deu54.sfdc-yzvdd4.force.com

- salesforce.com, inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:2f:4c:0b:28:f3:e0:3e:3c:33:3a:98:8d:82:7f:cd was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

salesforce.com, inc.

Organization: salesforce.com, inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:4c:0b:28:f3:e0:3e:3c:33:3a:98:8d:82:7f:cd
Serial Number (int): 4233264287019778026260616330331979725
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 7d:43:43:31:3a:10:d6:29:dd:4a:23:a2:1e:dc:3a:08:17:af:93:63
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 76:23:24:59:bd:96:95:47:eb:cc:47:dc:dd:23:9e:21:5a:60:77:20
Fingerprint (sha256): 04:ae:98:02:ea:f7:71:87:1a:e6:96:85:c1:34:16:9b:95:80:f8:29:e2:75:9c:84:fa:ca:c4:ac:35:a8:eb:69

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate deu54.sfdc-yzvdd4.force.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for deu54.sfdc-yzvdd4.force.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

deu54.sfdc-yzvdd4.force.com
*.deu54.sfdc-yzvdd4.force.com

Other certificates including the domain name force.com

(limited to 100 certificates)
*.cs109.force.com
dev1-uswest2.hmr2.falcondevtip.c.pc-rnd.pc-aws.force.com
sfdc-58ktaz.sandbox.vf.force.com
*.cs54.force.com
*.cs73.force.com
*.cs55.force.com
*.na151.force.com
*.cs3.force.com
*.na202.force.com
*.cs18.force.com
*.cs54.force.com
*.na2.force.com
*.na85.force.com
performance-us-01.scrt.sfdc.sh
embedded.demo.pardot.force.com
*.eu27.force.com
*.na12.force.com
*.cs30.force.com
*.na127.force.com
*.cs81.force.com
*.na14.force.com
sdb1.test1-uswest2.visual.fit1.pc-rnd.pc-aws.force.com
performance-us-02.scrt.sfdc.sh
*.na64.force.com
*.cs57.force.com
*.cs34.force.com
*.na72.force.com
salesforce.com
lo2.my.lightning-container.com
*.ap0.force.com
*.na36.force.com
*.cs81.force.com
*.na36.force.com
*.na107.force.com
*.na86.force.com
mobile1.t.force.com
*.eu46.force.com
*.cs4.force.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
*.cs15.force.com
*.cs173.force.com
*.eu25.force.com
*.na18.force.com
*.na74.force.com
*.na38.force.com
*.na137.force.com
*.na1.force.com
iad.my.lightning-container.com
*.na35.force.com
*.cs25.force.com
*.cs125.force.com
dev1-uswest2.hmr2.falcondevtip.c.pc-rnd.pc-aws.force.com
*.cs67.force.com
can8s.visual.sfdc-58ktaz.force.com
*.na121.force.com
*.na15.force.com
aus24s.lightning.sfdc-vwfla6.force.com
*.ap15.force.com
sec-b2b.my.salesforce.com
sfdc-vwfla6.lightning.force.com
*.eu26.force.com
ia7.file.force.com
sec-b2b.my.salesforce.com
*.cs344.force.com
*.na36.force.com
aus5.sfdc-vwfla6.force.com
*.ap5.force.com
*.eu28.force.com
ora2s.dev1-uswest2.content.dev1.pc-rnd.pc-aws.force.com
*.na38.force.com
usa358.sfdc-yfeipo.force.com
na44-blitz02.soma.salesforce.com
*.na208.force.com
*.na12.force.com
perf1-useast2.perf2o.ld.pc-rnd.pc-aws.force.com
*.ap123456.force.com
*.na76.force.com
*.eu15.force.com
*.na215.force.com
*.cs57.force.com
*.cs224.force.com
sfdc-lywfpd.secure.force.com
*.ap5.force.com
salesforce.com
viv2.force.com
sfdc-yfeipo.force.com
*.cs77.force.com
*.na36.force.com
*.eu30.force.com
*.um7.force.com
deu54.sfdc-yzvdd4.force.com
*.na66.force.com
*.na14.force.com
*.cs90.force.com
*.cs98.force.com
*.na69.force.com
*.na36.force.com
ia6.sandbox.file.force.com

