PER1069RVB002.ent.bhpbilliton.net

- BHP Billiton Innovation Pty Ltd -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 04:ea:99:3a:d4:0e:24:ac:d6:f3:39:62:c9:97:61:c9 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BHP Billiton Innovation Pty Ltd

Organization: BHP Billiton Innovation Pty Ltd
Organization unit: GBIS
State / Province: Victoria
Locality: Melbourne
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ea:99:3a:d4:0e:24:ac:d6:f3:39:62:c9:97:61:c9
Serial Number (int): 6535017317567517926719718740433789385
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 50:23:52:6c:b8:1b:e0:c3:e1:85:62:b8:5c:4b:36:2e:ce:cf:37:35
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 06:87:19:70:70:0c:63:92:4d:e8:24:5e:72:97:a4:8c:e5:a0:d1:ce
Fingerprint (sha256): 03:70:dc:9c:81:ab:f3:5c:d6:d3:da:df:66:67:d3:64:8d:89:8d:f3:ba:73:8f:28:e4:87:68:54:93:99:4a:a0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate PER1069RVB002.ent.bhpbilliton.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for PER1069RVB002.ent.bhpbilliton.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

PER1069RVB002.bhp.com
PER1069RVB002.ent.bhpbilliton.net

Other certificates including the domain name bhpbilliton.net

(limited to 100 certificates)
BMAPDC-VAM50V.apac.ent.bhpbilliton.net
petebs-zebs2.americas.ent.bhpbilliton.net
inside.bhpbilliton.net
incitrix.apac.ent.bhpbilliton.net
PER1069RVB002.ent.bhpbilliton.net
PDCRDGWAP01VEI.americas.ent.bhpbilliton.net
PER1073RVB001.ent.bhpbilliton.net
USDC2POCDM01.ENT.BHPBILLITON.NET
dspyxe-a-ise-01.americas.ent.bhpbilliton.net
incitrix.apac.ent.bhpbilliton.net
OD-TMS.apac.ent.bhpbilliton.net
bionmnyces01.bhpbilliton.net
petapm.bhpbilliton.net
phoupecmapl01.americas.ent.bhpbilliton.net
potashlearning.bhpbilliton.com
potash-mii.americas.ent.bhpbilliton.net
wdu1pweb01.bhpbilliton.net
biomulyces12.bhpbilliton.net
eroomtest.bhpbilliton.net
OD-TMS.bhp.com
dccsbx.bhpbilliton.com
PER1069RVB001.ent.bhpbilliton.net
phoupoamapl02.americas.ent.bhpbilliton.net
URAOLY-RHH01.APAC.ENT.BHPBILLITON.NET
tent.bhpbilliton.net
dcc.bhpbilliton.com
solmanjava.bhpbilliton.net
simcity.bhpbilliton.net
incvmcitrix.apac.ent.bhpbilliton.net
PET5083RVB001.ent.bhpbilliton.net
KUL2010RVB001.ent.bhpbilliton.net
phouaecoapw01.americas.ent.bhpbilliton.net
pdcrdgwap01vei.americas.ent.bhpbilliton.net
ecc-mdev.bhpbilliton.com
pet1gismobilesvc.bhpbilliton.com
phoudoamapl02.americas.ent.bhpbilliton.net
biopacyces01.bhpbilliton.net
PER1022RVB001.ent.bhpbilliton.net
pet5028rvb001.ent.bhpbilliton.net
inside.bhpbilliton.net
BMAPDC-KM03V.apac.ent.bhpbilliton.net
petoasis-test.bhpbilliton.net
phv1pweb01.bhpbilliton.net
petoasis-dev.bhpbilliton.net
pt5-portal.bhpbilliton.net
tfs.bhpbilliton.net
USDC1RCMPS01.tent.bhpbilliton.net
bmacitrix.apac.ent.bhpbilliton.net
pet5073rvb001.ent.bhpbilliton.net
pet5107rvb001.ent.bhpbilliton.net
pdc-medwb01vu.americas.ent.bhpbilliton.net
aris.bhpbilliton.net
JansenReports.bhp.com
colpdc-gis51v.apac.ent.bhpbilliton.net
simcity.bhpbilliton.net
p2broker.bhpbilliton.net
OLP0TCIT02.apac.ent.bhpbilliton.net
pam-production.bhp.com
accsbx.bhpbilliton.com
USDC1POCWA02.ENT.BHPBILLITON.NET
Phpoupmdmapw01.americas.ent.bhpbilliton.net
aris.bhpbilliton.net
bmapdc-km50v.apac.ent.bhpbilliton.net
red1pweb01.bhpbilliton.net
LER1024RVB001.ent.bhpbilliton.net
PET5079RVB001.ent.bhpbilliton.net
phoupgisapw26.americas.ent.bhpbilliton.net
shutdown.bhp.com
CHI5035RVB002.ent.bhpbilliton.net
yan4pweb01.bhpbilliton.net
phoudoamapl03.americas.ent.bhpbilliton.net
OD-TMS.apac.ent.bhpbilliton.net
PET5074RVB001.ent.bhpbilliton.net
petroleumtalentandlearning.bhpbilliton.net
dspyxe-a-ise-01.americas.ent.bhpbilliton.net
yan4pweb01.bhpbilliton.net
accsbx.bhpbilliton.com
bmapdc-inx01v.apac.ent.bhpbilliton.net
SUPPLIERSRM.BHPBILLITON.COM
ADL1036RVB002.ent.bhpbilliton.net
eroomdev.bhpbilliton.net
Inbrmcitrix.apac.ent.bhpbilliton.net
PDCVERSAwb01v.americas.ent.bhpbilliton.net
DAL5001PUI001.ent.bhpbilliton.net
JansenReports.bhp.com
smartplantapi-waio-qa.bhp.com
petoasis-uat.bhpbilliton.net
phoupoemapl01.americas.ent.bhpbilliton.net
colpdc-gis52v.apac.ent.bhpbilliton.net
saspdcarkwb04v.americas.ent.bhpbilliton.net
colpdc-gis50v.apac.ent.bhpbilliton.net
IAD5037RVB001.ent.bhpbilliton.net
pcnpdc.apac.ent.bhpbilliton.net
ADL1058RVB001.ent.bhpbilliton.net
eroom1.bhpbilliton.net
phoudoamapl04.americas.ent.bhpbilliton.net
bioyanyces01.bhpbilliton.net
OD-TMS.apac.ent.bhpbilliton.net
wdu1pweb01.bhpbilliton.net
iseportal.bhpbilliton.com

