-app-east.stage.browse.bestbuy.com
*.bestbuy.com
span-api-east-int.prod.browse.bestbuy.com
secure03.lithium.com
ggleassrt-app-int-east.stage.browse.bestbuy.com
fulfview-njs-int-east.test.browse.bestbuy.com
cartagg-app-int-east.test.browse.bestbuy.com
sercalendar-app-int-east.stage.browse.bestbuy.com
sentry-app-int-east.stage.cgraph.bestbuy.com
plt-images-ssl-pls.stage.bestbuy.com
psccreturns-app-int-east.stage.browse.bestbuy.com
remixslr-app-int-east.test.browse.bestbuy.com
sts.bestbuy.com
mexico-web-east.prod.browse.bestbuy.com
dhodawkthrtne-app-int-west.prod.browse.bestbuy.com
bttnstate-app-int-east.prod.browse.bestbuy.com
MPOSDEV.na.bestbuy.com
lstsrvces-app-ext-east.stage.browse.bestbuy.com
pdmpblshr-app-int-east.test.browse.bestbuy.com
appdirectory.bestbuy.com
drwsmpanmthrt-app-int-east.test.cgraph.bestbuy.com
payments-prod.actdvc.bestbuy.com
shipping-app-int-east.test.browse.bestbuy.com
images-ssl.bestbuy.com
mexco-njs-ext-west.prod.cgraph.bestbuy.com
ostmonitor-app-int-east.stage.browse.bestbuy.com
shipping-api-east-int.test.browse.bestbuy.com
hub.bestbuy.com
pl.bestbuy.com
dhdatrggerrex-app-int-west.prod.browse.bestbuy.com
ext.location-west.prod.browse.bestbuy.com
fulfview-njs-int-west.prod.browse.bestbuy.com
bestbuybusiness.com
actdvcs-app-east.test.browse.bestbuy.com
vpt-slr-int-east.stage.browse.bestbuy.com
ofrsvapi-app-int-east.prod.browse.bestbuy.com
csi-app-ext-west.prod.browse.bestbuy.com
cap-pt-spring-use.bestbuy.com
secure03.lithium.com
esd-pl1.bestbuy.com
aaa.bestbuy.com
vpt-slr-int-east.test.browse.bestbuy.com
pl.bestbuy.com
cfgread-app-west.prod.browse.bestbuy.com
dhdarelsrfdaf-app-ext-east.prod.browse.bestbuy.com
search-slr-east.stage.browse.bestbuy.com
solrindex-app-int-east.stage.browse.bestbuy.com
suggest-web-east.prod.browse.bestbuy.com
aquisview-njs-int-east.prod.browse.bestbuy.com
BBYSTAR-HP-DEV.bestbuy.com
jwaller-app-int-east.test.cgraph.bestbuy.com
carbonaggaws-njs-int-west.prod.cgraph.bestbuy.com
cx-ccai-dfcx-api-stage.prod.gcp.bestbuy.com
searchruleslr-app-int-west.prod.browse.bestbuy.com
pdmingest-app-int-west.prod.browse.bestbuy.com
scheddelvsrvc-app-ext-west.prod.browse.bestbuy.com
payments-stage.actdvc.bestbuy.com
epro-qa.bestbuybusiness.com
stscld-app-ext-east.prod.browse.bestbuy.com
pl.bestbuy.com
suggest-web-east-int.stage.browse.bestbuy.com
gglepaidm-app-int-east.test.browse.bestbuy.com
mytlc.bestbuy.com
zkagentsvc-app-int-east.test.browse.bestbuy.com

Certificate

The complete raw certificate details for pl.bestbuy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINHDCCDASgAwIBAgIQDOksIAYKnv1RfI3vqtKJhzANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODAzMjgwMDAwMDBaFw0xODEwMTkxMjAwMDBaMIGGMQswCQYDVQQGEwJVUzES
MBAGA1UECBMJTWlubmVzb3RhMRIwEAYDVQQHEwlSaWNoZmllbGQxGjAYBgNVBAoT
EUJlc3QgQnV5IENvLCBJbmMuMRowGAYDVQQLExFBa2FtYWkgU0FOIFNTTCBPVjEX
MBUGA1UEAxMOcGwuYmVzdGJ1eS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCua94pKicdboANP7V7yFqErxuyMhXyRxb711UBdGHm2TveOvHZ0tca
d/O8cLEKCX9vVM61uOOLvo6N0ZpjPWQi642eZ41ZVBvl+L4YJFvfjzH0Bq9YaObN
Qc1BAiXr+VaNmZOUQuAxf3gMZJpRzAspNt6BllBmeH3W3cSGDp91SY1xGN5lulTJ
hH9xu0uOE64gy+nK2qY9uWTrne5ygq3RQ68smNyuKAdYA48tm7gLL7VkVExm7s6i
