www.va.gov

- Department of Veterans Affairs -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 01:e2:4d:22:8b:59:49:8b:1e:2e:9d:55:59:c0:aa:24 was issued on by DigiCert Inc.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Department of Veterans Affairs

Organization: Department of Veterans Affairs
Organization unit: Enterprise Web Infrastructure Support (EWIS) II
State / Province: Pennsylvania
Locality: Philadelphia
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:e2:4d:22:8b:59:49:8b:1e:2e:9d:55:59:c0:aa:24
Serial Number (int): 2504251568237151642700012288519219748
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 5d:cd:de:b6:cd:be:8d:97:c2:17:cf:d1:cd:c9:ea:b2:bb:51:72:3f
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 54:68:e3:23:fd:e0:7f:23:18:8a:ac:20:02:8c:10:0a:fe:a5:19:c0
Fingerprint (sha256): 04:13:6c:e9:79:dd:3a:c7:59:60:05:73:41:bc:6d:fe:b8:1c:ff:ad:80:38:73:0c:55:ba:27:8d:56:02:8f:b5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate www.va.gov

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.va.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lexington.va.gov
www.lexington.med.va.gov
www.heartoftexas.va.gov
www.hepatitis.va.gov
www.herc.research.va.gov
www.hines.va.gov
www.hiv.va.gov
www.hospitalcompare.va.gov
www.houston.hsrd.research.va.gov
www.houston.va.gov
www.hsrd.minneapolis.med.va.gov
www.hsrd.research.va.gov
www.hudsonvalley.va.gov
www.huntington.va.gov
www.indianapolis.va.gov
www.innovation.va.gov
www.iowacity.va.gov
www.ironmountain.va.gov
www.jackson.va.gov
www.kansascity.va.gov
www.lasvegas.va.gov
www.leavenworth.va.gov
www.lebanon.va.gov
www.littlerock.va.gov
www.lomalinda.va.gov
www.longbeach.va.gov
www.losangeles.va.gov
www.louisville.va.gov
www.lovell.fhcc.va.gov
www.madison.va.gov
www.maine.va.gov
www.manchester.va.gov
www.marion.va.gov
www.martinsburg.va.gov
www.maryland.va.gov
www.medicalinspector.va.gov
www.memphis.va.gov
www.mentalhealth.va.gov
www.merce.research.va.gov
www.miami.va.gov
www.milwaukee.va.gov
www.minneapolis.va.gov
www.mirecc.va.gov
www.montana.va.gov
www.mountainhome.va.gov
www.muskogee.va.gov
www.ncrar.research.va.gov
www.nebraska.va.gov
www.newengland.va.gov
www.newjersey.va.gov
www.neworleans.va.gov
www.northerncalifornia.va.gov
www.northernindiana.va.gov
www.northflorida.va.gov
www.northport.va.gov
www.northtexas.va.gov
www.nutrition.va.gov
www.nyharbor.va.gov
www.nynj.va.gov
www.oedca.va.gov
www.oefoif.va.gov
www.ois.oit.va.gov
www.oit.va.gov
www.oklahoma.va.gov
www.oprm.va.gov
www.orlando.va.gov
www.osp.va.gov
www.paloalto.va.gov
www.parkinsons.va.gov
www.patientcare.va.gov
www.patientsafety.va.gov
www.pbm.va.gov
www.peprec.research.va.gov
www.philadelphia.va.gov
www.phoenix.va.gov
www.pittsburgh.va.gov
www.polytrauma.va.gov
www.poplarbluff.va.gov
www.portland.va.gov
www.portlandcoin.research.va.gov
www.prescott.va.gov
www.prevention.va.gov
www.prosthetics.va.gov
www.providence.va.gov
www.psychologytraining.va.gov
www.ptsd.va.gov
www.publichealth.va.gov
www.pugetsound.va.gov
www.qualityandsafety.va.gov
www.queri.research.va.gov
www.rcv.va.gov
www.reno.va.gov
www.research.iowa-city.med.va.gov
www.research.va.gov
www.richmond.va.gov
www.rorc.research.va.gov
www.roseburg.va.gov
www.va.gov

Other certificates including the domain name va.gov

