wildcardsan.askmediagroup.com

- IAC Publishing, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:ca:f8:e5:72:90:f8:cf:e6:40:43:b1:d0:c3:ed:64 was issued on by DigiCert Inc.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IAC Publishing, LLC

Organization: IAC Publishing, LLC
State / Province: California
Locality: Oakland
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ca:f8:e5:72:90:f8:cf:e6:40:43:b1:d0:c3:ed:64
Serial Number (int): 2383120177496423854278369982562954596
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: db:b2:41:a3:08:26:07:62:47:cd:7e:02:8d:a1:10:d1:90:6f:af:d2
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 97:cb:da:10:8e:22:37:58:65:1e:09:ad:57:dd:e3:a6:c2:79:b2:a6
Fingerprint (sha256): 03:90:ec:19:f3:ef:32:64:41:08:9b:d1:1d:4d:3a:5b:dd:24:55:8c:bf:d5:ca:bf:7e:b4:ff:b4:6a:15:df:54

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate wildcardsan.askmediagroup.com

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wildcardsan.askmediagroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wildcardsan.askmediagroup.com
*.simpli.com
*.index.about.com
*.candofinance.com
renewme.com
*.pronto.com
index.investopedia.com
*.finecomb.com
www.shop411.com
index.about.com
*.informationvine.com
*.iacpublish.com
*.choosykitchen.com
www.symptomfind.com
*.ask.jp
*.consumersearch.com
informationvine.com
*.reference.com
*.idealhomegarden.com
www.shopping.net
*.ask.com
*.iacpublishinglabs.com
*.allresultsweb.com
www.reference.com
www.candofinance.com
*.homeandgardenideas.com
*.govtsearches.com
*.smarter.com
*.renewme.com

Other certificates including the domain name askmediagroup.com

(limited to 100 certificates)
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
wildcardsan.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
origin-wildsancert.askmediagroup.com
origin-wildsancert.askmediagroup.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
wildcardsan.askmediagroup.com
wildcardsan.askmediagroup.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
wildcardsan.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
help.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
help.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
help.askmediagroup.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.ask.com
*.about.ask.com
help.askmediagroup.com
cdncert.askmediagroup.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
askmediagroup.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
www.ask.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
index.investopedia.com
cdncert.askmediagroup.com
origin-wildsancert.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
askmediagroup.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
wildcardsan.askmediagroup.com
origin-wildsancert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
help.askmediagroup.com
wildcardsan.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
origin-wildsancert.askmediagroup.com
www.ask.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
help.askmediagroup.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
help.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
help.askmediagroup.com
cdncert.askmediagroup.com
www.ask.com
help.askmediagroup.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
askmediagroup.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
help.askmediagroup.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
askmediagroup.com
cdncert.askmediagroup.com

Certificate

The complete raw certificate details for wildcardsan.askmediagroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthonczohwOHGy/zJzDEQ
QdSYCYszCd2/xxMBkchOT/xQ+jQ/yOEHMDSKCxs4JFdl200GpOCDP2H8fGc25phA
2r8w4hsyHOVWdNI4DCXKGXnRHirsb/7ri2tDrW7/DVjxJxmzTLND6EvMUTynQC5a
6mzWxIfplhnN5gLhX7FGh/UEfasfTDKpVK0WMv0vBOSj6tC70X5sS5wZZtcUAFix
1m25JJolPPo8d8PB5M5WlVqE9uIeKxdJDrXOQbzrgK3SQgbZQa3KyIK6S0bcRPN0
Qxf4u39DmJiGBWijB1kabqvYEiBleGqHvBM6V+T1cPzVm59tjhj18LrbLtRUIJPQ
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2383120177496423854278369982562954596
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oakland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IAC Publishing, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wildcardsan.askmediagroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22988268572187192998586309996815882959254307894465287505647659409528476066470449549008710683817843952059294248361706023834686010298647018685794779551520371225688504602304214991258448116750027761409944020485488236923747149486715350010378796937962825626769508714621453868786462754091247450233163269687487914672304355934321064906187388631924715487448054728445277732534283776760930000593927006767477433766772325511643840986488168767294407745902057144703243431792668194103007118900456191998884876839077612389208398569752680582497731202486078372271607256575546201625926711414327328684122613280463146736959034164019308253301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dbb241a30826076247cd7e028da110d1906fafd2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (557 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildcardsan.askmediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simpli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.index.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.candofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'index.investopedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finecomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop411.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'index.about.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.informationvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iacpublish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.choosykitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.symptomfind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ask.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consumersearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informationvine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idealhomegarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopping.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iacpublishinglabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allresultsweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.candofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeandgardenideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.govtsearches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renewme.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000160579888680000040300483046022100b14fc67a79d7112b4125bbb2c74ad20ca3ccb0912276a93eb39beda55da62cbd022100f9dee6d9dde0378f66c0318010569261704dff25ec9ef85769810e9d006afd740076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000160579889ba0000040300473045022049f90612d1649fb0941ca776fbc0cd798200360d08b5d08b652da58b4f11e73f022100f930eea6a35486435701b03cc562acb1df55688762762b3c69ae79e1fd519323
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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