xestqUTCYoAeSLsHICaFRcBna/6lyZqtcSBaz8C79OOsEhBsNzaRO4LoW3qFosJA
qr8s54rVa+jhXrMtYJ6Bvo6utDHrJcwPAgMBAAGjggmrMIIJpzAfBgNVHSMEGDAW
gBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4EFgQUa/Pj81ADdkd8yYrKVF3o
mv+N/MMwgggPBgNVHREEgggGMIIIAoIOcGwuYmVzdGJ1eS5jb22CF3NzbC5tLnN0
YWdlLmJlc3RidXkuY29tghpzdGFnZS5waXNjZXMuYmJ5c3RhdGljLmNvbYIWd3d3
LWJieWNhNi5iZXN0YnV5LmNvbYIZdGVzdC5waXNjZXMuYmJ5c3RhdGljLmNvbYIS
bWRyLXNzbC5iZXN0YnV5LmNhgidtaXNjLXNzbC11c3dlYi5jbG91ZC10ZXN0LmJi
eXN0YXRpYy5jb22CFHd3dy50ZXN0LmJlc3RidXkuY29tgh9jbG91ZC10ZXN0Lmlu
c2lnbmlhcHJvZHVjdHMuY29tghptZXhpY28uc3RhZ2UuYmJ5c3RhdGljLmNvbYIb
d3d3LnN0YWdlLmR5bmV4cHJvZHVjdHMuY29tgh53d3cuc3RhZ2UuaW5zaWduaWFw
cm9kdWN0cy5jb22CIWNzcy1zc2wtdXN3ZWIuc3RhZ2UuYmJ5c3RhdGljLmNvbYIf
ZGVudmVyLWNvbW1lcmNlLXNzbC5iZXN0YnV5LmNvbYIad3d3LnN0YWdlLnBhY2lm
aWNzYWxlcy5jb22CHWFwaWQtZXh0LWNsZC50ZXN0LmJlc3RidXkuY29tgh5hcGlk
LWV4dC1jbGQuc3RhZ2UuYmVzdGJ1eS5jb22CFmltZy50ZXN0LmJieXN0YXRpYy5j
b22CF2ltYWdlcy50ZXN0LmJlc3RidXkuY29tgg5tZHIuYmVzdGJ1eS5jYYIhY2xv
dWQtdGVzdC5yb2NrZXRmaXNocHJvZHVjdHMuY29tgiVqcy1zc2wtdXN3ZWIuY2xv
dWQtdGVzdC5iYnlzdGF0aWMuY29tghxzdHMtZXh0LWNsZC50ZXN0LmJlc3RidXku
Y29tghphc3NldHMuc3RhZ2UuYmJ5c3RhdGljLmNvbYIXd3d3LnRlc3QuYmVzdGJ1
eS5jb20ubXiCG2Nsb3VkdGVzdGNnMnJ0YS5iZXN0YnV5LmNvbYIbY2xvdWQtdGVz
dC5wYWNpZmljc2FsZXMuY29tgh5hcHAtc3NsLmNsb3VkLXRlc3QuYmVzdGJ1eS5j
b22CHXBpc2Nlcy1zc2wudGVzdC5iYnlzdGF0aWMuY29tgh5jb21tZXJjZS1zc2wu
c3RhZ2UuYmVzdGJ1eS5jb22CHGJieWF6c2VydmljZXMtcGwuYmVzdGJ1eS5jb22C
FXd3dy5zdGFnZS5iZXN0YnV5LmNvbYIZbWV4aWNvLnRlc3QuYmJ5c3RhdGljLmNv
bYIWZGVudmVyLXNzbC5iZXN0YnV5LmNvbYIUcGwuZGVhbHMuYmVzdGJ1eS5jb22C
HXN0cy1leHQtY2xkLnN0YWdlLmJlc3RidXkuY29tghpjbG91ZC10ZXN0LXNzbC5i
ZXN0YnV5LmNvbYIganMtc3NsLXVzd2ViLnN0YWdlLmJieXN0YXRpYy5jb22CK3N0
YWdpbmctZG93bmxvYWQuZGlnaXRhbGxpYnJhcnkuYmVzdGJ1eS5jb22CJWJieWF3
c3RhZ3NlcnZpY2VzLXBsLmw3c3MuYmVzdGJ1eS5jb22CF3d3dy50ZXN0Lm1hZ25v
bGlhYXYuY29tgilpbWFnZXMtc3NsLXVzd2ViLmNsb3VkLXRlc3QuYmJ5c3RhdGlj
LmNvbYIdYXBpLXByb3h5LnRlc3QuYmJ5LWV4dC1ndy5jb22CG2RlbnZlci1tZG90
LXNzbC5iZXN0YnV5LmNvbYIeYXBpLXByb3h5LnN0YWdlLmJieS1leHQtZ3cuY29t
ghRhcGlkci1zc2wuYmVzdGJ1eS5jYYIYd3d3LXNzbC50ZXN0LmJlc3RidXkuY29t
gh5hc3NldHMtZGJ4LnN0YWdlLmJieXN0YXRpYy5jb22CGXd3dy1zc2wuc3RhZ2Uu
YmVzdGJ1eS5jb22CFmNhbGlkYWQuYmVzdGJ1eS5jb20ubXiCHWFzc2V0cy1kYngu
dGVzdC5iYnlzdGF0aWMuY29tghdjcmVzdC5zdGFnZS5iZXN0YnV5LmNvbYIkaW1h
Z2VzLXNzbC11c3dlYi5zdGFnZS5iYnlzdGF0aWMuY29tghdzdGFnZWNnMnJ0YS5i
ZXN0YnV5LmNvbYImY3NzLXNzbC11c3dlYi5jbG91ZC10ZXN0LmJieXN0YXRpYy5j
b22CHWNvbW1lcmNlLXNzbC50ZXN0LmJlc3RidXkuY29tghZwbC5jb250ZXh0LmJl
c3RidXkuY29tgh5waXNjZXMtc3NsLnN0YWdlLmJieXN0YXRpYy5jb22CGGltYWdl
cy5zdGFnZS5iZXN0YnV5LmNvbYIXYXBpZHItc3NsLmZ1dHVyZXNob3AuY2GCF2lt
Zy5zdGFnZS5iYnlzdGF0aWMuY29tghh3d3cuc3RhZ2UuYmVzdGJ1eS5jb20ubXiC
FmNyZXN0LnRlc3QuYmVzdGJ1eS5jb22CEXVhdC5nZWVrc3F1YWQuY29tghh3d3cu
c3RhZ2UubWFnbm9saWFhdi5jb22CIm1pc2Mtc3NsLXVzd2ViLnN0YWdlLmJieXN0
YXRpYy5jb22CIHd3dy5zdGFnZS5yb2NrZXRmaXNocHJvZHVjdHMuY29tghxjbG91
ZC10ZXN0LmR5bmV4cHJvZHVjdHMuY29tghlhc3NldHMudGVzdC5iYnlzdGF0aWMu
Y29tghlhcHAtc3NsLnN0YWdlLmJlc3RidXkuY29tghhwcm9kLWxpa2UuYmVzdGJ1
eS5jb20ubXgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNv
bS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEw
KjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZn
gQwBAgIwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVz
Lmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1
c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMBMGCisGAQQB
1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2oXmreOK8nZjEbNrUPxrf
97L9+13zH4ID89w9SXsd+QIFb+BvH9TVWoT/lqRQoM7zepG5vwzfS1jTxfryQomL
9x0qKKhigEvu9m+XPzFcq5aYngsk6ys3O32T6LprPhrxw4GB7bPZJfhzbQLIRBx+
cwzzSePyKUhEdUAHAF47bxoQU025NBHZ/hTnubV6n18m6wx3RraJIgS8Zg14hiMr
lcQMrbLKpkSTOF+Ma8YrbOYwAGgJBPC3+tk9BqbYo08mIIgfKFRGm09lxASRBYJU
KMqh473TCBNXYpPtZdlwshtGGn4WTMqW4ct7bEeYF9nJuE9wErdZ+CNV5fwPpD4C
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmveKSonHW6ADT+1e8ha
hK8bsjIV8kcW+9dVAXRh5tk73jrx2dLXGnfzvHCxCgl/b1TOtbjji76OjdGaYz1k
IuuNnmeNWVQb5fi+GCRb348x9AavWGjmzUHNQQIl6/lWjZmTlELgMX94DGSaUcwL
KTbegZZQZnh91t3Ehg6fdUmNcRjeZbpUyYR/cbtLjhOuIMvpytqmPblk653ucoKt
0UOvLJjcrigHWAOPLZu4Cy+1ZFRMZu7OosXrLalEwmKAHki7ByAmhUXAZ2v+pcma
rXEgWs/Au/TjrBIQbDc2kTuC6Ft6haLCQKq/LOeK1Wvo4V6zLWCegb6OrrQx6yXM
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17161436080651116566177231871778392455
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Richfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Best Buy Co, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pl.bestbuy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22018656666455998717941244803402321251211449388314142539798667339542651815688145336848957198348996280429570889555454990851965836290970071016925472274809822394821777122540286499901306210702598135637245297284371426689050866969267174882124903098959641685970887226277987752063507015373066986575555201145563020369346131577830313366343628696873355871822000043092206971623319960425742869830431494451230823261504727390946526133928547943992348553635039051462094355736671986562354244982805018032721324094508713129030808650858795298747022160428562483712101478463622131619426618240988840413575121306456259346131281963996246559759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6bf3e3f3500376477cc98aca545de89aff8dfcc3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2054 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.m.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.pisces.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-bbyca6.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.pisces.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdr-ssl.bestbuy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misc-ssl-usweb.cloud-test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud-test.insigniaproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mexico.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.dynexproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.insigniaproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css-ssl-usweb.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denver-commerce-ssl.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.pacificsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apid-ext-cld.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apid-ext-cld.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdr.bestbuy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud-test.rocketfishproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js-ssl-usweb.cloud-test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts-ext-cld.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.bestbuy.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudtestcg2rta.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud-test.pacificsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-ssl.cloud-test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pisces-ssl.test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-ssl.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbyazservices-pl.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mexico.test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denver-ssl.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.deals.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts-ext-cld.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud-test-ssl.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js-ssl-usweb.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-download.digitallibrary.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbyawstagservices-pl.l7ss.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.magnoliaav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-ssl-usweb.cloud-test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-proxy.test.bby-ext-gw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denver-mdot-ssl.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-proxy.stage.bby-ext-gw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidr-ssl.bestbuy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ssl.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-dbx.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ssl.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calidad.bestbuy.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-dbx.test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crest.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-ssl-usweb.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagecg2rta.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css-ssl-usweb.cloud-test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce-ssl.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.context.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pisces-ssl.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidr-ssl.futureshop.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.bestbuy.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crest.test.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.geeksquad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.magnoliaav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misc-ssl-usweb.stage.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.rocketfishproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud-test.dynexproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.test.bbystatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-ssl.stage.bestbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-like.bestbuy.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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