*.usantotomas.edu.co

- Universidad Santo Tomás -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 01:9f:ae:03:a7:e1:9f:1d:51:8c:92:fc:46:22:f6:9c was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universidad Santo Tomás

Organization: Universidad Santo Tomás
Locality: Bogotá
Country: CO

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:9f:ae:03:a7:e1:9f:1d:51:8c:92:fc:46:22:f6:9c
Serial Number (int): 2158332625204232745967441257513023132
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: c2:cc:27:fd:95:7d:34:d2:5a:6c:02:8b:db:9e:6e:fb:36:05:b0:58
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): b9:53:93:45:60:a9:fd:4e:d5:36:97:05:98:50:5f:e3:e1:f2:93:18
Fingerprint (sha256): 03:45:ab:59:d1:3f:d3:e8:d5:d4:24:66:01:18:4e:cf:99:15:9b:8f:6e:ef:a5:65:1b:85:8f:11:bc:a0:15:6d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate *.usantotomas.edu.co

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.usantotomas.edu.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.usantotomas.edu.co
usantotomas.edu.co

Other certificates including the domain name usantotomas.edu.co

(limited to 100 certificates)
craibooklick.usantotomas.edu.co
*.crai-ustadigital.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
mesadeayuda.usantotomas.edu.co
zonedirector.usantotomas.edu.co
centrodesoporteacademico.usantotomas.edu.co
bucket.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
centrodesoporteacademico.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
mesadeayuda.usantotomas.edu.co
craibooklick.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
capacitacioncsa.usantotomas.edu.co
*.usantotomas.edu.co
craibooklick.usantotomas.edu.co
capacitacioncsa.usantotomas.edu.co
craibooklick.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.crai-ustadigital.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
craibooklick.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co