(limited to 100 certificates)
www.tee.va.gov
www.explore.va.gov
gfe.vpn.va.gov
www.cc.1vision.va.gov
m.pint.ebenefits.va.gov
www.visn2.va.gov
SERVICES.TEST.MDM.VA.GOV
vaww.media.eo.va.gov
*.shopvcs.va.gov
care.va.gov
prod.saas.box.va.gov
pint.vdc.va.gov
ccracommunity.va.gov
www.va.gov
www.cep.fsc.va.gov
www.patientadvocate.va.gov
rqm01.aide.oit.va.gov
nonprod.paas.mulesoft.va.gov
gibill.va.gov
m.va.gov
portal.nprod.vetbiz.va.gov
register.eauth.va.gov
www.ideas.research.va.gov
VABENEFITS.VBA.VA.GOV
ra.vpn.va.gov
yourit.va.gov
homeloans.va.gov
hybrid.va.gov
adfs.edeazclabs.va.gov
pint.sep.va.gov
HRIS.VA.GOV
www.vis.fsc.va.gov
preprod.fed.eauth.va.gov
rrc01.test.aide.oit.va.gov
*.vetride.va.gov
www.netresponse.medtronic.va.gov
m.va.gov
yourit-dev.va.gov
das.va.gov
mass.columbus.va.gov
www.energy.va.gov
www.itwd.oit.va.gov
prod.dip.va.gov
www.index.va.gov
www.pre.csp.va.gov
care.va.gov
vacagtest.vpn.va.gov
vagfe.vpn.va.gov
vdc.va.gov
www.listserv.va.gov
www.communityviewer.va.gov
care.va.gov
vaww.media.eo.va.gov
vaishwcs008.mdm.va.gov
tools.health.dev-developer.va.gov
casemgmt.int2.mbms.va.gov
www.rehab.research.va.gov
citrixaccesstest.va.gov
WWW.VOA.VA.GOV
www.va.gov
www.ihscepp.fsc.va.gov
staff.eva.va.gov
dev-developer.va.gov
www.escm-hcdev.va.gov
www.hcawsdev.va.gov
veteran.mobilehealth.va.gov
prod.saas.qualtrics.va.gov
citrixaccesseast.va.gov
adfs.edeazclabs.va.gov
www.netresponse.airwatch.medtronic.va.gov
casemgmt.perf.mbms.va.gov
mgmt.dev.care2.va.gov
filenet.pdt.vbms.aide.oit.va.gov
jira.devops.va.gov
benefits.vba.va.gov
www.ebenefits.va.gov
www.healthshareprod8.va.gov
RAPORTAL.VPN.VA.GOV
vip.vba.va.gov
cdceportal.va.gov
mrtfwfl01.vas.med.va.gov
www.valu.va.gov
prisma.vpn.va.gov
care.va.gov
care.va.gov
portal.lom.med.va.gov
www.mdssvh.aac.va.gov
services.test.mdm.va.gov
VP.evn.va.gov
www.tms.va.gov
veteranshealthlibrary.va.gov
idm.edeazclabs.va.gov
www.vendorportal.ecms.va.gov
www.vip-preprod.vetbiz.va.gov
services.eauth.va.gov
filenet.uat.vbms.aide.oit.va.gov
dev-api2.va.gov
vhacrrappdevhs5.vaco.va.gov
dev-api.va.gov
vetbiz.va.gov

Certificate

The complete raw certificate details for www.va.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPDDCCDfSgAwIBAgIQAeJNIotZSYseLp1VWcCqJDANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE
aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTkwMTEwMDAwMDAwWhcNMjAwMTExMTIw
MDAwWjCBszELMAkGA1UEBhMCVVMxFTATBgNVBAgTDFBlbm5zeWx2YW5pYTEVMBMG
A1UEBxMMUGhpbGFkZWxwaGlhMScwJQYDVQQKEx5EZXBhcnRtZW50IG9mIFZldGVy
YW5zIEFmZmFpcnMxODA2BgNVBAsTL0VudGVycHJpc2UgV2ViIEluZnJhc3RydWN0
dXJlIFN1cHBvcnQgKEVXSVMpIElJMRMwEQYDVQQDEwp3d3cudmEuZ292MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhenSy0IKVbKOSEPbHwt0+knlRoi
Vfkt9Os2Wor1vW7EnR0Xgc/MhR6xuOpJX9y/DTIKKl6OuY71v5h/PEafqg6lawkZ
qeSNbSBqSbpfo6tVWnnNynoOxX9n6b9AGT6ULTZh5Gp/c9HktqLOoFsHYB8taMWN
1NzmfFP802YvNp29qXAwGgQQwzh/ct7DQRckybsGNZaVR+97+c8GqxUCIzXPzoaK
88P1jHq7v/7KYTFYxHhvJcFGcOimZnMMhsQlIJMuqjH4RCPhVy8hoe99v2zbHMgU
fK4/0EAcMQmI9IpGRRFgNRLreXiQ9AhOobxBdM8FiZo6l8ggs5iBO38uVwIDAQAB
o4ILiDCCC4QwHwYDVR0jBBgwFoAUJG4rLdBqklFRJWkBqppHponnQCAwHQYDVR0O
BBYEFF3N3rbNvo2XwhfP0c3J6rK7UXI/MIIIwwYDVR0RBIIIujCCCLaCFHd3dy5s
ZXhpbmd0b24udmEuZ292ghh3d3cubGV4aW5ndG9uLm1lZC52YS5nb3aCF3d3dy5o
