acumatica.com

- Acumatica, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:2a:4c:3c:d4:5e:58:a7:11:74:0a:4d:f7:b6:c2:9d was issued on by DigiCert Inc.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Acumatica, Inc.

Organization: Acumatica, Inc.
State / Province: Washington
Locality: Bellevue
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:2a:4c:3c:d4:5e:58:a7:11:74:0a:4d:f7:b6:c2:9d
Serial Number (int): 20158042687376708996051186430044979869
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d2:6b:df:ce:56:de:60:7c:89:70:1b:d2:ec:72:7f:5a:2c:3c:30:cf
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): ee:b1:99:7d:a1:88:52:9a:c8:69:e8:56:4d:bd:b6:67:02:cb:8b:a6
Fingerprint (sha256): 04:3d:ae:bd:87:0f:8d:9e:bd:b2:6b:16:a5:34:a0:fa:35:ab:66:a4:68:82:fd:0c:25:9b:fc:45:ad:6d:26:6b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate acumatica.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acumatica.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acumatica.com
adn.acumatica.com
cdn.acumatica.com
cdn-summit.acumatica.com
cdndev.acumatica.com
dev.acumatica.com
dev-summit.acumatica.com
dev2.acumatica.com
erp.acumatica.com
lp.acumatica.com
static.acumatica.com
summit.acumatica.com
ww.acumatica.com
www.acumatica.com

Other certificates including the domain name acumatica.com

(limited to 100 certificates)
*.acumatica.com
customervoice.acumatica.com
dev.acumatica.com
acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
www.acumatica.com
lp.acumatica.com
*.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
lp.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
www.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
asiablog.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
acumatica.com
feedback.acumatica.com
www.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
mail.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
new.acumatica.com
acumatica.com
www.acumatica.com
map.acumatica.com
customervoice.acumatica.com
*.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
lp.acumatica.com
feedback.acumatica.com
lp.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
lp.acumatica.com
www.acumatica.com
feedback.acumatica.com
internal.acumatica.com
community.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
shopifyapi.acumatica.com
acumatica.com
partners.acumatica.com
www.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
*.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
dev.acumatica.com
feedback.acumatica.com
lp.acumatica.com
customervoice.acumatica.com
www.acumatica.com
*.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
shopifyapi.acumatica.com
viewemail.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
erp.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
*.acumatica.com
asiablog.acumatica.com
feedback.acumatica.com
www.acumatica.com
customervoice.acumatica.com
lp.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
new.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
lp.acumatica.com
customervoice.acumatica.com
viewemail.acumatica.com

