travel.global.grinnell.edu

- Grinnell College -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 05:19:99:cd:73:33:68:d0:cf:59:d3:68:1f:8a:2d:61 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Grinnell College

Organization: Grinnell College
Organization unit: The Institute for Global Engagement
State / Province: Iowa
Locality: Grinnell
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:19:99:cd:73:33:68:d0:cf:59:d3:68:1f:8a:2d:61
Serial Number (int): 6779066886483550509229588764475141473
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f1:94:5b:b1:44:89:d5:a6:9e:0d:51:df:e8:3b:87:51:4e:a5:a5:f0
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 47:93:20:c2:85:96:9a:d7:ba:ab:1d:c9:41:d1:86:3b:51:2b:aa:2b
Fingerprint (sha256): 03:3f:56:91:1a:25:79:83:59:a4:68:8c:43:5d:d8:04:63:9d:f0:54:0a:62:3f:41:ef:ea:66:6e:2f:03:8c:6c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate travel.global.grinnell.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for travel.global.grinnell.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

travel.global.grinnell.edu

Other certificates including the domain name grinnell.edu

(limited to 100 certificates)
shiny.grinnell.edu
cluster.technolutions.net
sites.grinnell.edu
lgbtoralhistories.sites.grinnell.edu
www.grinnell.edu
growingbeisbol.sites.grinnell.edu
magazine.grinnell.edu
idp.grinnell.edu
dataweek.sites.grinnell.edu
securedns1.planmygift.org
fall2018.museumstudies.sites.grinnell.edu
labs.grinnell.edu
dansinykin.sites.grinnell.edu
absentshakespeare.sites.grinnell.edu
koreanatgrinnell.sites.grinnell.edu
summer2017.digitalbridgestodance.sites.grinnell.edu
digital.grinnell.edu
MAILFILTER.GRINNELL.EDU
edge-uc2.peopleadmin.com
wilsonspark.sites.grinnell.edu
haenfler.sites.grinnell.edu
golf.grinnell.edu
haenfler.sites.grinnell.edu
confrontinghate.sites.grinnell.edu
hum101.sites.grinnell.edu
deathsexandmoney.sites.grinnell.edu
cluster.technolutions.net
cito.sites.grinnell.edu
travel.global.grinnell.edu
yoosebj.sites.grinnell.edu
cluster.technolutions.net
vpn.grinnell.edu
codecamp.sites.grinnell.edu
uconnectlabs.com
cluster.technolutions.net
comm.sites.grinnell.edu
edge-uc2.peopleadmin.com
toddarmstrong.sites.grinnell.edu
bferguson.sites.grinnell.edu
dla.sites.grinnell.edu
gcdata.sites.grinnell.edu
www-temp.cs.grinnell.edu
maipvu.sites.grinnell.edu
bookstore.grinnell.edu
lewiscar.sites.grinnell.edu
sandbox.digitalbridgestodance.sites.grinnell.edu
absentshakespeare.sites.grinnell.edu
discoveringdiaries.sites.grinnell.edu
golf.grinnell.edu
racingiowa.sites.grinnell.edu
mapping.calebelfenbein.sites.grinnell.edu
cluster.technolutions.net
vostinar.sites.grinnell.edu
remotehelp.grinnell.edu
loganmlee.sites.grinnell.edu
securedns1.planmygift.org
catalog.grinnell.edu
www-temp.cs.grinnell.edu
omeka-s.grinnell.edu
digitalbridgestodance.sites.grinnell.edu
edge_uc2.peopleadmin.com
pioneers.grinnell.edu
securedns1.planmygift.org
anger.sites.grinnell.edu
growingbeisbol.sites.grinnell.edu
isle-stage.grinnell.edu
golf.grinnell.edu
dataweek.sites.grinnell.edu
pioneerweekend.sites.grinnell.edu
summer2017.digitalbridgestodance.sites.grinnell.edu
cluster.technolutions.net
unclesam.sites.grinnell.edu
idp.grinnell.edu
his100.sarahjpurcell.sites.grinnell.edu
mailfilter.grinnell.edu
organicchem.sites.grinnell.edu
eriksimpson.sites.grinnell.edu
securedns1.planmygift.org
pioneers.grinnell.edu
idp.grinnell.edu
absentshakespeare.sites.grinnell.edu
grinnell.edu
unclesam.sites.grinnell.edu
stat2games.sites.grinnell.edu
researchcomputing.sites.grinnell.edu
pioneers.grinnell.edu
dlac.grinnell.edu
cluster.technolutions.net
lavermark.sites.grinnell.edu
sga.grinnell.edu
oxs.grinnell.edu
digital-crossroads.fredorivera.sites.grinnell.edu
qualdata.sites.grinnell.edu
securedns1.planmygift.org
eriksimpson.sites.grinnell.edu
pioneers.grinnell.edu
uconnectlabs.com
steveandrews.sites.grinnell.edu
dansinykin.sites.grinnell.edu
BBLMSTEST.grinnell.edu

