kryng.comsuite.bk.mufg.jp

- MUFG Bank, Ltd. -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 09:c2:54:02:86:c5:9d:79:00:60:a7:67:ee:d0:3c:24 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MUFG Bank, Ltd.

Company registration number: 0100-01-008846
Organization: MUFG Bank, Ltd.
Organization unit: Systems Division
State / Province: Tokyo
Locality: Chiyoda-ku
Country: JP

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:c2:54:02:86:c5:9d:79:00:60:a7:67:ee:d0:3c:24
Serial Number (int): 12972061475192924531058836858874117156
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 56:1f:cd:9a:d0:5f:42:92:2c:7f:d3:b6:72:f6:46:17:f5:bb:59:15
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 46:23:e4:81:ea:9c:b5:d2:45:6a:41:ff:ee:d1:33:5f:47:06:96:28
Fingerprint (sha256): 03:67:89:75:fc:0a:7d:6f:55:c8:cd:8e:38:6a:d3:8c:e2:e2:81:3e:65:04:15:69:ec:c3:2e:90:dc:3a:03:d6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl

Check the revocation status for certificate kryng.comsuite.bk.mufg.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kryng.comsuite.bk.mufg.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kryng.comsuite.bk.mufg.jp

Other certificates including the domain name mufg.jp

(limited to 100 certificates)
dente2.bk.mufg.jp
www.br.bk.mufg.jp
san-10-s10.tlsprovisioning.exacttarget.com
gl.ebusiness.bk.mufg.jp
bpf-test.bk.mufg.jp
www2.mx.bk.mufg.jp
e.ebusiness.bk.mufg.jp
mutbreit.tr.mufg.jp
ut0712mproject.sc.mufg.jp
eweb1.cn.bk.mufg.jp
www.keshikomi-w.bk.mufg.jp
eb-mst.bk.mufg.jp
entry31.bk.mufg.jp
www9.cr.mufg.jp
www.mufg.jp
t.au.bk.mufg.jp
remote.ny.tr.mufg.jp
safe.tr.mufg.jp
r.gph.bk.mufg.jp
direct11.bk.mufg.jp
entry11.bk.mufg.jp
k.direct12.bk.mufg.jp
f1biz-stn.bk.mufg.jp
developer.am.mufg.jp
ra.ebusiness.bk.mufg.jp
stg.supportsite.dc.tr.mufg.jp
cms.bizbuddy.mufg.jp
t.direct.s.bk.mufg.jp
webinq.bk.mufg.jp
EXTGWS01.NJMQGWDEVL.us.mufg.jp
online.sc.mufg.jp
TLHVE01.mufgldnvc.uk.mufg.jp
bpf.bk.mufg.jp
direct.s.bk.mufg.jp
gph.bk.mufg.jp
direct.s.bk.mufg.jp
stgauthortemp.corporate.bk.mufg.jp
mxt4.sc.mufg.jp
pension.tr.mufg.jp
www.lifeplan.tr.mufg.jp
appli.bk.mufg.jp
j.bizstn.bk.mufg.jp
mainte.mukam.jp
ut0403pproject.sc.mufg.jp
mobile.sc.mufg.jp
uk2.int.sc.mufg.jp
drcag.hk.sc.mufg.jp
bizstn.bk.mufg.jp
developer.am.mufg.jp
faq10.bk.mufg.jp
rc.e.ebusiness.bk.mufg.jp
web-edi02.muf.bk.mufg.jp
certificate.tr.mufg.jp
*.r2.bk.mufg.jp
fs2.cr.mufg.jp
chohyo-bpo1.bk.mufg.jp
trade-portal.portal.us.bk.mufg.jp
t.tms.bk.mufg.jp
www.uk.am.mufg.jp
mncollecttest.bk.mufg.jp
www.keshikomi-w.bk.mufg.jp
rb.j.ebusiness.bk.mufg.jp
t.entry91.bk.mufg.jp
b.ebusiness.bk.mufg.jp
remote.tu.bk.mufg.jp
smtp2.us.sc.mufg.jp
test.bizbuddy.mufg.jp
s.bk.mufg.jp
direct.s.bk.mufg.jp
j.rmb.bk.mufg.jp
direct11.bk.mufg.jp
htg.btmu-fxportal.bk.mufg.jp
flex-charge.bk.mufg.jp
ebusiness.bk.mufg.jp
san-10-s10.tlsprovisioning.exacttarget.com
debit.cr.mufg.jp
k.entry11.bk.mufg.jp
eweb.bk.mufg.jp
cas.mufg.jp
www.cr.mufg.jp
kryng.comsuite.bk.mufg.jp
cdn-online.sc.mufg.jp
k.direct12.bk.mufg.jp
biz-persons.mufg.jp
kwc.bk.mufg.jp
fx.us.bk.mufg.jp
fx.sg.bk.mufg.jp
btmu-rad.us.mufg.jp
k.entry11.bk.mufg.jp
cms1.br.bk.mufg.jp
EXTGWP01.njmqgwprod.us.mufg.jp
k.entry12.bk.mufg.jp
www.tr.mufg.jp
dokodemo-shounin.bk.mufg.jp
www2.keshikomi-w.bk.mufg.jp
www11.direct.tr.mufg.jp
developer.api.bk.mufg.jp
j.g.bizst.bk.mufg.jp
www.int.tr.mufg.jp
t.webinq.bk.mufg.jp

Certificate

The complete raw certificate details for kryng.comsuite.bk.mufg.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zA2IB9IPTQY5z0kRtgJ
ITk20ovsp0hjregHbza9wzDCAeX2X1RdCXYpjZe+VQgU6EJTGDv95RMEk9/rF13k
0rRv6DTgyitpjoBdMOMf8jZJz5z92jkU256+f48iTMsUB5cp4lJ89/tqf+C+BzKt
u4ru/DQGzt0vj93ZDt/V7DP7X+1Ammb2cghpnxfRpj2j6u7M1ewOa3rJqmgOr0nO
9UEdzWdYdhw/UNHZE+c8pJW1Q2iJ6M69Xug17B2wRE1hG6D1kETrZBQURpiA5fxG
Y99SVlbBcb2pYZvvWhjd4yK6rEAOhJf6JzeZm3yNdeAGEoUI0OVB38z7JpGX0ZI+
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12972061475192924531058836858874117156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0100-01-008846'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chiyoda-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MUFG Bank, Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Systems Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kryng.comsuite.bk.mufg.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26660056288877436756013683960844441545498641426075214731123771677546159839159271491419150973997815615487842282370558895417422290432676466149835074120448954001590296489615122079616252765420690169453737365045130079001596968836791559243047211989126242466816585155112824096642629312032606729808682633880315270156515318186801130399699936469276591478135649849342873895790680582081535977037665360155473801529439849715787482961249112353722618988397208435583552936587658691697352727059029834690907650735919020361253931018318176282471528298782990453127640063312750929594838372927835009256159424621251782182409852112228341399201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							561fcd9ad05f42922c7fd3b672f64617f5bb5915
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kryng.comsuite.bk.mufg.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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