ewi.verizonwireless.com

- Verizon Data Services LLC -

Issued by DigiCert Baltimore CA-2 G2

About this certificate

This digital certificate with serial number 07:f1:99:a2:d2:50:f4:6e:a5:63:74:ce:22:f2:55:f7 was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Verizon Data Services LLC

Organization: Verizon Data Services LLC
Organization unit: BNWV
State / Province: Florida
Locality: Temple Terrace
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:f1:99:a2:d2:50:f4:6e:a5:63:74:ce:22:f2:55:f7
Serial Number (int): 10559055622122711011732853656185361911
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d6:30:f1:ce:60:8e:2b:f0:76:e3:22:35:93:7e:31:da:fb:0c:5f:11
AuthorityKeyId: c0:12:b2:28:74:68:46:67:e9:70:25:74:1a:00:45:5b:06:7d:5c:44

Fingerprint (sha1): 50:d5:b7:95:4c:32:cb:22:05:d7:c4:11:35:74:7c:57:3c:83:27:44
Fingerprint (sha256): 04:23:ae:76:d3:93:36:60:0b:08:85:7a:3a:e1:40:aa:4c:61:ec:c8:80:cb:b3:57:6c:e7:ee:0f:66:61:3a:9d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl

Check the revocation status for certificate ewi.verizonwireless.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ewi.verizonwireless.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ewi.verizonwireless.com
ecpd-wr.vzwcorp.com
agreement.verizonwireless.com
tdclubnwva001.tdc.vzwcorp.com
saclpbnwva001.sdc.vzwcorp.com
tdclpbnwva001.tdc.vzwcorp.com
twssoecwlap03.tdc.vzwcorp.com
sassoecwlap03.sdc.vzwcorp.com

Other certificates including the domain name verizonwireless.com

(limited to 100 certificates)
secure07.stage.lithium.com
uc-impres-pub-ne1.telecom.ouroath.com
ringtones.verizonwireless.com
ringtones.verizonwireless.com
mytestbillpay.verizonwireless.com
nyhmpsa01pub01.verizon.com
ewi.verizonwireless.com
businessportals.verizonwireless.com
welktx08vzwvocs-q-nk-esmags-1.verizonwireless.com
indirectorders.verizonwireless.com
eroes-glbl.verizonwireless.com
bizqa.verizonwireless.com
newbillpay.verizonwireless.com
visit.verizonwireless.com
erpdev-srmdmo.verizonwireless.com
sl.e.verizonwireless.com
tester12.verizonwireless.com
ohtwbgs00pub01.tdc.vzwcorp.com
mdata.verizonwireless.com
erpprd-scn-inprd.verizonwireless.com
www.preprodsurvey.verizonwireless.com
timages.verizonwireless.com
cim.apps.verizonwireless.com
presupport.verizonwireless.com
agentcommdev2.verizonwireless.com
pservicedev.verizon.com
tokens.verizonwireless.com
pos-wwsqa5.verizonwireless.com
tonesqa7.verizonwireless.com
obdm.verizonwireless.com
mbwestaccessmgr.verizonwireless.com
posstore.verizonwireless.com
verizonwireless.com
secure.verizonwireless.com
pshr-uatvzwsso.verizonwireless.com
secure03.stage.lithium.com
secure02.lithium.com
presupport.verizonwireless.com
prewestaccessmgrpp.verizonwireless.com
lkg07-mediamanager.svcs.verizon.com
login.verizonwireless.com
erpdev-ws-fnbst.verizonwireless.com
newbillpay.verizonwireless.com
octes.verizonwireless.com
secure03.stage.lithium.com
vpne.verizon.com
crm-aem-prod.verizonwireless.com
newbillpay.verizonwireless.com
b2b.verizonwireless.com
psearch.verizonwireless.com
vzwqa1.sdc.vzwcorp.com
vipsvc-yzeast.verizon.com
txslries01.verizonwireless.com
vzcleanroom.verizon.com
engage.vzw.com
posstore-sqa5.verizonwireless.com
vzomsgsac.verizonwireless.com
cim-dr.verizonwireless.com
lifeonverizon-uat.verizonwireless.com
scmnsmedia.verizonwireless.com
mobilevec-uat.verizonwireless.com
wmediastoretest.verizonwireless.com
vztube.verizonwireless.com
nsavs36-ld-c.verizonwireless.com
pprd-ssoauth.verizon.com
amregnpp.verizonwireless.com
preorder.verizonwireless.com
amstage2.verizonwireless.com
mbss-west.verizonwireless.com
sa430gl.wpc.edgecastcdn.net
psearch.verizonwireless.com
odideviceuat.verizonwireless.com
2wayssl_scm_to_VLocity.vzw.com
vzc-stg1-mediamanager-origin.svcs.verizon.com
sni1d57fgl.wpc.edgecastcdn.net
ecrm.verizonwireless.com
nyorbgcolec1p2.verizonwireless.com
sa430gl.wpc.edgecastcdn.net
ptqa.verizonwireless.com
vipsvcqa1.verizonwireless.com
ewi.verizonwireless.com
onepos-ss.west.verizonwireless.com
onevzssosoe-west-yz-sit6.verizonwireless.com
mediaQA2.verizonwireless.com
icedev.verizonwireless.com
mediastore.verizonwireless.com
infodoc.verizonwireless.com
2wayssl-scm-to-TCS.vzw.com
videos.verizonwireless.com
nsavs36-w.verizon.com
sharefile.vzw.com
sposstore.verizonwireless.com
secure02.lithium.com
eroes-ss.south.verizonwireless.com
tmblogin.verizon.com
WELKTX08VZWvOCS-Q-NK-eSMUCW-2.verizonwireless.com
cimdr-test.verizonwireless.com
2wayssl-mtas-to-ecgs-lab.verizonwireless.com
secure03.stage.lithium.com
globalm2mtest.verizonwireless.com

