woody.discovery.com

- Discovery Communications LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:66:52:cb:14:23:03:80:d3:be:43:0e:11:3f:56:27 was issued on by DigiCert Inc.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Discovery Communications LLC

Organization: Discovery Communications LLC
State / Province: Tennessee
Locality: Knoxville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:66:52:cb:14:23:03:80:d3:be:43:0e:11:3f:56:27
Serial Number (int): 20469713463480809487956321448457360935
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f0:71:a1:9e:19:41:90:80:04:f1:72:5b:82:32:cd:21:04:b5:16:54
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): fe:85:27:46:a5:71:5d:63:a7:86:23:33:07:3c:0d:87:88:84:ba:f8
Fingerprint (sha256): 03:39:f9:22:4e:ff:c6:ba:1a:ee:19:37:1c:70:69:55:e3:6a:8e:99:8a:a2:96:48:e1:0f:da:d7:10:04:55:bd

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate woody.discovery.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for woody.discovery.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

woody.discovery.com
tundra.discovery.com
taiga.discovery.com
taiga-api.discovery.com
staging-tundra.discovery.com
staging-taiga.discovery.com
staging-taiga-api.discovery.com
staging-liaz.discovery.com
staging-liaz-proxy.discovery.com
staging-iris.discovery.com
staging-iris-websocket.discovery.com
staging-iris-provisioning.discovery.com
staging-iris-gateway.discovery.com
staging-iris-binaries.discovery.com
staging-iris-api-tasking.discovery.com
staging-iris-api-reporting.discovery.com
staging-iris-api-recording.discovery.com
staging-iris-api-notepad.discovery.com
staging-iris-api-links.discovery.com
staging-iris-api-cues.discovery.com
staging-iris-api-booking.discovery.com
staging-iris-api-auth.discovery.com
staging-bskybstatusmessages.discovery.com
staging-bskybcurationfeed.discovery.com
staging-agate.discovery.com
qa-tundra.discovery.com
qa-liaz.discovery.com
qa-liaz-proxy.discovery.com
qa-iris.discovery.com
qa-iris-websocket.discovery.com
qa-iris-provisioning.discovery.com
qa-iris-gateway.discovery.com
qa-iris-binaries.discovery.com
qa-iris-api-tasking.discovery.com
qa-iris-api-reporting.discovery.com
qa-iris-api-recording.discovery.com
qa-iris-api-notepad.discovery.com
qa-iris-api-links.discovery.com
qa-iris-api-cues.discovery.com
qa-iris-api-booking.discovery.com
qa-iris-api-auth.discovery.com
qa-agate.discovery.com
liaz.discovery.com
liaz-proxy.discovery.com
iris.discovery.com
iris-websocket.discovery.com
iris-provisioning.discovery.com
iris-gateway.discovery.com
iris-binaries.discovery.com
iris-api-tasking.discovery.com
iris-api-reporting.discovery.com
iris-api-recording.discovery.com
iris-api-notepad.discovery.com
iris-api-links.discovery.com
iris-api-cues.discovery.com
iris-api-booking.discovery.com
iris-api-auth.discovery.com
hotfix-tundra.discovery.com
hotfix-taiga.discovery.com
hotfix-taiga-api.discovery.com
hotfix-liaz-proxy.discovery.com
hotfix-iris.discovery.com
hotfix-iris-websocket.discovery.com
hotfix-iris-provisioning.discovery.com
hotfix-iris-gateway.discovery.com
hotfix-iris-binaries.discovery.com
hotfix-iris-api-tasking.discovery.com
hotfix-iris-api-reporting.discovery.com
hotfix-iris-api-recording.discovery.com
