login.laurelroad.com

- Key Bank -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:87:34:77:74:7d:2d:83:8c:68:ce:98:ab:b6:6d:d1 was issued on by DigiCert Inc.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Key Bank

Organization: Key Bank
State / Province: Ohio
Locality: Cleveland
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:87:34:77:74:7d:2d:83:8c:68:ce:98:ab:b6:6d:d1
Serial Number (int): 7348164204329101978549494321541180881
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 7a:99:64:55:e3:7d:c7:ef:bd:dc:3a:e3:d1:eb:f1:51:d9:5f:35:ee
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 32:e7:39:15:83:cc:73:83:3b:45:a2:97:33:e4:a1:2b:06:92:25:16
Fingerprint (sha256): 02:bd:8e:ee:23:d4:07:7c:c2:24:90:7f:97:aa:84:3a:b4:32:d0:64:f9:93:44:da:30:97:9c:f2:f1:39:46:0a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl

Check the revocation status for certificate login.laurelroad.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for login.laurelroad.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

login.laurelroad.com
tableau.laurelroad.com
sl.laurelroad.com
savings.laurelroad.com
pl.laurelroad.com
partner-api.laurelroad.com
offers.laurelroad.com
ml.laurelroad.com
login-lr.key.com
jarvis.laurelroad.com
homelending.key.com
cc.laurelroad.com
key.laurelroad.com
saving.laurelroad.com
checking.laurelroad.com
mortgage.laurelroad.com

Other certificates including the domain name laurelroad.com

(limited to 100 certificates)
login-dev.laurelroad.com
student-gcp-dev-np.laurelroad.com
login.laurelroad.com
sip11.ct950.com
client.relayit.com
sso-origin-gcp-uat-pp.laurelroad.com
dashboard-dev-dr-2.np.laurelroad.com
www.laurelroad.com
ml.laurelroad.com
*.laurelroad.com
personalapp.drbank.com
login.laurelroad.com
www.laurelroad.com
keybank.com
*.laurelroad.com
outlook.keybank.com
www.laurelroad.com
sl.laurelroad.com
dashboard-dev-dr.np.laurelroad.com
partner-api.laurelroad.com
sl-gcp-uat-pp.laurelroad.com
login-gcp-dev.laurelroad.com
login-dev.laurelroad.com
links.info.mail.laurelroad.com
login-lr-dev.key.com
sip.ct950.com
banking.laurelroad.com
banking.laurelroad.com
keybank.com
personalapp.drbank.com
pl.laurelroad.com
login-pp.laurelroad.com
savings-dev-gsa.np.laurelroad.com
homelending-test.laurelroad.com
sl.laurelroad.com
www.laurelroad.com
dashboard-dev-dr.np.laurelroad.com
ml-qa.laurelroad.com
*.laurelroad.com
lr-key-sso-prod.herokuapp.com
personal-los-dev.laurelroad.com
sip61.ct950.com
sip.ct950.com
sip61.ct950.com
login-dev.laurelroad.com
homelending.key.com
www.laurelroad.com
keybank.com
ml-qa.laurelroad.com
offers-origin-dev-dr-2.np.laurelroad.com
login.drbank.com
s4b.ct950.com
sip61.ct950.com
partner-api.laurelroad.com
login.laurelroad.com
personalapp.drbank.com
login-dev.laurelroad.com
login.laurelroad.com
sl.laurelroad.com
sso-origin-gcp-uat-pp.laurelroad.com
login-gcp-prod.laurelroad.com
sl.laurelroad.com
sl.laurelroad.com
www.laurelroad.com
sl.laurelroad.com
homelending-uat.key.com
ml.laurelroad.com
sip61.ct950.com
savings-dev-gsa.np.laurelroad.com
login-dev.laurelroad.com
sl.laurelroad.com
links.mail.laurelroad.com
sso-origin-gcp-uat-pp.laurelroad.com
savings-dev-gsa.np.laurelroad.com
personalapp.drbank.com
*.laurelroad.com
sip11.ct950.com
sl-gcp-uat-pp.laurelroad.com
login-dev.laurelroad.com
ml.laurelroad.com
ml.laurelroad.com
login-dev.laurelroad.com
keybank.com
www.laurelroad.com
sl.laurelroad.com
www.laurelroad.com
www.laurelroad.com
links.info.mail.laurelroad.com
banking.laurelroad.com
www.laurelroad.com
keybank.com
lr-key-jarvis-prod.herokuapp.com
login.laurelroad.com
links.info.mail.laurelroad.com
sip.ct950.com
banking.laurelroad.com
login-gcp-prod.laurelroad.com
sso-origin-gcp-uat-pp.laurelroad.com
login.laurelroad.com
pl.laurelroad.com