Certificate

The complete raw certificate details for *.usantotomas.edu.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHwjCCBqqgAwIBAgIQAZ+uA6fhnx1RjJL8RiL2nDANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA3MjcwMDAwMDBa
Fw0yMzA3MzEyMzU5NTlaMGExCzAJBgNVBAYTAkNPMRAwDgYDVQQHDAdCb2dvdMOh
MSEwHwYDVQQKDBhVbml2ZXJzaWRhZCBTYW50byBUb23DoXMxHTAbBgNVBAMMFCou
dXNhbnRvdG9tYXMuZWR1LmNvMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEAyLAQO3QB34qebUOPfh6fLwhWjRMN6gos47gjrbzoViBjvD1ItZbPM0pOngAp
fUgi3GIZurclG1bZev3KR0c+lfXbjo0Xjj7RiHQ8THZoxCJJDIXwUEYxgAX15w+W
S/Z2DbGe8Ic7SWuhP6IqY8A0/B6ie16aCBo7BlQLqotLQD/SOewQnQVPPzGFtoPu
wVCKBolixLbgDUoF1g9oVhxZ42/FlBMAcFKIWN2LgUd/whxSVanTbQfFuoCv4IRL
tHxgEntTK2hkWzdJjD2jKGaweE4dEBF4qcRB071lkp8mluipD3nFY2wiIrTJVnMv
Yem9wEL5T8X+VsxH3oSv5XYpncwm7BGg7dYhnc9sTPlBEitup3x3kFqPsXdWLQgR
8ggk0W+3avFtGuxg7wlfOO+sxwTt7Eq4fdCdYjoNziOtqMEXJ6mRGxfxv0Zbwqye
ZkdZRfxQ8QDdaLAuZ6oyuTVOLZ7KTQC9KYEXDp9QMoxdnMJhWv/UjVS2AUbaNslO
5N5dcsQMX49LLtURUO90nddUrRTP5Oj3iq05bsmwf0QLwKUkB/0kebDgXzgwHYK1
0mMlhZ1n63tumUFKQCnUYWNPY4oK3UZI/NWop5ONAsz6KdwKnUGMqbz8e7vje4ll
m2nUyLiu+wtta63bPYupkYjhmCuuAeLyiowZmNMOH+F0yVUCAwEAAaOCA4YwggOC
MB8GA1UdIwQYMBaAFLdrouqoqoSMeeq02g+YssWVdrn0MB0GA1UdDgQWBBTCzCf9
lX000lpsAovbnm77NgWwWDAzBgNVHREELDAqghQqLnVzYW50b3RvbWFzLmVkdS5j
b4ISdXNhbnRvdG9tYXMuZWR1LmNvMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwgY8GA1UdHwSBhzCBhDBAoD6gPIY6aHR0cDov
L2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00
LmNybDBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExT
UlNBU0hBMjU2MjAyMENBMS00LmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcG
CCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwfwYIKwYBBQUH
AQEEczBxMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSQYI
KwYBBQUHMAKGPWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRM
U1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwCQYDVR0TBAIwADCCAXwGCisGAQQB1nkC
BAIEggFsBIIBaAFmAHcArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooA
AAGCQEIylgAABAMASDBGAiEA2HbzRxiu2g1e2rNLVN+wrsxskHrKxGFgbgrfaLse
z98CIQCvHd5TtjK01nCjB5xTka7PLemyIMm3ziWxtr62bbAdngB0ADXPGRu/sWxX
vw+tTG1Cy7u2JyAmUeo/4SrvqAPDO9ZMAAABgkBCMnUAAAQDAEUwQwIgP5UTQYPe
XcdvCZRnzp/uAi5SjjIpXooY2XmcEzefYvUCH1PwI7ICC4dZ2myViXXRF3ENLV9l
cSVTaF7nQD3kpt4AdQCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAA
AYJAQjKZAAAEAwBGMEQCIChs/pXuyPzltj4wJXNEdhNtZ5Tf55ZJHi3YUEW62J33
AiAZqDkf+GASA7T6R/Ac6fdRDKDhjSlS+Qt+h8JLypzAvjANBgkqhkiG9w0BAQsF
AAOCAQEAW6Hpb80wwwp+MaIAdzhbd14ja96PK1Mt0cpGdwck5aqxP4ZgW/UpzNhz
xO4CigLE25esuv9pQno5E9erObRz5+X3z18hcA1s/wVYcT9BFcxpE7V5Vb2C0/Hv
22JaptstlXlD4TTOwFPS/H0vnDisFTo2IRl4AhnEf27ylHoCgvNtPMjP1Ec++FbP
7/S6OJYdT7x9QsE/8kFzgHzhqcw7REIjtsW04Rdb+Lkc4vzyzN0hf5nHIXP+v0f9
l62d4uK/WXuj7VvAcco/owheAFbmaO2Tgvd8SkGajeTiW3tfQ3JcORk2kiou2/N5
mJhIY0nXoaVbtdu1tNU0wjM25eaciQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2158332625204232745967441257513023132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bogotá'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universidad Santo Tomás'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.usantotomas.edu.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818734579364611594978423064152686504969100425526670217724648463448939069517513585723588343443335112904069366191633868081055265130973574562646322784664396077941220853487585281823546482843992945908483893036441403213759890030337128103335806172704104639513758483884558959348157268127996276802090714369434530706568072772951928201946028340780722723059891684607462099433215949008359792407720024006849045128372956697033380606895459188766467985449669463135498459145474962473345601124018076862803188250108988160932121349859330204404932474341387910458432533106231106000667129169215523247216712856905256912883148248347171220180943328016775602504173691345120928126900677193738818153246369880433884596306401945490911859021322903189811995512802912244474360589680903702925261137851818746510077974166904957397050999814253685075893047665725673493012639767928420470673617981645064620612531363238095331352501634059441041251433914298360117616998614914170806753549135497727295219589367455022424915351344956879005803897471544037398723223670984009139803208077993370068017632254033137492381978336734826212291325360873688869042870805008016836831081749231720917243247243666842697680404128380086428458606945901175948224649360334017054496326026731148896831326549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2cc27fd957d34d25a6c028bdb9e6efb3605b058
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usantotomas.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usantotomas.edu.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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