ZWFydG9mdGV4YXMudmEuZ292ghR3d3cuaGVwYXRpdGlzLnZhLmdvdoIYd3d3Lmhl
cmMucmVzZWFyY2gudmEuZ292ghB3d3cuaGluZXMudmEuZ292gg53d3cuaGl2LnZh
LmdvdoIad3d3Lmhvc3BpdGFsY29tcGFyZS52YS5nb3aCIHd3dy5ob3VzdG9uLmhz
cmQucmVzZWFyY2gudmEuZ292ghJ3d3cuaG91c3Rvbi52YS5nb3aCH3d3dy5oc3Jk
Lm1pbm5lYXBvbGlzLm1lZC52YS5nb3aCGHd3dy5oc3JkLnJlc2VhcmNoLnZhLmdv
doIXd3d3Lmh1ZHNvbnZhbGxleS52YS5nb3aCFXd3dy5odW50aW5ndG9uLnZhLmdv
doIXd3d3LmluZGlhbmFwb2xpcy52YS5nb3aCFXd3dy5pbm5vdmF0aW9uLnZhLmdv
doITd3d3Lmlvd2FjaXR5LnZhLmdvdoIXd3d3Lmlyb25tb3VudGFpbi52YS5nb3aC
End3dy5qYWNrc29uLnZhLmdvdoIVd3d3LmthbnNhc2NpdHkudmEuZ292ghN3d3cu
bGFzdmVnYXMudmEuZ292ghZ3d3cubGVhdmVud29ydGgudmEuZ292ghJ3d3cubGVi
YW5vbi52YS5nb3aCFXd3dy5saXR0bGVyb2NrLnZhLmdvdoIUd3d3LmxvbWFsaW5k
YS52YS5nb3aCFHd3dy5sb25nYmVhY2gudmEuZ292ghV3d3cubG9zYW5nZWxlcy52
YS5nb3aCFXd3dy5sb3Vpc3ZpbGxlLnZhLmdvdoIWd3d3LmxvdmVsbC5maGNjLnZh
LmdvdoISd3d3Lm1hZGlzb24udmEuZ292ghB3d3cubWFpbmUudmEuZ292ghV3d3cu
bWFuY2hlc3Rlci52YS5nb3aCEXd3dy5tYXJpb24udmEuZ292ghZ3d3cubWFydGlu
c2J1cmcudmEuZ292ghN3d3cubWFyeWxhbmQudmEuZ292ght3d3cubWVkaWNhbGlu
c3BlY3Rvci52YS5nb3aCEnd3dy5tZW1waGlzLnZhLmdvdoIXd3d3Lm1lbnRhbGhl
YWx0aC52YS5nb3aCGXd3dy5tZXJjZS5yZXNlYXJjaC52YS5nb3aCEHd3dy5taWFt
aS52YS5nb3aCFHd3dy5taWx3YXVrZWUudmEuZ292ghZ3d3cubWlubmVhcG9saXMu
dmEuZ292ghF3d3cubWlyZWNjLnZhLmdvdoISd3d3Lm1vbnRhbmEudmEuZ292ghd3
d3cubW91bnRhaW5ob21lLnZhLmdvdoITd3d3Lm11c2tvZ2VlLnZhLmdvdoIZd3d3
Lm5jcmFyLnJlc2VhcmNoLnZhLmdvdoITd3d3Lm5lYnJhc2thLnZhLmdvdoIVd3d3
Lm5ld2VuZ2xhbmQudmEuZ292ghR3d3cubmV3amVyc2V5LnZhLmdvdoIVd3d3Lm5l
d29ybGVhbnMudmEuZ292gh13d3cubm9ydGhlcm5jYWxpZm9ybmlhLnZhLmdvdoIa
d3d3Lm5vcnRoZXJuaW5kaWFuYS52YS5nb3aCF3d3dy5ub3J0aGZsb3JpZGEudmEu
Z292ghR3d3cubm9ydGhwb3J0LnZhLmdvdoIVd3d3Lm5vcnRodGV4YXMudmEuZ292
ghR3d3cubnV0cml0aW9uLnZhLmdvdoITd3d3Lm55aGFyYm9yLnZhLmdvdoIPd3d3
Lm55bmoudmEuZ292ghB3d3cub2VkY2EudmEuZ292ghF3d3cub2Vmb2lmLnZhLmdv
doISd3d3Lm9pcy5vaXQudmEuZ292gg53d3cub2l0LnZhLmdvdoITd3d3Lm9rbGFo
b21hLnZhLmdvdoIPd3d3Lm9wcm0udmEuZ292ghJ3d3cub3JsYW5kby52YS5nb3aC
Dnd3dy5vc3AudmEuZ292ghN3d3cucGFsb2FsdG8udmEuZ292ghV3d3cucGFya2lu
c29ucy52YS5nb3aCFnd3dy5wYXRpZW50Y2FyZS52YS5nb3aCGHd3dy5wYXRpZW50
c2FmZXR5LnZhLmdvdoIOd3d3LnBibS52YS5nb3aCGnd3dy5wZXByZWMucmVzZWFy
Y2gudmEuZ292ghd3d3cucGhpbGFkZWxwaGlhLnZhLmdvdoISd3d3LnBob2VuaXgu
dmEuZ292ghV3d3cucGl0dHNidXJnaC52YS5nb3aCFXd3dy5wb2x5dHJhdW1hLnZh
LmdvdoIWd3d3LnBvcGxhcmJsdWZmLnZhLmdvdoITd3d3LnBvcnRsYW5kLnZhLmdv
doIgd3d3LnBvcnRsYW5kY29pbi5yZXNlYXJjaC52YS5nb3aCE3d3dy5wcmVzY290
dC52YS5nb3aCFXd3dy5wcmV2ZW50aW9uLnZhLmdvdoIWd3d3LnByb3N0aGV0aWNz
LnZhLmdvdoIVd3d3LnByb3ZpZGVuY2UudmEuZ292gh13d3cucHN5Y2hvbG9neXRy
YWluaW5nLnZhLmdvdoIPd3d3LnB0c2QudmEuZ292ghd3d3cucHVibGljaGVhbHRo
LnZhLmdvdoIVd3d3LnB1Z2V0c291bmQudmEuZ292ght3d3cucXVhbGl0eWFuZHNh
ZmV0eS52YS5nb3aCGXd3dy5xdWVyaS5yZXNlYXJjaC52YS5nb3aCDnd3dy5yY3Yu
dmEuZ292gg93d3cucmVuby52YS5nb3aCIXd3dy5yZXNlYXJjaC5pb3dhLWNpdHku
bWVkLnZhLmdvdoITd3d3LnJlc2VhcmNoLnZhLmdvdoITd3d3LnJpY2htb25kLnZh
LmdvdoIYd3d3LnJvcmMucmVzZWFyY2gudmEuZ292ghN3d3cucm9zZWJ1cmcudmEu
Z292ggp3d3cudmEuZ292MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwdwYDVR0fBHAwbjA1oDOgMYYvaHR0cDovL2NybDMuZGln
aWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsQ0FHMi5jcmwwNaAzoDGGL2h0dHA6Ly9j
cmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbENBRzIuY3JsMEwGA1UdIARF
MEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2lj
ZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHQGCCsGAQUFBwEBBGgwZjAkBggrBgEFBQcw
AYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMD4GCCsGAQUFBzAChjJodHRwOi8v
Y2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxDQUcyLmNydDAJBgNV
HRMEAjAAMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUA7ku9t3XOYLrhQmkfq+Ge
ZqMPfl+wctiDAMR7iXqo/csAAAFoN+tEogAABAMARjBEAiBNIg9V/y2hhxf64y3K
0rRNA0yTbsxddVr7L29WzF2WyQIgajpyedaqya0BrA0f6ASS2UDtTmmShLgUcDF4
tBL0CpgAdQCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWg360V3
AAAEAwBGMEQCIBJ81UPutXJkdGPCUXCd+qentoiTa4PBwWVciGiPD/j+AiBX+CMz
pw1sx+Tv05LjuaFkNYRyEqe3iSbUkfdto3O7dTANBgkqhkiG9w0BAQsFAAOCAQEA
n4ENkLIpADL7KpFOoVzfO1BKk2I15XXsveb86apibUBB5hiwlXU84qGmdyaOa1wH
FaRS2UR0Anke8B2ijeGr5T6c7b8UeS+zK9KwL/i7BtqjpdK5R91sxv4KZf6MEVQ2
9oFi/tTEARL+wqPvKQVk9BiJHwOgxXSscNwvzrB9vLHZ8gBKOdTXqvRYgo3M68TW
5KTHC6xY4msK5/zDG5mJwp2mNbslqusr42DgYrASETfeN5kioTn3c1UBDpcQk/Cr
izpJpKwUdxYjTFJ6El65mH4a5QBdkrO8lxTSawZqUkkrfCQxHgIdwKRF+gSqio7x
W7n38wNgbA9Cs/KVY6JEtQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhenSy0IKVbKOSEPbHwt
0+knlRoiVfkt9Os2Wor1vW7EnR0Xgc/MhR6xuOpJX9y/DTIKKl6OuY71v5h/PEaf
qg6lawkZqeSNbSBqSbpfo6tVWnnNynoOxX9n6b9AGT6ULTZh5Gp/c9HktqLOoFsH
YB8taMWN1NzmfFP802YvNp29qXAwGgQQwzh/ct7DQRckybsGNZaVR+97+c8GqxUC
IzXPzoaK88P1jHq7v/7KYTFYxHhvJcFGcOimZnMMhsQlIJMuqjH4RCPhVy8hoe99
v2zbHMgUfK4/0EAcMQmI9IpGRRFgNRLreXiQ9AhOobxBdM8FiZo6l8ggs5iBO38u
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2504251568237151642700012288519219748
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Philadelphia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Department of Veterans Affairs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise Web Infrastructure Support (EWIS) II'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.va.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23996941914608118641137624095687562650871446269073938606516540193498156566918808609236890887534116308662411135315814438497895623248386241382281966055602804582588861439022803987485972982914018303382453085122224415843534820293742627131495339602982130376838119082388549388240527603845862480521752298047681747552180835565506747173074073863756345205787763240754715094766534818839703876393637379941634022714270492566280473857294995846168580647580024038198889203525296635981073028813900663379676525027273409159975438205146504901052255041399773760261070500697567077885764966699126223606729102789580028971551624221141063642711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5dcddeb6cdbe8d97c217cfd1cdc9eab2bb51723f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2234 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexington.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexington.med.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartoftexas.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hepatitis.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herc.research.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hines.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiv.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospitalcompare.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.houston.hsrd.research.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.houston.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsrd.minneapolis.med.