www.viacom.tech

- Viacom International Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:45:3b:2b:82:33:32:f4:af:8b:68:46:7f:6e:27:2d was issued on by DigiCert Inc.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Viacom International Inc.

Organization: Viacom International Inc.
Organization unit: MTS
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:45:3b:2b:82:33:32:f4:af:8b:68:46:7f:6e:27:2d
Serial Number (int): 20297888529285191887401460681055020845
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ff:65:a5:54:62:4b:94:40:d1:d9:c5:1d:ee:e7:be:ea:1d:3e:aa:3e
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 79:12:2d:38:8d:47:45:c3:a3:d4:3a:ba:e1:81:93:c2:68:0d:09:50
Fingerprint (sha256): 04:bc:cf:88:48:bc:6e:20:4c:73:a3:62:64:be:1e:74:43:09:90:da:01:df:92:b8:5f:34:b9:d5:65:02:7c:1c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.viacom.tech

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.viacom.tech

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.viacom.tech
viacom.tech
kca.nickelodeon.se
kca.nick.com.au
kca.nick.de
kca.nick-asia.com
kca.mundonick.com.br
kca.nickelodeon.nl
kca.nickelodeonafrica.com
kca.mundonick.com
kca.nickelodeon.ru
kca.nickelodeon.be
kca.nick.co.uk
kca.nickelodeonarabia.com
kca.nickelodeon.es
kca.nickelodeon.fr
kca.nick.tv
kca.nicktv.it
kca.nickelodeon.pt
kca.nick.com.pl
kca.nickelodeon.no
kca.nickelodeon.dk

Other certificates including the domain name viacom.tech

(limited to 100 certificates)
www.viacom.tech
www.viacom.com
mtvnservices.com
www.viacom.com
viacom.tech
www.viacom.tech
eden-kafka-connect-ui.i.viacom.tech
reko.i.viacom.tech
www.viacom.com
www.viacom.com
www.viacom.tech
viacom.tech
viacom.tech
eden-kafka-connect-dev.i.viacom.tech
viacom.tech
mtvnservices.com
www.viacom.tech
mtvnservices.com
www.viacom.tech
www.viacom.com
neutron-arc-sync.i.viacom.tech
www.viacom.tech
origin.onboarding.noggin.com
MTVI.com
www.viacom.tech
www.viacom.tech
www.viacom.tech
mtvnservices.com
www.viacom.com
www.viacom.com
www.viacom.tech
mtvnservices.com
www.viacom.tech
www.viacom.tech
mtvnservices.com
mtvnservices.com
www.viacom.tech
viacom.tech
eden-kafka-connect-prod.i.viacom.tech
origin.admin.officeapp.viacom.tech
origin.connect.viacom.tech
origin.neutron-api.viacom.tech
eden-kafka-topics-ui.i.viacom.tech
www.viacom.tech
mtvnservices.com
www.viacom.tech
qa-etl-feeds-partnerplatform.viacom.tech
www.viacom.com
voice-assistant-debug-helper.viacom.tech
www.viacom.com
eden-kafka-connect-qa.i.viacom.tech
blog.viacom.tech
www.viacom.tech
viacom.tech
www.viacom.tech
origin.as.viacom.tech
origin.neutron-api-config.viacom.tech
www.viacom.com
www.viacom.com
qa-officetv.i.viacom.tech
www.viacom.com
qa-voice-assistant-google-action-comedy-central.viacom.tech
www.viacom.tech
pai.viacom.tech
viacom.tech
www.viacom.tech
mtvnservices.com
recs.viacom.tech
MTVI.com
www.viacom.tech
origin.interview-helper.viacom.tech
www.viacom.tech
www.viacom.com
origin.connect.viacom.tech
blog.viacom.tech
blog.viacom.tech
www.viacom.tech
as.viacom.tech
www.viacom.com
officeapp.viacom.tech-d.mtvi.com
www.viacom.tech
www.viacom.tech
paramount.tech
www.viacom.com
www.viacom.tech
qa-recs.viacom.tech
www.viacom.tech
eden-kafka-schema-registry-qa.i.viacom.tech
www.viacom.com
staging-neutron-api.viacom.tech
www.viacom.com
mtvnservices.com
www.viacom.tech
www.viacom.tech
mtvnservices.com
mtvnservices.com
viacom.tech
www.viacom.com
officetv-api.i.viacom.tech
MTVI.com

Certificate

The complete raw certificate details for www.viacom.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleBJAG2SQLY0vJDJznFI
/+37oMo50UTCJLEcNmJWkgZL2Z6+a6DtHwt5n1dNrZNvJBrAjNxDUx96IscErZjD
dMvTKB6y3tIt3o4vlq0SGL3hujKUV0K7zttgf25GVxC7X29o2t3CBT4mEdqQYObK
REB7VrjmlwmkeBxidHshj4Njl1o8oaPKYLbdXnSep5W0y8CdorUnTO0y52xDGwPk
utP/YioCcYu0Pymrdbf7CmNwRvN3XmjFOgL1AulJuLeuO5hI2Yx0NiQPHmvkSndC
K3GgG+nmi7r/9VOSnGdfiunXx3UZKgBRpWkLsRaPgyICk4Bdi+XhnrWsIO8rbsSH
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20297888529285191887401460681055020845
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viacom International Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MTS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.viacom.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18920106575796268813534926167179186104333261426952580934740464241077848608262748817295656246494342545170906037366062489182805082190836318586836166983805362403353276680978244475018303191329151472310340845190236492124499419569764283167709062222705986531496934121911237825814379496779549076615708837849867858112694010537177127437919129849922919964968804642602206776988575821873639909166373745194874003886271810619378710062506631554198370825870697879868001393685469545495099983202587980463447390520666788857252935893865595991228340083268340582054353089631721989276233750781172461018962142923215787265169010573801177778061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff65a554624b9440d1d9c51deee7beea1d3eaa3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (419 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacom.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.mundonick.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeonafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.mundonick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeonarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nicktv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nick.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kca.nickelodeon.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00631fadf1f9e66cdf30505d23fa0edeada5f6d3b7787a9128a53a6a592d90ce889f8dc74d71d49f44dff0902643fe451ad5e07c685b223346759cd48a6341ef0d1f525dfceb9ed084111c49fee1061bc093ab65a277d7327ad11af3482aef0b87fd6448f1184b6a94c357d49ee12ab8238ad1637b67d9b15614f2399efd38266f68e313d766dcb59e2ddef80658cf28fcd45d688457732a7a153ad294f6471601843c9a4bb9069493a440584f3ab426aa66be75576ab3b752b3b57abf30aaa00b5f7f1cac2fc9975273f1b596289e12db90c6dc9cc27d5f84a5d9da06396fbfda3d1ff28da798a8b36547f1d7e25fe296489b631a23d927b68b2baa597e27d7fc