PER1073RVB001.ent.bhpbilliton.net

- BHP Billiton Innovation Pty Ltd -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 06:11:57:f4:93:fb:63:22:9b:0d:07:1c:ed:16:92:16 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BHP Billiton Innovation Pty Ltd

Organization: BHP Billiton Innovation Pty Ltd
Organization unit: GBIS
State / Province: Victoria
Locality: Melbourne
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:11:57:f4:93:fb:63:22:9b:0d:07:1c:ed:16:92:16
Serial Number (int): 8065420968409963460037810732653777430
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9a:98:46:d5:c2:ee:0c:69:d6:80:53:d5:1c:f8:8a:3b:b2:1a:ca:5c
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): cd:86:18:7b:c6:d7:89:36:db:8c:69:3f:1a:cb:22:e5:ef:bd:87:86
Fingerprint (sha256): 04:e3:90:13:6b:a2:b3:2c:c7:36:1e:73:82:65:6d:ab:3f:27:cb:49:e6:53:df:4c:82:d8:c9:32:1f:ae:01:26

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate PER1073RVB001.ent.bhpbilliton.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for PER1073RVB001.ent.bhpbilliton.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

PER1073RVB001.bhp.com
PER1073RVB001.ent.bhpbilliton.net

Other certificates including the domain name bhpbilliton.net

(limited to 100 certificates)
BMAPDC-VAM50V.apac.ent.bhpbilliton.net
petebs-zebs2.americas.ent.bhpbilliton.net
inside.bhpbilliton.net
incitrix.apac.ent.bhpbilliton.net
PER1069RVB002.ent.bhpbilliton.net
PDCRDGWAP01VEI.americas.ent.bhpbilliton.net
PER1073RVB001.ent.bhpbilliton.net
USDC2POCDM01.ENT.BHPBILLITON.NET
dspyxe-a-ise-01.americas.ent.bhpbilliton.net
incitrix.apac.ent.bhpbilliton.net
OD-TMS.apac.ent.bhpbilliton.net
bionmnyces01.bhpbilliton.net
petapm.bhpbilliton.net
phoupecmapl01.americas.ent.bhpbilliton.net
potashlearning.bhpbilliton.com
potash-mii.americas.ent.bhpbilliton.net
wdu1pweb01.bhpbilliton.net
biomulyces12.bhpbilliton.net
eroomtest.bhpbilliton.net
OD-TMS.bhp.com
dccsbx.bhpbilliton.com
PER1069RVB001.ent.bhpbilliton.net
phoupoamapl02.americas.ent.bhpbilliton.net
URAOLY-RHH01.APAC.ENT.BHPBILLITON.NET
tent.bhpbilliton.net
dcc.bhpbilliton.com
solmanjava.bhpbilliton.net
simcity.bhpbilliton.net
incvmcitrix.apac.ent.bhpbilliton.net
PET5083RVB001.ent.bhpbilliton.net
KUL2010RVB001.ent.bhpbilliton.net
phouaecoapw01.americas.ent.bhpbilliton.net
pdcrdgwap01vei.americas.ent.bhpbilliton.net
ecc-mdev.bhpbilliton.com
pet1gismobilesvc.bhpbilliton.com
phoudoamapl02.americas.ent.bhpbilliton.net
biopacyces01.bhpbilliton.net
PER1022RVB001.ent.bhpbilliton.net
pet5028rvb001.ent.bhpbilliton.net
inside.bhpbilliton.net
BMAPDC-KM03V.apac.ent.bhpbilliton.net
petoasis-test.bhpbilliton.net
phv1pweb01.bhpbilliton.net
petoasis-dev.bhpbilliton.net
pt5-portal.bhpbilliton.net
tfs.bhpbilliton.net
USDC1RCMPS01.tent.bhpbilliton.net
bmacitrix.apac.ent.bhpbilliton.net
pet5073rvb001.ent.bhpbilliton.net
pet5107rvb001.ent.bhpbilliton.net
pdc-medwb01vu.americas.ent.bhpbilliton.net
aris.bhpbilliton.net
JansenReports.bhp.com
colpdc-gis51v.apac.ent.bhpbilliton.net
simcity.bhpbilliton.net
p2broker.bhpbilliton.net
OLP0TCIT02.apac.ent.bhpbilliton.net
pam-production.bhp.com
accsbx.bhpbilliton.com
USDC1POCWA02.ENT.BHPBILLITON.NET
Phpoupmdmapw01.americas.ent.bhpbilliton.net
aris.bhpbilliton.net
bmapdc-km50v.apac.ent.bhpbilliton.net
red1pweb01.bhpbilliton.net
LER1024RVB001.ent.bhpbilliton.net
PET5079RVB001.ent.bhpbilliton.net
phoupgisapw26.americas.ent.bhpbilliton.net
shutdown.bhp.com
CHI5035RVB002.ent.bhpbilliton.net
yan4pweb01.bhpbilliton.net
phoudoamapl03.americas.ent.bhpbilliton.net
OD-TMS.apac.ent.bhpbilliton.net
PET5074RVB001.ent.bhpbilliton.net
petroleumtalentandlearning.bhpbilliton.net
dspyxe-a-ise-01.americas.ent.bhpbilliton.net
yan4pweb01.bhpbilliton.net
accsbx.bhpbilliton.com
bmapdc-inx01v.apac.ent.bhpbilliton.net
SUPPLIERSRM.BHPBILLITON.COM
ADL1036RVB002.ent.bhpbilliton.net
eroomdev.bhpbilliton.net
Inbrmcitrix.apac.ent.bhpbilliton.net
PDCVERSAwb01v.americas.ent.bhpbilliton.net
DAL5001PUI001.ent.bhpbilliton.net
JansenReports.bhp.com
smartplantapi-waio-qa.bhp.com
petoasis-uat.bhpbilliton.net
phoupoemapl01.americas.ent.bhpbilliton.net
colpdc-gis52v.apac.ent.bhpbilliton.net
saspdcarkwb04v.americas.ent.bhpbilliton.net
colpdc-gis50v.apac.ent.bhpbilliton.net
IAD5037RVB001.ent.bhpbilliton.net
pcnpdc.apac.ent.bhpbilliton.net
ADL1058RVB001.ent.bhpbilliton.net
eroom1.bhpbilliton.net
phoudoamapl04.americas.ent.bhpbilliton.net
bioyanyces01.bhpbilliton.net
OD-TMS.apac.ent.bhpbilliton.net
wdu1pweb01.bhpbilliton.net
iseportal.bhpbilliton.com

