downstream-dev.applicationmigration.us-ashburn-1.oci.oc-test.com

- Oracle Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:39:77:23:0a:98:f3:7e:b3:55:65:89:36:bc:79:a6 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oracle Corporation

Organization: Oracle Corporation
Organization unit: Oracle OCI-DEV ASHBURN
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:39:77:23:0a:98:f3:7e:b3:55:65:89:36:bc:79:a6
Serial Number (int): 13590657261793923146958885669316622758
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: be:d7:9f:c0:73:34:1c:dd:6a:31:55:99:2b:5a:8a:a6:67:da:cb:f8
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 8c:c4:9e:f6:a1:32:24:a1:eb:df:83:8c:0b:26:be:fc:70:3b:da:32
Fingerprint (sha256): 03:c6:97:d6:63:51:3a:0b:f2:07:1c:55:b1:ea:3b:63:c5:8d:c9:64:d9:a2:d7:67:e0:b0:94:ac:52:d0:2e:d2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate downstream-dev.applicationmigration.us-ashburn-1.oci.oc-test.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for downstream-dev.applicationmigration.us-ashburn-1.oci.oc-test.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

downstream-dev.applicationmigration.us-ashburn-1.oci.oc-test.com

Other certificates including the domain name oc-test.com

(limited to 100 certificates)
*.poc.scs.ocs.oc-test.com
*.luna.bt.demo.us-ashburn-1.oci.oc-test.com
*.epm.us-ashburn-1.ocs.oc-test.com
*.dev.cxaudience.ocs.oc-test.com
ocdn-billing-test-5.canaries.cdn.us-ashburn-1.oci.oc-test.com
vellum.test.content.oci.oc-test.com
downstream-dev.applicationmigration.us-ashburn-1.oci.oc-test.com
*.fa.ocs.oc-test.com
gamma.ocir.io
*.imcmcs.ocs.oc-test.com
sni115375.cloudflaressl.com
*.jcs.ocp.oc-test.com
downstream.integ.apigateway.us-ashburn-1.oci.oc-test.com
test.stream-processing.us-ashburn-1.oci.oc-test.com
downstream.cloudshell.us-ashburn-1.oci.oc-test.com
*.stg.scs.ocs.oc-test.com
*.search.test.ocp.oc-test.com
*.preprod.responsys.ocs.oc-test.com
*.hap.test.demo.us-ashburn-1.oci.oc-test.com
*.hap.dev.demo.us-phoenix-1.oci.oc-test.com
*.dev.ocp.oc-test.com
*.dev.cxaudience.ocs.oc-test.com
tims.dev.demo.us-ashburn-1.oci.oc-test.com
*.uk-london-1.oc-test.com
dev.stream-processing.us-phoenix-1.oci.oc-test.com
rbc.di.loganalytics.eu-frankfurt-1.oci.rbrealm.oc-test.com
*.mobile.test.ocp.oc-test.com
*.stage.apigateway.us-ashburn-1.oci.oc-test.com
*.mobile.dev.ocp.oc-test.com
*.hospitality-api.us-ashburn-1.ocs.oc-test.com
rbc.di.loganalytics.eu-frankfurt-1.oci.rbrealm.oc-test.com
*.occa.us-ashburn-1.ocs.oc-test.com
*.cloudguard.ocp.oc-test.com
*.ocp.oc-test.com
*.occa.uk-london-1.ocs.oc-test.com
*.channels.ocs.oc-test.com
*.c9qa.ocp.oc-test.com
*.occa.ocs.oc-test.com
*.analytics.dev.ocp.oc-test.com
*.integration.ocp.oc-test.com
*.hap.uat.demo.us-phoenix-1.oci.oc-test.com
*.botmxp.ocp.oc-test.com
*.qa.responsys.ocs.oc-test.com
*.fa.test.ocs.oc-test.com
*.cec.test.ocp.oc-test.com
rbc.st.loganalytics.eu-frankfurt-1.oci.rbrealm.oc-test.com
*.blockchain.dev.ocp.oc-test.com
interact.rsysdev2.origin.dev.responsys.ocs.oc-test.com
jiratest.gc3.ocs.oc-test.com
mq.test-env2.omccc.ocs.oc-test.com
cxa1-phx-1.origin.preprod.cxaudience.ocs.oc-test.com
interact.aftm2.origin.qa.responsys.ocs.oc-test.com
*.dev.cxaudience.ocs.oc-test.com
ocean.ocs.oc-test.com
*.aiapps.ap-sydney-1.ocs.oc-test.com
*.searchcloudapp.ocp.oc-test.com
*.occa.ocs.oc-test.com
downstream.datascience-dev.us-ashburn-1.oci.oc-test.com
downstream.datascience-int.us-ashburn-1.oci.oc-test.com
git.omccc.ocs.oc-test.com
apicsautodpodmqs.ocp.oc-test.com
integration.eu-frankfurt-1.ocp.oc-test.com
*.botmxp.dev.ocp.oc-test.com
rbc.sq.loganalytics.eu-frankfurt-1.oci.rbrealm.oc-test.com
containerengine.us-ashburn-1.oci.oc-test.com
*.cna.test.demo.us-ashburn-1.oci.oc-test.com
vault.omccc.ocs.oc-test.com
*.ap-mumbai-1.falcm.ocs.oc-test.com
git.omccc.ocs.oc-test.com
*.cna.dev.demo.us-ashburn-1.oci.oc-test.com
sfp.ocs.oc-test.com
*.intapp.poc.scs.ocs.oc-test.com
cxa1-phx-1.origin.qa.cxaudience.ocs.oc-test.com
*.dataplane.dbanalytics.us-phoenix-1.oci.oc-test.com
downstream-tst.applicationmigration.us-phoenix-1.oci.oc-test.com
interact.jarvisdev2.origin.dev.responsys.ocs.oc-test.com
delete-test-v6.cdn.us-ashburn-1.oci.oc-test.com
*.apiplatform.ocp.oc-test.com
*.us-phoenix-1.oc-test.com
*.apiplatform.test.ocp.oc-test.com
test.mysql.us-ashburn-1.ocp.oc-test.com
*.eu-frankfurt-1.oc-test.com
spin-gate-tls.ofscdev.oci.oc-test.com
rbc.en.loganalytics.eu-frankfurt-1.oci.rbrealm.oc-test.com
downstream-dev.applicationmigration.us-phoenix-1.oci.oc-test.com
cx-hack-sono-integ.channels.ocs.oc-test.com
hello1.rsysauto1.origin.dev.responsys.ocs.oc-test.com
*.blockchain.ocp.oc-test.com
*.developer.ocp.oc-test.com
*.searchcloudapp.dev.ocp.oc-test.com
*.blockchain.test.ocp.oc-test.com
*.cna.bt.demo.us-phoenix-1.oci.oc-test.com
rbc.up.loganalytics.eu-frankfurt-1.oci.rbrealm.oc-test.com
preview.stream-processing.us-ashburn-1.oci.oc-test.com
*.apigateway.us-ashburn-1.oci.oc-test.com
*.casb.ocp.oc-test.com
cp.daas.us-phoenix-1.ocs.oc-test.com
sgd.dev.demoservices002.demo.us-ashburn-1.oci.oc-test.com
sfp.ocs.oc-test.com
*.aiapps.eu-frankfurt-1.ocs.oc-test.com