hotfix-iris-api-notepad.discovery.com
hotfix-iris-api-links.discovery.com
hotfix-iris-api-cues.discovery.com
hotfix-iris-api-booking.discovery.com
hotfix-iris-api-auth.discovery.com
graphyrus.discovery.com
dev-woody.discovery.com
dev-liaz.discovery.com
dev-liaz-proxy.discovery.com
dev-graphyrus.discovery.com
bskybstatusmessages.discovery.com
bskybcurationfeed.discovery.com
agate2.discovery.com
agate.discovery.com

Other certificates including the domain name discovery.com

(limited to 100 certificates)
tvlistings-qa.discovery.com
insider.discovery.com
indiamail.discovery.com
*.disco-api.com
*.discovery.com
passwordsafe-dev.discovery.com
*.nw.discovery.com
email.discovery.com
AWUZAPONARPRO01.dci.discovery.com
*.infra.discovery.com
iasm.discovery.com
adsalesdesign.discovery.com
deliver-qa.discovery.com
blacklineqa1.discovery.com
*.qa2.sauce.digitalstudios.discovery.com
creaapcps01.discovery.com
dev-momentum.discovery.com
insider.discovery.com
adsalesdesign.discovery.com
lnmail1.discovery.com
ir.corporate.discovery.com
japan.discovery.com
dtag-jsreport.devops.discovery.com
discovery.com
lync2013.dci.discovery.com
woody.discovery.com
auth.discovery.com
MUMAAPLYNCSBC02.dci.discovery.com
www.mexico.discovery.com
access.discovery.com
sapsanprd.discovery.com
hybridmail.discovery.com
corporate.discovery.com
*.sauce.digitalstudios.discovery.com
screening.discovery.com
dads.discovery.com
oktaadmin.discovery.com
remote.discovery.com
securestore.discovery.com
lnmail1.discovery.com
ssa.discovery.com
*.dev.discovery.com
adsalesdesign.discovery.com
store.discovery.com
cxoqa.discovery.com
inlet.discovery.com
images.dds.discovery.com
www.adsalesevents.discovery.com
api.digitalstudios.discovery.com
tlssyslog.discovery.com
org.discovery.com
games.discovery.com
leapfrog-ssl-4.gcs-web.com
citrix-director.discovery.com
edgepool2013.discovery.com
insider.discovery.com
deliver-uat.discovery.com
gohelp.discovery.com
*.bcqa.discovery.com
hrmobileinboxsba.discovery.com
www.food.com
dgoauth-qa.discovery.com
cloud-qa.discovery.com
access.discovery.com
*.discovery.com
entrada.discovery.com
lync2013.dci.discovery.com
soundfx.discovery.com
*.videogo.sauce.digitalstudios.discovery.com
straapiptv.discovery.com
lync2013.dci.discovery.com
strrapotxt01.discovery.com
*.prod.discovery.com
discovery.com
blacklineqa1.discovery.com
people.discovery.com
preprod.projectcat.discovery.com
gohelp.discovery.com
dtag-api.devops.discovery.com
tkyzaplyncsba01.dci.discovery.com
strzadtraps01.dci.discovery.com
insider.discovery.com
www.consumerproducts.discovery.com
CXO.discovery.com
*.disco-api.com
linkit-stage.dci.discovery.com
gohelp.discovery.com
lnmail5.discovery.com
www.adsalesevents.discovery.com
auth.discovery.com
epak.discovery.com
gohelp.discovery.com
www.food.com
bk.inotes.discovery.com
*.nw.discovery.com
photoassets.discovery.com
leapfrog-ssl-4.gcs-web.com
access.discovery.com
discovery.com
KTCZIPWRKSFT01.dci.discovery.com

Certificate

The complete raw certificate details for woody.discovery.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPtjCCDp6gAwIBAgIQD2ZSyxQjA4DTvkMOET9WJzANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjIwMzE3MDAwMDAwWhcN
MjIwNjI5MjM1OTU5WjB6MQswCQYDVQQGEwJVUzESMBAGA1UECBMJVGVubmVzc2Vl