Certificate

The complete raw certificate details for PER1073RVB001.ent.bhpbilliton.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kuIlSBHA44W8KBiFEvi
y1FZHzt5wQUiNIb/dlctpuk7oR5et/+MSXJV59vJTbn5dKK7fCEcbKcWej1BypcP
Xptulyo7ABloL4c3zthfO07xf1CFZvBUxCEQsxnBlBmFvrFlEC9ADZsGxu0NrEy2
K0nUdy9N7XO8T9ERgD9L6OxOtmKCNYSS4Z2s/ObJAzaAiOzjW7ZGZSzvWu8gJDEt
EQyBTfz/cujzAytIbw7GrJ9ls1bhVWXFxOdvlELNZMq/0ahwqyWtzns1hCfXHCE/
MM113vswqOnPcs9Nhcbtz+zZb792nmXq0FPMlqW9FZ9tIKLrVUHTiHri/531MB2K
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8065420968409963460037810732653777430
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BHP Billiton Innovation Pty Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GBIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PER1073RVB001.ent.bhpbilliton.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28062150672094473986658483492863069293080021362936774307357766086627968510051479455618346688898853141120260198314192826882181520345074553441247074296761930968944700567775306526784301724223591981164407114563959649380066343990472812859773918068492192433931121451304214803917881688340520007456269861173320104513647432271850801512351215503647044715004337975169562006434291872111997091004758375240880897999619480837522600450322988410330960795367785622811771666183753688882118399143514939391664778388882048072514302757564485412611697647569276663680110017273650001389431364444596611775617593452253291865944819994625350404707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a9846d5c2ee0c69d68053d51cf88a3bb21aca5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PER1073RVB001.bhp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PER1073RVB001.ent.bhpbilliton.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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