Certificate

The complete raw certificate details for downstream-dev.applicationmigration.us-ashburn-1.oci.oc-test.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvuDsw9dInmKbaO9kdPA
kIQQ9/mwse1K+QzsBwq7rFrEw4MbnS5MguZEo9MzvhbwVHNrX7Qcho68eybzpfnU
2PbQpxeoM6IFWcdKIojICeRcfV2wqhh6SvlZCNglx76TuF3mMj26CwDKBO0Uvg0A
LvK1denBDPHaj0bBhPXXPhveG3Ugntuz11Lk5jFvI9eWYOS3c7kNQgFuHTvy50oU
YVBwiz+89j6IUvn8FPponZDn17vVKI0dKa0A+Gb3pMJhitrmLmMubAqC3vehpscc
GdxIQbyxzXCmleo5ZEIjy6aGUMBzPYeGwTuWscy7W5lNGJFlTa77Vb1nkg8FpAT8
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13590657261793923146958885669316622758
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle OCI-DEV ASHBURN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'downstream-dev.applicationmigration.us-ashburn-1.oci.oc-test.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24614257561725215455350909595971643637567588801101780206230955307324596146975867750987680184075519250418547234273901923300170118545240718742388719157007653835023866297396394148276464293619455662713757598926060040684982244350964902756676091034961924579986435054868814571212114480217685587284898446035202071345893900763454263447235148952509440276368569622032845255113878380278579852185403707882299507633074229068097956649876890680854236626907011029651724237030695200775300030566356929510179713003803385986428899155256230640027372187294017569622401968970331720288003109955369140535382834644036151388697217245930750016531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bed79fc073341cdd6a3155992b5a8aa667dacbf8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downstream-dev.applicationmigration.us-ashburn-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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