Certificate

The complete raw certificate details for PER1069RVB002.ent.bhpbilliton.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIQBOqZOtQOJKzW8zliyZdhyTANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE
aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTgwNTE5MDAwMDAwWhcNMTkwNTIwMTIw
MDAwWjCBmTELMAkGA1UEBhMCQVUxETAPBgNVBAgTCFZpY3RvcmlhMRIwEAYDVQQH
EwlNZWxib3VybmUxKDAmBgNVBAoTH0JIUCBCaWxsaXRvbiBJbm5vdmF0aW9uIFB0
eSBMdGQxDTALBgNVBAsTBEdCSVMxKjAoBgNVBAMTIVBFUjEwNjlSVkIwMDIuZW50
LmJocGJpbGxpdG9uLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
APLKrM/u7AbaAFwL5yA9/hxbu0EbA+R+495f/vcXjaD8IhP9NOSPvMq8ka+Ii+h9
m6xA3bgY7cASUXzxDA5bbgdS1zOGW5xLFwlSPKGg2/RqX14vZSRbo4Sgfo2iH3l/
VopB8ppxnLY2s288a0cNhbFwSVdMsxyO5Y4zGrmwx99cRyTMA+2MWkm68dhpMwj2
RbzEVprDrGv3rlqILxSu+md50gk0u3Fezj952AO+2wugU0UPfTyFc5tTL1UDmvID
+5EoJm9i8kjhJr0TEqLDsjomYGvzcVh2JW4/fa025JtSoPG5qZFnZSYh1b3U1bSM
tzWCDfgINt67vpbtyoOo298CAwEAAaOCAhUwggIRMB8GA1UdIwQYMBaAFCRuKy3Q
apJRUSVpAaqaR6aJ50AgMB0GA1UdDgQWBBRQI1JsuBvgw+GFYrhcSzYuzs83NTBD
BgNVHREEPDA6ghVQRVIxMDY5UlZCMDAyLmJocC5jb22CIVBFUjEwNjlSVkIwMDIu
ZW50LmJocGJpbGxpdG9uLm5ldDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMHcGA1UdHwRwMG4wNaAzoDGGL2h0dHA6Ly9jcmwz
LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbENBRzIuY3JsMDWgM6Axhi9odHRw
Oi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxDQUcyLmNybDBMBgNV
HSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k
aWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB0BggrBgEFBQcBAQRoMGYwJAYIKwYB
BQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA+BggrBgEFBQcwAoYyaHR0
cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsQ0FHMi5jcnQw
CQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnJr/lsPXqoA3We/3D3phwBFSjrytJtN0xhdJrxt/Y1R6yKBzsYNb4E94y38F
PMP/jMITh7eL9yl+3TUamk7HJD/snYnYkOSgVYxmBGOcr1pqG+h+6sMII1rY3Q3y
sIVH14jap08Qg5cJVtcBobbzZichef5NAxs8auHD9RCTlkX3qXlIHsumVxzrhGUs
0G1Xg5BoJkCTW0Fljq4QUnbZnlBGK5N06qqCCK3XSZvGXLrqS3KB6ebnRdtcDPTg
09AQ60gUSr2inI8HaOsdIWEzKcaKjUByrXldU+2HEQW6agUfD0PnWStl06iGJH9x
2FrAGFce4a5cd08b0OiiE5YWPw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sqsz+7sBtoAXAvnID3+
HFu7QRsD5H7j3l/+9xeNoPwiE/005I+8yryRr4iL6H2brEDduBjtwBJRfPEMDltu
B1LXM4ZbnEsXCVI8oaDb9GpfXi9lJFujhKB+jaIfeX9WikHymnGctjazbzxrRw2F
sXBJV0yzHI7ljjMaubDH31xHJMwD7YxaSbrx2GkzCPZFvMRWmsOsa/euWogvFK76
Z3nSCTS7cV7OP3nYA77bC6BTRQ99PIVzm1MvVQOa8gP7kSgmb2LySOEmvRMSosOy
OiZga/NxWHYlbj99rTbkm1Kg8bmpkWdlJiHVvdTVtIy3NYIN+Ag23ru+lu3Kg6jb
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6535017317567517926719718740433789385
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BHP Billiton Innovation Pty Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GBIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PER1069RVB002.ent.bhpbilliton.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30649612592780225616907480424237309363430393008363164497472241195039707343649306662890083525620469320237343158377563451669768674203225756894531420168806535575242812395463855376714734984802455654857169588244474762169243254180635884367333228775494522529117895857705237930709715860641261901383713904019388184390402597816960437092861037105570259931753724117132296090607980928255779937027799783327558722035851779417567482612091123860734547644128780236184430097414679436480034961222171282931971623474549897072396211957562364091861335268380214153562125976647540856933769437195299886505725482220826009153363033240400671857631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5023526cb81be0c3e18562b85c4b362ececf3735
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PER1069RVB002.bhp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PER1069RVB002.ent.bhpbilliton.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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