mycanon.stg.cusa.canon.com

- Canon U.S.A., INC. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:5a:6c:fb:2e:04:46:8c:a3:ef:af:80:6f:0f:f2:68 was issued on by DigiCert Inc.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Canon U.S.A., INC.

Organization: Canon U.S.A., INC.
State / Province: New York
Locality: Melville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:5a:6c:fb:2e:04:46:8c:a3:ef:af:80:6f:0f:f2:68
Serial Number (int): 12432569080079842118527686681134363240
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 58:ee:c1:8d:b7:e8:b7:c9:46:0d:57:ae:3d:e2:0d:f2:10:b8:dc:de
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): e3:1e:18:96:1e:7d:eb:03:1d:bc:6b:95:01:76:0f:aa:b3:76:34:2b
Fingerprint (sha256): 02:c8:96:11:80:18:23:04:f1:da:bb:85:ed:17:27:e9:9d:ee:8a:27:b1:bb:b0:e2:39:5f:0f:0d:9a:0c:d5:6f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate mycanon.stg.cusa.canon.com

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mycanon.stg.cusa.canon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mycanon.stg.cusa.canon.com
stg-address.mycanon.cusa.canon.com
stg-addressbook.cdf.cusa.canon.com
stg-ars.cdf.cusa.canon.com
stg-avs.mycanon.cusa.canon.com
stg-carepak.cdf.cusa.canon.com
stg-cgss.mycanon.cusa.canon.com
stg-communication.mycanon.cusa.canon.com
stg-file.mycanon.cusa.canon.com
stg-person.mycanon.cusa.canon.com
stg-preference.mycanon.cusa.canon.com
stg-preferences.cdf.cusa.canon.com
stg-product.mycanon.cusa.canon.com
stg-productmaster.cdf.cusa.canon.com
stg-productreg.cdf.cusa.canon.com
stg-profile.cdf.cusa.canon.com
stg-service-repair.cdf.cusa.canon.com
stg-snr.mycanon.cusa.canon.com
stg-warranty.mycanon.cusa.canon.com
stg.cdf-admin.cusa.canon.com
stg-addrbook.cdf.cusa.canon.com
stg-cps.cdf.cusa.canon.com
stg-cps.mycanon.cusa.canon.com
stg-optinout.cdf.cusa.canon.com
stg-order.mycanon.cusa.canon.com
stg-subscription.cdf.cusa.canon.com
stg-subscription.mycanon.cusa.canon.com
stg.cdf.cusa.canon.com
stg-subscription-stripe.myprofile.americas.canon.com