MRIwEAYDVQQHEwlLbm94dmlsbGUxJTAjBgNVBAoTHERpc2NvdmVyeSBDb21tdW5p
Y2F0aW9ucyBMTEMxHDAaBgNVBAMTE3dvb2R5LmRpc2NvdmVyeS5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCenbXfMFm5Ql5hAZaADKjDjTmFh4iH
6Va6tYRg9TumYyMnmDOr9H8xCf1gY+IO/2vFfCQ4I2Dza6r83YfSREwrZMl3Z561
efqro2IQBv5sjhjRGngOrEYKHGfYDPlBJ4Ra/5R/k3QpVT+irTY6YicbX3FZ5L6r
6B/x9tNaBwExEmqiwkIBrH1fBJIeQBYG3p/v2pq+YSEof03UK6W1mFeP9jaHcLbG
bZz83FkFy5tFivMh4h14X/HmLzjSVcLjWmxhUwEuyncJhF7PBogJKBz7GddXawZ8
CMnuf+ME8cTDbd9G7wGwRcfIkn02YjKG9W9POT6tjz6mzaQ7QU9Dn0E3AgMBAAGj
ggxjMIIMXzAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4E
FgQU8HGhnhlBkIAE8XJbgjLNIQS1FlQwggp8BgNVHREEggpzMIIKb4ITd29vZHku
ZGlzY292ZXJ5LmNvbYIUdHVuZHJhLmRpc2NvdmVyeS5jb22CE3RhaWdhLmRpc2Nv
dmVyeS5jb22CF3RhaWdhLWFwaS5kaXNjb3ZlcnkuY29tghxzdGFnaW5nLXR1bmRy
YS5kaXNjb3ZlcnkuY29tghtzdGFnaW5nLXRhaWdhLmRpc2NvdmVyeS5jb22CH3N0
YWdpbmctdGFpZ2EtYXBpLmRpc2NvdmVyeS5jb22CGnN0YWdpbmctbGlhei5kaXNj
b3ZlcnkuY29tgiBzdGFnaW5nLWxpYXotcHJveHkuZGlzY292ZXJ5LmNvbYIac3Rh
Z2luZy1pcmlzLmRpc2NvdmVyeS5jb22CJHN0YWdpbmctaXJpcy13ZWJzb2NrZXQu
ZGlzY292ZXJ5LmNvbYInc3RhZ2luZy1pcmlzLXByb3Zpc2lvbmluZy5kaXNjb3Zl
cnkuY29tgiJzdGFnaW5nLWlyaXMtZ2F0ZXdheS5kaXNjb3ZlcnkuY29tgiNzdGFn
aW5nLWlyaXMtYmluYXJpZXMuZGlzY292ZXJ5LmNvbYImc3RhZ2luZy1pcmlzLWFw
aS10YXNraW5nLmRpc2NvdmVyeS5jb22CKHN0YWdpbmctaXJpcy1hcGktcmVwb3J0
aW5nLmRpc2NvdmVyeS5jb22CKHN0YWdpbmctaXJpcy1hcGktcmVjb3JkaW5nLmRp
c2NvdmVyeS5jb22CJnN0YWdpbmctaXJpcy1hcGktbm90ZXBhZC5kaXNjb3Zlcnku
Y29tgiRzdGFnaW5nLWlyaXMtYXBpLWxpbmtzLmRpc2NvdmVyeS5jb22CI3N0YWdp
bmctaXJpcy1hcGktY3Vlcy5kaXNjb3ZlcnkuY29tgiZzdGFnaW5nLWlyaXMtYXBp
LWJvb2tpbmcuZGlzY292ZXJ5LmNvbYIjc3RhZ2luZy1pcmlzLWFwaS1hdXRoLmRp
c2NvdmVyeS5jb22CKXN0YWdpbmctYnNreWJzdGF0dXNtZXNzYWdlcy5kaXNjb3Zl
cnkuY29tgidzdGFnaW5nLWJza3liY3VyYXRpb25mZWVkLmRpc2NvdmVyeS5jb22C
G3N0YWdpbmctYWdhdGUuZGlzY292ZXJ5LmNvbYIXcWEtdHVuZHJhLmRpc2NvdmVy
eS5jb22CFXFhLWxpYXouZGlzY292ZXJ5LmNvbYIbcWEtbGlhei1wcm94eS5kaXNj
b3ZlcnkuY29tghVxYS1pcmlzLmRpc2NvdmVyeS5jb22CH3FhLWlyaXMtd2Vic29j
a2V0LmRpc2NvdmVyeS5jb22CInFhLWlyaXMtcHJvdmlzaW9uaW5nLmRpc2NvdmVy
eS5jb22CHXFhLWlyaXMtZ2F0ZXdheS5kaXNjb3ZlcnkuY29tgh5xYS1pcmlzLWJp
bmFyaWVzLmRpc2NvdmVyeS5jb22CIXFhLWlyaXMtYXBpLXRhc2tpbmcuZGlzY292
ZXJ5LmNvbYIjcWEtaXJpcy1hcGktcmVwb3J0aW5nLmRpc2NvdmVyeS5jb22CI3Fh
LWlyaXMtYXBpLXJlY29yZGluZy5kaXNjb3ZlcnkuY29tgiFxYS1pcmlzLWFwaS1u
b3RlcGFkLmRpc2NvdmVyeS5jb22CH3FhLWlyaXMtYXBpLWxpbmtzLmRpc2NvdmVy
eS5jb22CHnFhLWlyaXMtYXBpLWN1ZXMuZGlzY292ZXJ5LmNvbYIhcWEtaXJpcy1h
cGktYm9va2luZy5kaXNjb3ZlcnkuY29tgh5xYS1pcmlzLWFwaS1hdXRoLmRpc2Nv
dmVyeS5jb22CFnFhLWFnYXRlLmRpc2NvdmVyeS5jb22CEmxpYXouZGlzY292ZXJ5
LmNvbYIYbGlhei1wcm94eS5kaXNjb3ZlcnkuY29tghJpcmlzLmRpc2NvdmVyeS5j
b22CHGlyaXMtd2Vic29ja2V0LmRpc2NvdmVyeS5jb22CH2lyaXMtcHJvdmlzaW9u
aW5nLmRpc2NvdmVyeS5jb22CGmlyaXMtZ2F0ZXdheS5kaXNjb3ZlcnkuY29tghtp
cmlzLWJpbmFyaWVzLmRpc2NvdmVyeS5jb22CHmlyaXMtYXBpLXRhc2tpbmcuZGlz
Y292ZXJ5LmNvbYIgaXJpcy1hcGktcmVwb3J0aW5nLmRpc2NvdmVyeS5jb22CIGly
aXMtYXBpLXJlY29yZGluZy5kaXNjb3ZlcnkuY29tgh5pcmlzLWFwaS1ub3RlcGFk
LmRpc2NvdmVyeS5jb22CHGlyaXMtYXBpLWxpbmtzLmRpc2NvdmVyeS5jb22CG2ly
aXMtYXBpLWN1ZXMuZGlzY292ZXJ5LmNvbYIeaXJpcy1hcGktYm9va2luZy5kaXNj
b3ZlcnkuY29tghtpcmlzLWFwaS1hdXRoLmRpc2NvdmVyeS5jb22CG2hvdGZpeC10
dW5kcmEuZGlzY292ZXJ5LmNvbYIaaG90Zml4LXRhaWdhLmRpc2NvdmVyeS5jb22C
HmhvdGZpeC10YWlnYS1hcGkuZGlzY292ZXJ5LmNvbYIfaG90Zml4LWxpYXotcHJv