Certificate

The complete raw certificate details for acumatica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH5TCCBs2gAwIBAgIQDypMPNReWKcRdApN97bCnTANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE
aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjMw
ODE3MDAwMDAwWhcNMjQwODE2MjM1OTU5WjBnMQswCQYDVQQGEwJVUzETMBEGA1UE
CBMKV2FzaGluZ3RvbjERMA8GA1UEBxMIQmVsbGV2dWUxGDAWBgNVBAoTD0FjdW1h
dGljYSwgSW5jLjEWMBQGA1UEAxMNYWN1bWF0aWNhLmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAL1n+hUh0Dku8KCSism3AdtfzzwFToSl1AQZNgW0
DGwbOE+BZbrfZC4ZwgdD3eY21FK6Cqtgm7U7YWNybrQaREki+MO1SJ13f5zvM090
JP1M0kMQA6FqtC5UuFnhpYc6v0W1VyBLG2qmAcEIFIL4J/J9UnFUDYg6yuofX4Io
X64tT4v5j/Baws8RLlm/71PX18G9BHyS4UAENBXK+jeC08cHAMq8aStl0eBwzOXK
uy4/EJsYJa2AyO9Mw5ZyOq2XYw10nPcT8YOGdHL7HNX23r7lmlB1b/S2n/CebwpA
htkNJNM5IRwiLX5gsVrbVscZaGin0YvGswPYCXlB5+vI1gcCAwEAAaOCBJkwggSV
MB8GA1UdIwQYMBaAFHSFgMBmx9833s+9KTeqAx2+7c0XMB0GA1UdDgQWBBTSa9/O
Vt5gfIlwG9Lscn9aLDwwzzCCASkGA1UdEQSCASAwggEcgg1hY3VtYXRpY2EuY29t
ghFhZG4uYWN1bWF0aWNhLmNvbYIRY2RuLmFjdW1hdGljYS5jb22CGGNkbi1zdW1t
aXQuYWN1bWF0aWNhLmNvbYIUY2RuZGV2LmFjdW1hdGljYS5jb22CEWRldi5hY3Vt
YXRpY2EuY29tghhkZXYtc3VtbWl0LmFjdW1hdGljYS5jb22CEmRldjIuYWN1bWF0
aWNhLmNvbYIRZXJwLmFjdW1hdGljYS5jb22CEGxwLmFjdW1hdGljYS5jb22CFHN0
YXRpYy5hY3VtYXRpY2EuY29tghRzdW1taXQuYWN1bWF0aWNhLmNvbYIQd3cuYWN1
bWF0aWNhLmNvbYIRd3d3LmFjdW1hdGljYS5jb20wDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBE
hkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JT
QVNIQTI1NjIwMjBDQTEtMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0
LmNvbS9EaWdpQ2VydEdsb2JhbEcyVExTUlNBU0hBMjU2MjAyMENBMS0xLmNybDA+
BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRp
Z2ljZXJ0LmNvbS9DUFMwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0
cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0
cy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBD
QTEtMS5jcnQwCQYDVR0TBAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA
7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGKA1V+4QAABAMARzBF
AiEAsEPBHaZou3d3POhHc11dxcHaDRjMjJd9PWI/BEg7hAICICzCSZw4oHXFROrY
UM0/Yy9hDgFoVuC8GiW4tE3K+5DrAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB
2bu/qznYhHMAAAGKA1V+0AAABAMASDBGAiEAorgAOByIZqZdLfL9Onn2XTDmeuql
dXEhfU7EAumoiKQCIQDINuJ/0Gh4i7XglvCYTkuoQlmXv6Pq8nylVShyJHOf7gB1
ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABigNVfqUAAAQDAEYw
RAIgUAKl1nGhVUl6iaVzFqrH921hzq35SwKuE7xITXSmTVkCIC/ZL4uQ39hp0E1g
7uCti61LMZYWAL4lNgnCqp4Qrd/aMA0GCSqGSIb3DQEBCwUAA4IBAQCd49+OwZxv
2HORF3R8lf/k8546mwyRtHVuVcr/mV/nu4x+myVMwTr+KAf7LfMrKm5np3onMISN
mwAv52I5mDqiCraWT9zbJFDj85i/0WMNk1TnfVB5bngUaSmm6EL88+vZYEmcAs7B
1WMVYyDKUI9+2HU7u2NDy2xro9crxp8Oi3w+wnpCQ2qbYdu8DzkfKhMJeJna+9DJ
AaxhZ9yuZi681Kk+ayio9iYvQM8rOtCEbXdVXy3TG6oy4e8k0D8NeutxSKqUI154
CrRJ2lFU1HBkKrHI2+CdU1wGL+dLveGgDdrTIUj/ts7E/7bAEoU3FygnvYYwK6xp
dVF6mAURwEt/
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWf6FSHQOS7woJKKybcB
21/PPAVOhKXUBBk2BbQMbBs4T4Flut9kLhnCB0Pd5jbUUroKq2CbtTthY3JutBpE
SSL4w7VInXd/nO8zT3Qk/UzSQxADoWq0LlS4WeGlhzq/RbVXIEsbaqYBwQgUgvgn
8n1ScVQNiDrK6h9fgihfri1Pi/mP8FrCzxEuWb/vU9fXwb0EfJLhQAQ0Fcr6N4LT
xwcAyrxpK2XR4HDM5cq7Lj8QmxglrYDI70zDlnI6rZdjDXSc9xPxg4Z0cvsc1fbe
vuWaUHVv9Laf8J5vCkCG2Q0k0zkhHCItfmCxWttWxxloaKfRi8azA9gJeUHn68jW
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20158042687376708996051186430044979869
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acumatica, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acumatica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23910312551521561807666857967793867689945465208340472613279879016751467010839385644305691824721967143091509318464553116113597441231197956293896211069003096809261119251474354178168515457212508877676605446981180909425402513665060100898265336404892913292275449410082877589846387924766439344089900041702957287654077587068123400267025006694469917510845625147863029218703322460531657322584792381628738082422176793307274016915934830301565989482188640947471346276050493298080205584748323807390714964147518425511000790814132278918321140804728721467256714337363671026248107200040148630745500970453623595171911684181824163599879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d26bdfce56de607c89701bd2ec727f5a2c3c30cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (288 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acumatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adn.acumatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.acumatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-summit.acumatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdndev.acumatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.acumatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-summit.acumatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.acumatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erp.acumatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.acumatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.acumatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summit.acumatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww.acumatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acumatica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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