ssl.chinanetcenter.com

- Shanghai Wangsu Science & Technology Co. Ltd. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0e:fa:d5:22:30:b4:91:1f:e1:1f:9f:be:3c:24:dd:33 was issued on by DigiCert Inc.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The DNS name 'ebiz_aia.8686c.com' contains an underscore (_) character Before explicitly stating as such in CABF 1.6.2, the stance of RFC5280 is adopted that DNSNames MUST NOT contain an underscore character. (BR 7.1.4.2.1)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • DNSName MUST NOT contain underscore characters (BRs: 7.1.4.2.1)
  • DNSName MUST NOT contain underscore characters (RFC5280: 4.1.2.6)

Shanghai Wangsu Science & Technology Co. Ltd.

Organization: Shanghai Wangsu Science & Technology Co. Ltd.
State / Province: Shanghai
Locality: Shanghai
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:fa:d5:22:30:b4:91:1f:e1:1f:9f:be:3c:24:dd:33
Serial Number (int): 19911589017699204868739840827250236723
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b1:14:c5:81:09:c8:93:0e:9f:be:5c:4e:73:c4:f2:6b:28:9a:76:85
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): e8:e5:2e:33:50:47:24:66:38:10:62:cc:4f:ec:94:f5:d8:f0:46:a1
Fingerprint (sha256): 03:29:ac:85:9e:6f:bd:50:62:e8:68:af:90:d1:59:23:c4:b8:be:e9:db:30:40:de:1e:46:2c:e3:08:8a:e6:b6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g4.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g4.crl

Check the revocation status for certificate ssl.chinanetcenter.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.chinanetcenter.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl.chinanetcenter.com
acode.tuanimg.com
safebrowsing-cache.firefox.com.cn
ebiz_aia.8686c.com
aes_aia.8686c.com
www1_aia.8686c.com
www.aia.8686c.com
kh.vanho.cn
fswr.cdn.gzyouai.com

Other certificates including the domain name chinanetcenter.com

(limited to 100 certificates)
ssl3.chinanetcenter.com
ssl2.chinanetcenter.com
ssl.chinanetcenter.com
ssl3.chinanetcenter.com
*.chinanetcenter.com
webssl3.chinanetcenter.com
ssl4.chinanetcenter.com
webssl3.chinanetcenter.com
sslshare.chinanetcenter.com
ssl3.chinanetcenter.com
mm.chinanetcenter.com
ssl3.chinanetcenter.com
ssl3.chinanetcenter.com
webssl3.chinanetcenter.com
ssl4.chinanetcenter.com
ssl.chinanetcenter.com
ssl4.chinanetcenter.com
*.ott.chinanetcenter.com
smedgessl0.chinanetcenter.com
webssl3.chinanetcenter.com
ssl.chinanetcenter.com
ssl.chinanetcenter.com
webssl.chinanetcenter.com
smedgessl0.chinanetcenter.com
smedgessl0.chinanetcenter.com
maangh2.chinanetcenter.com
ssl2.chinanetcenter.com
www.chinanetcenter.com
smedgessl0.chinanetcenter.com
www.chinanetcenter.com
ssl3.chinanetcenter.com
ssl3.chinanetcenter.com
www.chinanetcenter.com
webssl2.chinanetcenter.com
webssl.chinanetcenter.com
webssl.chinanetcenter.com
ssl.chinanetcenter.com
security.chinanetcenter.com
webssl2.chinanetcenter.com
webssl2.chinanetcenter.com
ssl6.chinanetcenter.com
webssl.chinanetcenter.com
www.chinanetcenter.com
ssl3.chinanetcenter.com
webssl2.chinanetcenter.com
middleplatform.chinanetcenter.com
webssl.chinanetcenter.com
security.chinanetcenter.com
livessl.chinanetcenter.com
www.chinanetcenter.com
www.chinanetcenter.com
*.ams.ott.chinanetcenter.com
ssl3.chinanetcenter.com
security.chinanetcenter.com
security.chinanetcenter.com
ean.chinanetcenter.com
ssl4.chinanetcenter.com
ssl5.chinanetcenter.com
ssl2.chinanetcenter.com
ssl2.chinanetcenter.com
*.fdn.chinanetcenter.com
webssl2.chinanetcenter.com
ssl5.chinanetcenter.com
flowrate.chinanetcenter.com
www.chinanetcenter.com
maangh2.chinanetcenter.com
ssl3.chinanetcenter.com
security.chinanetcenter.com
ssl6.chinanetcenter.com
security.chinanetcenter.com
smedgessl0.chinanetcenter.com
www.chinanetcenter.com
ssl3.chinanetcenter.com
www.chinanetcenter.com
webssl.chinanetcenter.com
ssl4.chinanetcenter.com
www.chinanetcenter.com
ssl2.chinanetcenter.com
sslshare.chinanetcenter.com
ssl.chinanetcenter.com
ssl6.chinanetcenter.com
www.chinanetcenter.com
ssl6.chinanetcenter.com
ssl4.chinanetcenter.com
ssl4.chinanetcenter.com
webssl3.chinanetcenter.com
www.chinanetcenter.com
sslshare.chinanetcenter.com
cpic.chinanetcenter.com
ssl3.chinanetcenter.com
ssl6.chinanetcenter.com
ssl3.chinanetcenter.com
security.chinanetcenter.com
www.chinanetcenter.com
livessl.chinanetcenter.com
webssl.chinanetcenter.com
ssl4.chinanetcenter.com
ssl3.chinanetcenter.com
ssl4.chinanetcenter.com
smedgessl0.chinanetcenter.com

Certificate

The complete raw certificate details for ssl.chinanetcenter.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBzps+fyiiLVybC+HWIe
aDJXWHk3EL3PH4ouJjhf46F4z3YWc3YMrz/Icb5wWdXlXLcLPNTgoyuGN3TpWzQS
3vdmGhZKCpCjYuFNLZJJAwQMfgynedy/BhmnfF18JyoZtPanJcKrvOWnYqqYbZ5F
Lx9/MWV9oPN9l/kB9lRX9jvfdEpa5ibTtUByWePVCHMKggY9w3oFpULBF6sDgxNE
flZHMYHHLpOjkYmNuYbGKqdOZVN0/Hw27qL/MQ726xUUhZVfBO/YWZT7cGMsM4Ns
31PauTvH0twjrUd19UxJCuvK8p6o34EB26VY9rwtPhxB/LYd2VZOWt8aI4KVSVVc
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19911589017699204868739840827250236723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shanghai Wangsu Science & Technology Co. Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.chinanetcenter.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25261918476274939324570467159166360348345183705189641393628041674361466036232622111975022726971318439395016958704419490647095744844533591443055005576947339167991622199630587183596715590505789440162319206222878885155520489729976824316242915833070341630102697955324430987505381095796975037711290003774783138120747571108698809244906998451439071193136415791895995046736845465779259952221222784997098432885436037801443430458284407512974628385566975926927356102789731285091553714023584954516452611107238369039644004383750061752839435179480224501080528097790836089097934211410515808461692180856948810825487378267935383837751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b114c58109c8930e9fbe5c4e73c4f26b289a7685
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (194 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.chinanetcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acode.tuanimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safebrowsing-cache.firefox.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz_aia.8686c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aes_aia.8686c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1_aia.8686c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aia.8686c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kh.vanho.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fswr.cdn.gzyouai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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