eHkuZGlzY292ZXJ5LmNvbYIZaG90Zml4LWlyaXMuZGlzY292ZXJ5LmNvbYIjaG90
Zml4LWlyaXMtd2Vic29ja2V0LmRpc2NvdmVyeS5jb22CJmhvdGZpeC1pcmlzLXBy
b3Zpc2lvbmluZy5kaXNjb3ZlcnkuY29tgiFob3RmaXgtaXJpcy1nYXRld2F5LmRp
c2NvdmVyeS5jb22CImhvdGZpeC1pcmlzLWJpbmFyaWVzLmRpc2NvdmVyeS5jb22C
JWhvdGZpeC1pcmlzLWFwaS10YXNraW5nLmRpc2NvdmVyeS5jb22CJ2hvdGZpeC1p
cmlzLWFwaS1yZXBvcnRpbmcuZGlzY292ZXJ5LmNvbYInaG90Zml4LWlyaXMtYXBp
LXJlY29yZGluZy5kaXNjb3ZlcnkuY29tgiVob3RmaXgtaXJpcy1hcGktbm90ZXBh
ZC5kaXNjb3ZlcnkuY29tgiNob3RmaXgtaXJpcy1hcGktbGlua3MuZGlzY292ZXJ5
LmNvbYIiaG90Zml4LWlyaXMtYXBpLWN1ZXMuZGlzY292ZXJ5LmNvbYIlaG90Zml4
LWlyaXMtYXBpLWJvb2tpbmcuZGlzY292ZXJ5LmNvbYIiaG90Zml4LWlyaXMtYXBp
LWF1dGguZGlzY292ZXJ5LmNvbYIXZ3JhcGh5cnVzLmRpc2NvdmVyeS5jb22CF2Rl
di13b29keS5kaXNjb3ZlcnkuY29tghZkZXYtbGlhei5kaXNjb3ZlcnkuY29tghxk
ZXYtbGlhei1wcm94eS5kaXNjb3ZlcnkuY29tghtkZXYtZ3JhcGh5cnVzLmRpc2Nv
dmVyeS5jb22CIWJza3lic3RhdHVzbWVzc2FnZXMuZGlzY292ZXJ5LmNvbYIfYnNr
eWJjdXJhdGlvbmZlZWQuZGlzY292ZXJ5LmNvbYIUYWdhdGUyLmRpc2NvdmVyeS5j
b22CE2FnYXRlLmRpc2NvdmVyeS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBjQYDVR0fBIGFMIGCMD+gPaA7hjlodHRw
Oi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaWNlcnRTSEEyU2VjdXJlU2VydmVyQ0Et
MS5jcmwwP6A9oDuGOWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpY2VydFNI
QTJTZWN1cmVTZXJ2ZXJDQS0xLmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcG
CCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwfgYIKwYBBQUH
AQEEcjBwMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSAYI
KwYBBQUHMAKGPGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNI
QTJTZWN1cmVTZXJ2ZXJDQS0yLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMB
Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBikWZllJQw5Lv9QXv2zCf5Goiu10NV
9sTq/MbgpRL4LXgQs7qXSW8rgpZr0uuIgdijdYhEQPiGfRMm8reN161GsvwsgrB+
O/IwqEXlWVwE317AgGTy1AInnCNq2wexRAnNo8uPYFPXxcfDFDtjf3wjIbBDiEuV
r+7DODuBG+r9IvPGRldt+xTj6gKjhQ5i8y8M8aookqDYK+uNg5vizCl3M+IQNLjc
78nEhwIkVfudK/jviwvKpzG6kFaH39Iy1F6O6mSmKodWCmyFds+cFssXXt8TY6z/
clRfsvq6aiIBmJVg0CMfIZ40IP+66bxQALvPnNUaFK8uP6oEJteOaLN3
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp213zBZuUJeYQGWgAyo
w405hYeIh+lWurWEYPU7pmMjJ5gzq/R/MQn9YGPiDv9rxXwkOCNg82uq/N2H0kRM
K2TJd2eetXn6q6NiEAb+bI4Y0Rp4DqxGChxn2Az5QSeEWv+Uf5N0KVU/oq02OmIn
G19xWeS+q+gf8fbTWgcBMRJqosJCAax9XwSSHkAWBt6f79qavmEhKH9N1CultZhX
j/Y2h3C2xm2c/NxZBcubRYrzIeIdeF/x5i840lXC41psYVMBLsp3CYRezwaICSgc
+xnXV2sGfAjJ7n/jBPHEw23fRu8BsEXHyJJ9NmIyhvVvTzk+rY8+ps2kO0FPQ59B
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20469713463480809487956321448457360935
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tennessee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Knoxville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Discovery Communications LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'woody.discovery.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20023422099568414099436901562417549505617394448868066313803159791557208318709357277753634797808318142418239981756950798194632626877916006270061542715777672731317071230666153983856578573427481432570763239769040457972027281434614727716782753028240387920440722608944797861277634774275079824522929565180207514174827593769672925227775457106378979729546541975655328517385757402875743003678255491378506845976094628461877669216107608697513607481262417010812806181710610006910204975391120258641157549022388671094173224506723263569608317208166654200715257748175101043636962553718152749708179741320116794417128611280754214650167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f071a19e1941908004f1725b8232cd2104b51654