Certificate

The complete raw certificate details for deu54.sfdc-yzvdd4.force.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG9DCCBdygAwIBAgIQAy9MCyjz4D48MzqYjYJ/zTANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzA0MDYwMDAwMDBa
Fw0yNDA0MDUyMzU5NTlaMH8xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9y
bmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMR0wGwYDVQQKExRzYWxlc2ZvcmNl
LmNvbSwgaW5jLjEkMCIGA1UEAxMbZGV1NTQuc2ZkYy15enZkZDQuZm9yY2UuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ypPmKLU7Eqh9klGfOID
C+yjfD2ABL/iVqPWUofnRI2nFZAAyzsFB2apthlFjK+fweQobC/m++gV2uqBar3r
yVmPxHQUMtGfbGU7rbMLGb3FK3uU/YmmDERw8ek5G8rSgL08ENXJZJgt+NHZmBE9
EpGyPGDF99CyBuMXl9kwnpBCg51MLw4qpuPFDxnEKRQwhV1wLEWI4QKsdt5fbfJ0
YxUVV+B1Fm22e7Lyqj0usrJXwYAPns1GBcNNp/VLybbLhSWP3NtS6uH8dw180ARX
R4i22zNQ7UctzXOaqBAoGfObXWD25crzjuSWOenssh6Y3dAwumjPRXAnB6SVPUej
SQIDAQABo4IDmjCCA5YwHwYDVR0jBBgwFoAUt2ui6qiqhIx56rTaD5iyxZV2ufQw
HQYDVR0OBBYEFH1DQzE6ENYp3Uojoh7cOggXr5NjMEUGA1UdEQQ+MDyCG2RldTU0
LnNmZGMteXp2ZGQ0LmZvcmNlLmNvbYIdKi5kZXU1NC5zZmRjLXl6dmRkNC5mb3Jj
ZS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5j
b20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpodHRw
Oi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0Ex
LTQuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6
Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB/BggrBgEFBQcBAQRzMHEwJAYIKwYBBQUH
MAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0cDov
L2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENB
MS0xLmNydDAJBgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDu
zdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYdXv83oAAAEAwBHMEUC
IC7SJxmcwkRMFJToBl72Nm5wk/+mHYt1u+lyjC9MGuNNAiEA8ss4oG5Azy3X7jNV
eC6xtZ8nEv0EqMaLz1pClVW5eE8AdwBz2Z6JG0yWeKAgfUed5rLGHNBRXnEZKoxr
gBB6wXdytQAAAYdXv85GAAAEAwBIMEYCIQCEKxEQQlL6M9rLQOt6c4DNX/qLCow7
K2+VnKMbIOQ7NQIhAOnXw921+Dk/+JfBC1d8SdB6gvFbOU2B1sup039kuRpNAHUA
SLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGHV7/OFwAABAMARjBE
AiAMGN5TuO5GAoWiblHhdjrWvH282+1jzq/4FnHu50jXNAIgUa26EfdiWJeP7BX3
/sIfKLxpGovL15K2xzu2pOK02KQwDQYJKoZIhvcNAQELBQADggEBAGhjqzJ9JT9K
YoiNKs02gOZqx0cCvN663aBv42T7DeMjd0Mw/QXPaucUND7awxyXQE1w0pwA/gwC
zo333luNrVisU6v7xKwE6Pfrm14WSSECqUziQeeWzW5KX5fZ6uMMhYH8kw3R94ui
CwZ1elF0f48YaNgyZxifke77/k6K8nCoIk7Cw3+MThAD2TtzJhO0BDJp3iLgGnr5
4YNBmkhE2VX1PtDoYuLimDqtBRPRdJWWQ3CPcmpY2ZOquEYFIADg6yspk+jAA4sH
2YQvT4LmQ7+E3/4NbrEhlnTh41mk/SAyt8eHeR4xiYmoAKMolqpN4KWcnLnZ0Oh1
M1CIjsaF+nQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ypPmKLU7Eqh9klGfOID
C+yjfD2ABL/iVqPWUofnRI2nFZAAyzsFB2apthlFjK+fweQobC/m++gV2uqBar3r
yVmPxHQUMtGfbGU7rbMLGb3FK3uU/YmmDERw8ek5G8rSgL08ENXJZJgt+NHZmBE9
EpGyPGDF99CyBuMXl9kwnpBCg51MLw4qpuPFDxnEKRQwhV1wLEWI4QKsdt5fbfJ0
YxUVV+B1Fm22e7Lyqj0usrJXwYAPns1GBcNNp/VLybbLhSWP3NtS6uH8dw180ARX
R4i22zNQ7UctzXOaqBAoGfObXWD25crzjuSWOenssh6Y3dAwumjPRXAnB6SVPUej
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4233264287019778026260616330331979725
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'salesforce.com, inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'deu54.sfdc-yzvdd4.force.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27162099861353948762301210745357521348370978742974021276426066432477013762984726920692813110228848965717774473761361366680694324588878587562118462062405097532166574423430130016370829420406898372397160114549364353928974577717670645006210834929713065181666791093093603792446850689157439729920145939897079874502796600148971100774024817849036436133175705833201530398735692931045831940775033223289902338887997643865083634444782250255774538223997999197283736955762238532370483934957348368711313923123681064155666255014346071992340453437530107589067869163076495579640294390434871613177763182371663562500320446739675307549513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d4343313a10d629dd4a23a21edc3a0817af9363
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deu54.sfdc-yzvdd4.force.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deu54.sfdc-yzvdd4.force.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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