ad-tech.nbcuni.com

- NBCUniversal Media, LLC -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:5c:bd:65:ea:25:ed:f9:73:e3:42:d1:56:48:a4:0b was issued on by DigiCert Inc.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

NBCUniversal Media, LLC

Organization: NBCUniversal Media, LLC
State / Province: New Jersey
Locality: Englewood
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:5c:bd:65:ea:25:ed:f9:73:e3:42:d1:56:48:a4:0b
Serial Number (int): 7127672739834633968718857363717137419
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 60:90:32:55:25:2e:b8:55:21:4b:df:63:76:d8:c9:07:45:01:c9:ad
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 6f:d7:c4:5e:4c:e0:a1:53:4b:81:53:6b:a8:1e:44:83:20:32:9e:e7
Fingerprint (sha256): 02:f3:d4:4c:06:94:57:12:e5:61:89:77:90:7c:9d:24:01:e6:1e:f8:b0:1a:a4:9f:b3:85:a3:eb:cc:30:fd:a4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate ad-tech.nbcuni.com

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ad-tech.nbcuni.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ad-tech.nbcuni.com
*.device-support-dev.ad-tech.nbcuni.com
*.device-support-stage.ad-tech.nbcuni.com
*.device-support.ad-tech.nbcuni.com
dev-video-ads-module.ad-tech.nbcuni.com
int-nft-video-ads-behavior.ad-tech.nbcuni.com
int-nft-video-ads-module-sst.ad-tech.nbcuni.com
int-nft-video-ads-module.ad-tech.nbcuni.com
int-nft-video-ads-profiler-sst.ad-tech.nbcuni.com
int-nft-video-ads-profiler.ad-tech.nbcuni.com
int-video-ads-behavior.ad-tech.nbcuni.com
int-video-ads-module-sst.ad-tech.nbcuni.com
int-video-ads-module.ad-tech.nbcuni.com
int-video-ads-profiler-sst.ad-tech.nbcuni.com
int-video-ads-profiler.ad-tech.nbcuni.com
qa-video-ads-module.ad-tech.nbcuni.com
stable-int-video-ads-behavior.ad-tech.nbcuni.com
stable-int-video-ads-module-sst.ad-tech.nbcuni.com
stable-int-video-ads-module.ad-tech.nbcuni.com
stable-int-video-ads-profiler-sst.ad-tech.nbcuni.com
stable-int-video-ads-profiler.ad-tech.nbcuni.com
stage-video-ads-module.ad-tech.nbcuni.com
stubbed-nft-video-ads-behavior.ad-tech.nbcuni.com
stubbed-nft-video-ads-module-sst.ad-tech.nbcuni.com
stubbed-nft-video-ads-module.ad-tech.nbcuni.com
stubbed-nft-video-ads-profiler-sst.ad-tech.nbcuni.com
stubbed-nft-video-ads-profiler.ad-tech.nbcuni.com
video-ads-behavior.ad-tech.nbcuni.com
video-ads-module-sst.ad-tech.nbcuni.com
video-ads-module.ad-tech.nbcuni.com
video-ads-profiler-sst.ad-tech.nbcuni.com
video-ads-profiler.ad-tech.nbcuni.com