Certificate

The complete raw certificate details for login.laurelroad.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGuDCCBaCgAwIBAgIQBYc0d3R9LYOMaM6Yq7Zt0TANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE
aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjEx
MTE3MDAwMDAwWhcNMjIxMjE4MjM1OTU5WjBiMQswCQYDVQQGEwJVUzENMAsGA1UE
CBMET2hpbzESMBAGA1UEBxMJQ2xldmVsYW5kMREwDwYDVQQKEwhLZXkgQmFuazEd
MBsGA1UEAxMUbG9naW4ubGF1cmVscm9hZC5jb20wggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDtG1s7kxq5E4CHlpjm8XUJDxCQpoVdgP87Vb3sxQ5rAFG8
vFUR9+4kawiS0RkvNp5/yHrMfTRIhgznUCGEM7KcKWxTvQ/L25T4Hh9rm9h8c/QF
aTujreK1CN8IWuPK8L0ZJnNCWHS7ccoDoK4CqrI0bs7/I1b2W4/ANbOO5sLhLy6G
Ct3+W9CxTJJPsQz5+oUKCE1yJssF7TV9SOD04jfN0MHRr7/clQZ4UeiJPmM/ToWO
KGzlTArxBT6TDYqP8Y05zZ1UAaUIlQ10Nm1+nr/jnM6xhlVtKueIptzjJMpqLLMw
QZvCMib8q+iq4hvqzZJlC72JrTyULIinJjLhqD9BAgMBAAGjggNxMIIDbTAfBgNV
HSMEGDAWgBR0hYDAZsffN97PvSk3qgMdvu3NFzAdBgNVHQ4EFgQUeplkVeN9x++9
3Drj0evxUdlfNe4wggFtBgNVHREEggFkMIIBYIIUbG9naW4ubGF1cmVscm9hZC5j
b22CFnRhYmxlYXUubGF1cmVscm9hZC5jb22CEXNsLmxhdXJlbHJvYWQuY29tghZz
YXZpbmdzLmxhdXJlbHJvYWQuY29tghFwbC5sYXVyZWxyb2FkLmNvbYIacGFydG5l
ci1hcGkubGF1cmVscm9hZC5jb22CFW9mZmVycy5sYXVyZWxyb2FkLmNvbYIRbWwu
bGF1cmVscm9hZC5jb22CEGxvZ2luLWxyLmtleS5jb22CFWphcnZpcy5sYXVyZWxy
b2FkLmNvbYITaG9tZWxlbmRpbmcua2V5LmNvbYIRY2MubGF1cmVscm9hZC5jb22C
EmtleS5sYXVyZWxyb2FkLmNvbYIVc2F2aW5nLmxhdXJlbHJvYWQuY29tghdjaGVj
a2luZy5sYXVyZWxyb2FkLmNvbYIXbW9ydGdhZ2UubGF1cmVscm9hZC5jb20wDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYD
VR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNl
cnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMi5jcmwwSKBGoESGQmh0dHA6
Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcyVExTUlNBU0hBMjU2
MjAyMENBMS0yLmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIB
FhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYUGCCsGAQUFBwEBBHkwdzAk
BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME8GCCsGAQUFBzAC
hkNodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRM
U1JTQVNIQTI1NjIwMjBDQTEuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIE
AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAKBHb0pdU+OMy+Qxv3y26gsK/3Hi
mx9TDbP7JfBc8xHFBK+g/viCa+M7wyfiDdarR4ycj1UMS9+DW65Qf3lY6rsg6Tm7
JbBuScYcvU6quzSrVVhN3Qkm3/KZH5xa8MY7yTQaFVd+wg4fMe6P9Bu//JtQrGlF
P/7QQJWC02V+vUJkbXzfXB28S+iZCS39PHWcpeOfUxKh5hm8VyWtjdb6qtNc+5cN
pr/7n9ac4nHkFzzwmCoK3xB3wfwDWodQrOms/A8SguxeVUThYKY6OLHcHPkEGEsU
d0Ast/adsLwlDfvdjt54FsXyQdCyI/D9/rb7aNIMnaTXo0z2b2ToXuQEXhg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RtbO5MauROAh5aY5vF1
CQ8QkKaFXYD/O1W97MUOawBRvLxVEffuJGsIktEZLzaef8h6zH00SIYM51AhhDOy
nClsU70Py9uU+B4fa5vYfHP0BWk7o63itQjfCFrjyvC9GSZzQlh0u3HKA6CuAqqy
NG7O/yNW9luPwDWzjubC4S8uhgrd/lvQsUyST7EM+fqFCghNcibLBe01fUjg9OI3
zdDB0a+/3JUGeFHoiT5jP06Fjihs5UwK8QU+kw2Kj/GNOc2dVAGlCJUNdDZtfp6/
45zOsYZVbSrniKbc4yTKaiyzMEGbwjIm/KvoquIb6s2SZQu9ia08lCyIpyYy4ag/
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7348164204329101978549494321541180881
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cleveland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Key Bank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'login.laurelroad.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29931968209619170899917398526085358615361375193518772270919981354006386819892656838933750273482980942345825359350163811548948632487859818962006939828746528498153663662687137153724925418012551415267800317600300346689152983180213247946657658507566778911439376943631195517958783215311521535191086014881733526996427360377536542561253170118069911173136159771506266568030286725673013380778229194607314614585368876647680585491001208810784905064232525832377009927927746860934043047258213286132064308286073129358490184905540033395900589560075895238889266502534855055933372147910442223153026226106546521772209304498053967265601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a996455e37dc7efbddc3ae3d1ebf151d95f35ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (356 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.laurelroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tableau.laurelroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sl.laurelroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savings.laurelroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.laurelroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-api.laurelroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.laurelroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ml.laurelroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-lr.key.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarvis.laurelroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homelending.key.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc.laurelroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'key.laurelroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saving.laurelroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checking.laurelroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgage.laurelroad.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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