Certificate

The complete raw certificate details for travel.global.grinnell.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnFehSnvr1oPpSBiy706r
iewqqLWdjiZup6UfikxX4D0vC9jmrCwbx211GA74AC8LBe9flWnrpuAtYJRwJYyq
aJ08MBSJO6iKyxsDT39lH5VBXwUrAw6UB4Txojt+/7mAiC9vedgfZh88FXM82NLu
rejv2ibDylPS7jKGVKmD1re5mt8avNqIVGRMrA6G8H4J+83eSCL9yoAY9TW0diri
3eJjyQIntYwIXxwDDFnhDKxDt/5gC+P/Kdo8XiZQL3E1QASk3tDUIbIPh5XeGOrD
HW6vYF4klNTfsY9qljh2J2Q+t9+LPnr5zYsH8lAaJOi7hoWFk7sUfp4SAj14kheF
E+Ip7ahaw7LBe6q0jUUvmkAE2Ux8XYr8hAqabGnHtGIK68DE4xXWv0O5+laLEmRB
Us2tWrDr2toMcqI371kyP5eE6MU3Le1ezHws0Wvmkzmy7b4EXgVbg9xzF+koBHvo
H4qv/AhJOnusdmrVhrbLENJdJtMst9rChuHId8hk5Lm09Odqg33JpMv7RPfAXfz2
HA0DT5kwiLp0dssZfIQ6iSPlJr/1xN8+9WcFt0cU6POE/aRMP1FjT5TITGJgkioF
GXsunmOTcfm+TdHeFmsRBmTVIOleENArrfY0v/dSZBRYftJb27L42cmNWvE70IJ6
utLpMzNfqDHhR99Pl3BJcWcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6779066886483550509229588764475141473
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grinnell'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grinnell College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Institute for Global Engagement'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'travel.global.grinnell.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 637820956580807766958751624910698565732939890865140824769094742316910514028550383059351473459807420581110631362125902955345695902033188868730878817507618109766712081559956813082974819741796101229534091640558342115543231789777216608995605745008921128532400782535222498077754096330171124271035379309656066056113609459555097124813268053558007211991133872812736649583654706675597183804194620320820597897049150154662615757407447299759026711481640541296491772500511390433313032819897067301734303017466120570101119904036310371716080007052265176779957142916297984579730906482365123092672730113309133365558465330436643783306037435056039103479018356505241696614936670368757523485240367065284575833243262000354237777055602149370793187873180786170881258558921223725823231356960081349638339179550389937224113388422905019919791810139745140045911916781160917516853744779036450597901163311083838691794641523398997050794356656266481760884010197600835954614979372251353347828334271874681454573418500087881755926752936596690512789222133439187056196443116767680690364805870947782183511685259828902367540841605547079766386413312102638385215104373437327394135889858678847659574636168533815989203469317785456079565614797438590865985394133916993595046981991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1945bb14489d5a69e0d51dfe83b87514ea5a5f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.global.grinnell.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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