Other certificates including the domain name nbcuni.com

(limited to 100 certificates)
nexusdev.nbcuni.com
www.universalorlando.com
stratastaging2.nbcuni.com
solar.nbcuni.com
atsc-ba-prod.nextgentv.nbcuni.com
vod-media-validator.summer-dev.nbcuni.com
solarstg.nbcuni.com
*.nbcuni.com
fcc-vera.nbcuni.com
cp.stg.inbcu.com
dev.showsystem.nbcuni.com
stage.idxapiexplorer.nbcuni.com
nimbus.nbcuni.com
sharedpartnerushdr.nbcuni.com
icreative-stg.nbcuni.com
earth-prod.nbcuni.com
schedulesstg.nbcuni.com
adminprod-nbcuaffiliate.nbcuni.com
score.nbcuni.com
www.seeso.com
www.stillonyourside.com
www.stillonyourside.com
dev.showsystem.nbcuni.com
vod-media-validator.earth-dev.nbcuni.com
prod.tvecms.nbcuni.com
dashboard.lightbox.nbcuni.com
stage.idxapi.nbcuni.com
int-grafana-us-east-2.nowtv-dev.nbcuni.com
usz.nbcuni.com
*.apps.nbcuni.com
api.vms.nbcuni.com
ad-tech.nbcuni.com
phoenix-ingest.next1-dev.nbcuni.com
ushwebstorestg.nbcuni.com
ermpoc.nbcuni.com
FilmEntMstr11DR.nbcuni.com
ssoapp.stg.inbcu.com
www.universalorlando.com
config-mgmt-tool-api.mssai-dev.nbcuni.com
showsystem.nbcuni.com
sst-moe-reports.summer-prod.nbcuni.com
stagingbenefits.nbcuni.com
ssl867936.cloudflaressl.com
tellystg.nbcuni.com
nbcuni.com
sportsevents.nbcuni.com
atsc-ba-qa.nextgentv.nbcuni.com
prod.tvecms.nbcuni.com
*.k8s.apps.nbcuni.com
msppm-ssrsPROD.nbcuni.com
www.stillonyourside.com
www.universalorlando.com
snasadmin.nbcuni.com
nonprod-test.origin-nonprod-commerce.nbcuni.com
mail.inbcu.com
*.apps.nbcuni.com
cp.nbcuni.com
phoenix-data-gold.vod-dev.nbcuni.com
www.colonytv.com
nbcuni.com
transworks.nbcuni.com
gateworks.nbcuni.com
qa-coding.nbcuni.com
prod.12.slot.cdn.salesforce-communities.com
nbcuni.com
www.stillonyourside.com
4help.nbcuni.com
stratastaging2.nbcuni.com
anywherelon.nbcuni.com
prod.12.slot.cdn.salesforce-communities.com
api.lxt.nbcuni.com
www.universalorlando.com
www.colonytv.com
perforceswarm.nbcuni.com
apps.devsysusz.nbcuni.com
prod.12.slot.cdn.salesforce-communities.com
licensing.nbcuni.com
qa-coding.nbcuni.com
stratastaging2.nbcuni.com
4help.nbcuni.com
cosmos.nbcuni.com
www.colonytv.com
phoenix-delivery.next1-prod.nbcuni.com
adc-vera.nbcuni.com
slate.nbcuni.com
qaapi.newsconnect.nbcuni.com
usgresearch.nbcuni.com
stage-mps.nbcuni.com
jp.travel.nbcuni.com
prod-longform.moe.nbcuni.com
myhrqa2.nbcuni.com
www.colonytv.com
slemanager-lem-synchronizer.vod-dev.nbcuni.com
www.stillonyourside.com
ushwebstore.nbcuni.com
fss.external.nbcuni.com
devfmaatmapi.nbcuni.com
dropbox.nbcuni.com
flexpay.nbcuni.com
www.colonytv.com

Certificate

The complete raw certificate details for ad-tech.nbcuni.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAETHG4SCgi86EeH0aHLfAiOa4+hGlR
RN9UcmxtlQcMSpvo7I+TlquRK6XRp/1owlbIAsW4XPwS+cRzfY/phRhzxw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7127672739834633968718857363717137419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Englewood'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NBCUniversal Media, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ad-tech.nbcuni.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00044c71b8482822f3a11e1f46872df02239ae3e84695144df54726c6d95070c4a9be8ec8f9396ab912ba5d1a7fd68c256c802c5b85cfc12f9c4737d8fe9851873c7
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60903255252eb855214bdf6376d8c9074501c9ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1439 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.device-support-dev.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.device-support-stage.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.device-support.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-video-ads-module.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-nft-video-ads-behavior.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-nft-video-ads-module-sst.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-nft-video-ads-module.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-nft-video-ads-profiler-sst.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-nft-video-ads-profiler.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-video-ads-behavior.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-video-ads-module-sst.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-video-ads-module.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-video-ads-profiler-sst.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-video-ads-profiler.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-video-ads-module.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stable-int-video-ads-behavior.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stable-int-video-ads-module-sst.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stable-int-video-ads-module.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stable-int-video-ads-profiler-sst.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stable-int-video-ads-profiler.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-video-ads-module.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stubbed-nft-video-ads-behavior.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stubbed-nft-video-ads-module-sst.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stubbed-nft-video-ads-module.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stubbed-nft-video-ads-profiler-sst.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stubbed-nft-video-ads-profiler.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-ads-behavior.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-ads-module-sst.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-ads-module.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-ads-profiler-sst.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-ads-profiler.ad-tech.nbcuni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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