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2675 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woody.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tundra.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taiga.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taiga-api.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-tundra.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-taiga.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-taiga-api.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-liaz.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-liaz-proxy.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-iris.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-iris-websocket.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-iris-provisioning.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-iris-gateway.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-iris-binaries.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-iris-api-tasking.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-iris-api-reporting.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-iris-api-recording.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-iris-api-notepad.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-iris-api-links.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-iris-api-cues.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-iris-api-booking.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-iris-api-auth.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-bskybstatusmessages.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-bskybcurationfeed.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-agate.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tundra.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-liaz.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-liaz-proxy.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-iris.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-iris-websocket.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-iris-provisioning.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-iris-gateway.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-iris-binaries.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-iris-api-tasking.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-iris-api-reporting.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-iris-api-recording.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-iris-api-notepad.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-iris-api-links.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-iris-api-cues.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-iris-api-booking.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-iris-api-auth.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-agate.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liaz.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liaz-proxy.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris-websocket.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris-provisioning.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris-gateway.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris-binaries.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris-api-tasking.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris-api-reporting.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris-api-recording.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris-api-notepad.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris-api-links.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris-api-cues.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris-api-booking.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris-api-auth.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix-tundra.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix-taiga.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix-taiga-api.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix-liaz-proxy.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix-iris.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix-iris-websocket.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix-iris-provisioning.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix-iris-gateway.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix-iris-binaries.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix-iris-api-tasking.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix-iris-api-reporting.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix-iris-api-recording.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix-iris-api-notepad.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix-iris-api-links.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix-iris-api-cues.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix-iris-api-booking.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotfix-iris-api-auth.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphyrus.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-woody.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-liaz.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-liaz-proxy.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-graphyrus.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bskybstatusmessages.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bskybcurationfeed.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agate2.discovery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agate.discovery.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0062916665949430e4bbfd417bf6cc27f91a88aed74355f6c4eafcc6e0a512f82d7810b3ba97496f2b82966bd2eb8881d8a375884440f8867d1326f2b78dd7ad46b2fc2c82b07e3bf230a845e5595c04df5ec08064f2d402279c236adb07b14409cda3cb8f6053d7c5c7c3143b637f7c2321b043884b95afeec3383b811beafd22f3c646576dfb14e3ea02a3850e62f32f0cf1aa2892a0d82beb8d839be2cc297733e21034b8dcefc9c487022455fb9d2bf8ef8b0bcaa731ba905687dfd232d45e8eea64a62a87560a6c8576cf9c16cb175edf1363acff72545fb2faba6a2201989560d0231f219e3420ffbae9bc5000bbcf9cd51a14af2e3faa0426d78e68b377