Other certificates including the domain name canon.com

(limited to 100 certificates)
secure07.stage.lithium.com
quickscan.ciis.canon.com
magentoapi.usa.canon.com
canammobileconnect.usa.canon.com
nwstg.cusa.canon.com
lfsstorefront.com
*.dev-apps.cusa.canon.com
www.cfsdealerportal.com
nyrhdz21.cusa.canon.com
WMBMQPRD.cusa.canon.com
commerce.mylan.csa.canon.com
cusa.canon.com
taxserviceqa.usa.canon.com
secure1.canon.com
essdmtes1qa.cusa.canon.com
nyrhdz20.cusa.canon.com
s21fsrcbrqa.cusa.canon.com
access.ciis.canon.com
Replenish.usa.canon.com
thinkinkdigital.com
www.employee-rewards.cusa.canon.com
secure1.canon.com
essdmtes2qa.cusa.canon.com
ecarriers.csa.canon.com
www.developersupport.canon.com
canonusaextranets.cusa.canon.com
chatbot-dev.ciis.canon.com
www.cla.canon.com
mps.cbps.canon.com
contentqa.cusa.canon.com
www.developersupport.canon.com
ereturn.usa.canon.com
www.support.cusa.canon.com
csa.canon.com
secure04.lithium.com
adseast.solutions.canon.com
msdjira.sc.rd.canon.com
s21.cusa.canon.com
ereturn.usa.canon.com
secure04.lithium.com
s21fsrcbrop.cusa.canon.com
ereturn.usa.canon.com
shop.usa.canon.com
shop.dev.csa.canon.com
mycanon.stg.cusa.canon.com
events.biggestfantour.com
shopqa-auth.cusa.canon.com
cdf.dt-ext.vpn.ciis.canon.com
learn.usa.canon.com
shop.usa.canon.com
imagination.usa.canon.com
web1cdvny.cfs.canon.com
esbprd.cusa.canon.com
ereturn.usa.canon.com
thinkinkdigital.com
secure04.lithium.com
globaldispatchsolution.api.esb.usa.canon.com
ccldev.cusa.canon.com
www.servicetrainingsolutions.cusa.canon.com
adscentral.solutions.canon.com
preview.partnernet.usa.canon.com
canonva.cvi.canon.com
cvi.canon.com
rtbcx.jp.canon.com
VAARCOTFORT.CUSA.CANON.COM
in-fedservice.cusa.canon.com
unbe.sxg.cusa.canon.com
ciis.canon.com
vapgp01.cusa.canon.com
cpfprismadirect.cusa.canon.com
akamai-san195.exacttarget.com
magentocloud37.map.fastly.net
www.cla.canon.com
esbqa-2.cusa.canon.com
raise.usa.canon.com
magentocloud52.map.fastly.net
www.developersupport.canon.com
secure11.lithium.com
mycsa.s21qa.csa.canon.com
ess1.csa.canon.com
lsarprx.cusa.canon.com
upload-photos.dtp-community.usa.canon.com
shortstack.usa.canon.com
email2.cusa.canon.com
varhdv117.cusa.canon.com
www.support.cusa.canon.com
secure11.lithium.com
impact-uat.csa.canon.com
kbsupport.cusa.canon.com
events.ciis.canon.com
ereturn.usa.canon.com
cfsdealerportal.com
taxservice.usa.canon.com
secure07.stage.lithium.com
*.cusa.canon.com
www.support.cusa.canon.com
travelexpensecusaqa.cusa.canon.com
oneweb.api-stg.esb.usa.canon.com
mnyacs1121.cusa.canon.com
smarterdocs.corp.cbps.canon.com

Certificate

The complete raw certificate details for mycanon.stg.cusa.canon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VxS3HZXsVOgBYA+1Pqc
o54HkLnvMBUveDToHYliLrKGlwKCwSliu/u6dOb+zVHJaru+L/f2xenJ5WTtA8vV
FdvZcqivlznVtivd5FAC5Mz/FCGUb6s5ECyb5DFJkSOaAZfCo/O6kH7uyNMol67P
5bNl25L+QWVdzj9pILmxTGDzKIxt0F0Av962ZMgGv88z1IuO8GcPk6U2Xqtum1Bb
Y01xmT7sGjl7gqaWJh06zr7bUiaYqh2xQbjk45rtHvdfMIDDSgPoBS9vemWvt2e2
RoO3AShTBDwBk+IcQFb6bb+mDrZAjjTTMmnWlI8/hdnlGfRfUOYNcYUEOyL2WVKP
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12432569080079842118527686681134363240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Melville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canon U.S.A., INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mycanon.stg.cusa.canon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30468957998491999095283615404766977063228214572956592229186229705851230023967109462464481309158469749693927458560327066024348554306667289860000834600589384362221773323351294031237355923182779573327907292112665310843931195995266179586605814753675989859639379997788454264906912667528270609250916451681655929758048536401042040188809728224533079881729450487462560264212215151982739013097122617741806196199255110762582018124730714119755025956233519100268911533734715854875758681096565110422697515648678535672247294965503042793002273981989506209176263292271107497940712941560011857281857584033836488653138369307755699933081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58eec18db7e8b7c9460d57ae3de20df210b8dcde
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1009 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycanon.stg.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-address.mycanon.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-addressbook.cdf.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-ars.cdf.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-avs.mycanon.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-carepak.cdf.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-cgss.mycanon.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-communication.mycanon.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-file.mycanon.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-person.mycanon.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-preference.mycanon.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-preferences.cdf.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-product.mycanon.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-productmaster.cdf.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-productreg.cdf.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-profile.cdf.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-service-repair.cdf.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-snr.mycanon.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-warranty.mycanon.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.cdf-admin.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-addrbook.cdf.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-cps.cdf.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-cps.mycanon.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-optinout.cdf.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-order.mycanon.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-subscription.cdf.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-subscription.mycanon.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.cdf.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-subscription-stripe.myprofile.americas.canon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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