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsrd.research.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hudsonvalley.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huntington.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indianapolis.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovation.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowacity.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ironmountain.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackson.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kansascity.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lasvegas.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leavenworth.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lebanon.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littlerock.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lomalinda.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longbeach.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.losangeles.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisville.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovell.fhcc.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madison.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maine.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manchester.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marion.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinsburg.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maryland.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medicalinspector.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.memphis.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mentalhealth.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merce.research.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miami.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milwaukee.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minneapolis.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mirecc.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montana.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountainhome.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muskogee.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncrar.research.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebraska.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newengland.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newjersey.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neworleans.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerncalifornia.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernindiana.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northflorida.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northport.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northtexas.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutrition.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyharbor.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nynj.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oedca.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oefoif.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ois.oit.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oit.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oklahoma.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oprm.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orlando.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osp.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paloalto.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkinsons.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patientcare.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patientsafety.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pbm.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peprec.research.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.philadelphia.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenix.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pittsburgh.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polytrauma.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poplarbluff.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portland.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portlandcoin.research.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prescott.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prevention.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prosthetics.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.providence.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psychologytraining.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptsd.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.publichealth.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pugetsound.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualityandsafety.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.queri.research.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rcv.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reno.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.research.iowa-city.med.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.research.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richmond.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rorc.research.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roseburg.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.va.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016837eb44a2000004030046304402204d220f55ff2da18717fae32dcad2b44d034c936ecc5d755afb2f6f56cc5d96c902206a3a7279d6aac9ad01ac0d1fe80492d940ed4e699284b814703178b412f40a980075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016837eb457700000403004630440220127cd543eeb572647463c251709dfaa7a7b688936b83c1c1655c88688f0ff8fe022057f82333a70d6cc7e4efd392e3b9a16435847212a7b78926d491f76da373bb75
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009f810d90b2290032fb2a914ea15cdf3b504a936235e575ecbde6fce9aa626d4041e618b095753ce2a1a677268e6b5c0715a452d9447402791ef01da28de1abe53e9cedbf14792fb32bd2b02ff8bb06daa3a5d2b947dd6cc6fe0a65fe8c115436f68162fed4c40112fec2a3ef290564f418891f03a0c574ac70dc2fceb07dbcb1d9f2004a39d4d7aaf458828dccebc4d6e4a4c70bac58e26b0ae7fcc31b9989c29da635bb25aaeb2be360e062b0121137de379922a139f77355010e971093f0ab8b3a49a4ac147716234c527a125eb9987e1ae5005d92b3bc9714d26b066a52492b7c24311e021dc0a445fa04aa8a8ef15bb9f7f303606c0f42b3f29563a244b5