Certificate

The complete raw certificate details for ewi.verizonwireless.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxqEGog8dBZCMomqh+4B
XktiAXx077Zg064iqOstz2CqTYM1neX1h83jWIj69l9rY2SH/8LCxLSfgZbGG4MP
mHZ5z1d2fbQFjAH7tKTjPnH0uNYW6sKHTr4FsgZ5gVAP0YH+omHEUMCjQhc3lZ/L
/NoCUmknSpePtpA/30Sth8k6e04bLVkeQVTDx5Jr57OVo+E9CIctGGi3NxsRr2BF
QJq3t/f4L7Cmc/memQClQyOCR77jQkGp1FKCQTyzeNJogzligDkYiGZG3GRGtMvk
gSryoRU5nZk4ik0bucJoFZnePW+T47VsK/SN+aafOB8EOgM97PrLGN/p/qDjfWub
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10559055622122711011732853656185361911
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Baltimore CA-2 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Temple Terrace'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Data Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNWV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ewi.verizonwireless.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19075059591525417577929586779101316118968514884080159174226758771613209615441151471021876618327983737028628265593307480058104624971990523613750485409419953904297961290797056262872131744368757058412404076131203663209508427871535443554346342683380911012489670352328673082387587315324744184166147488558045060121041510723445300539985874927461533867075808680138650918232283807731205545417604327696100563332488526616390667584382733143741185021553737620308385319074809521139819617207486475718065563586174544184562088524106440689793035970745085154965429835562513981787077215632367664105255231735544212409577759729121883823009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c012b22874684667e97025741a00455b067d5c44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d630f1ce608e2bf076e32235937e31dafb0c5f11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (235 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewi.verizonwireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecpd-wr.vzwcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agreement.verizonwireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdclubnwva001.tdc.vzwcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saclpbnwva001.sdc.vzwcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdclpbnwva001.tdc.vzwcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twssoecwlap03.tdc.vzwcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sassoecwlap03.sdc.vzwcorp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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