acquia-sites.com

- Acquia Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 05:20:fa:dc:40:27:5e:5f:28:e2:55:20:ca:f3:d3:4b was issued on by DigiCert Inc.

With 111 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Acquia Inc

Organization: Acquia Inc
Organization unit: Acquia Hosting
State / Province: Massachusetts
Locality: Boston
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:20:fa:dc:40:27:5e:5f:28:e2:55:20:ca:f3:d3:4b
Serial Number (int): 6817381530848994297759410967270380363
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 47:a3:69:63:03:d4:b6:fb:f0:d6:78:79:dc:82:23:65:ef:cf:9e:ae
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): db:97:40:90:aa:9d:a3:4e:df:47:95:4a:45:31:01:79:d0:f7:93:08
Fingerprint (sha256): 04:ee:ad:15:f5:b1:ef:a5:bf:1d:33:63:55:c7:f6:cb:a9:de:b9:41:9a:3a:dd:8a:ee:5f:5b:35:44:5c:ec:55

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g4.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g4.crl

Check the revocation status for certificate acquia-sites.com

111

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquia-sites.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acquia-sites.com
law.rwu.edu
www.seventhgeneration.com
rwu.edu
www.newdma.org
newdma.org
www.mfa.org
www.bungalow-b.com
www.ecaccess.cc
www.joshgroban.com
mpoweredtodecide.com
www.wmgbackline.com
www.nxstage.com
neasc.babson.edu
facultyportal.babson.edu
innovation.babson.edu
dev.masschallenge.org
stg.masschallenge.org
masschallenge.org
smartbalance.com
gift.bungalow-b.com
gift.joshgroban.com
gift.ecaccess.cc
johnedward.net
giftshop.stlouischildrens.org
giving.stlouischildrens.org
nurses.stlouischildrens.org
www.stlouischildrens.org
www.johnedward.net
imprivata.com
www.aavidthermalloy.com
www.smartbalance.com
www.dental360.net
www.dentalproductshopper.com
www.dentallearning.net
www.hygieneproductshopper.com
www.teachforall.info
teachforall.info
www.imprivata.com
www.breederscup.com
breederscup.com
navinetsupport.net
motherjones.com
www.motherjones.com
www.sugarcrm.com
graduate.ucsf.edu
acuvue.com
www.aavid.com
www.usbg.gov
dwfm.natraps.com
2012.drupalcampla.com
www.cesarsway.com
www.autismspeaks.org
alliance.bdo.com
www.acuvue.com
carlyle.com
www.microtech.net
thecarlylegroup.com
scholar.babson.edu
sites7.sfsu.edu
www.bassmaster.com
carlylegroupcreatesvalue.com
memorialcare.org
www.memorialcare.org
alert.mta.info
www.dogfish.com
www.berklee.edu
www.rohwrestling.com
it.ucsf.edu
ucsf.edu
www.imprivata.lu
www.imprivata.fr
www.imprivata.be
www.imprivata.no
esri.ca
berklee.edu
showcasecinemas.com
studentportal.babson.edu
bridgew.edu
www.bridgew.edu
www2.bridgew.edu
arts.bridgew.edu
microsites.bridgew.edu
strategy.bridgew.edu
www.mentalhealthcommission.ca
dogfish.com
commonsensemedia.org
metlifedaag.com
dev.bell.babson.edu
stage.bell.babson.edu
stage2.bell.babson.edu
dev.studentportal.babson.edu
stage.studentportal.babson.edu
stage2.studentportal.babson.edu
dev.facultyportal.babson.edu
stage.facultyportal.babson.edu
stage2.facultyportal.babson.edu
dev.innovation.babson.edu
stage.innovation.babson.edu
stage2.innovation.babson.edu
dev.webform.babson.edu
stage.webform.babson.edu
stage2.webform.babson.edu
bell.babson.edu
webform.babson.edu
geautomation.com
www.showcasecinemas.com
dev.showcasecinemas.com
stage.showcasecinemas.com
m.breederscup.com
signage.aoc.gov

Other certificates including the domain name acquia-sites.com

(limited to 100 certificates)
acquia-sites.com
acquia-sites.com
acquia-sites.com
datamedicaid.prod.acquia-sites.com
acquia-sites.com
staging.ensco.com
www-stage.anzacmemorial.nsw.gov.au
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
achievesdtcgjdnbrbp.devcloud.acquia-sites.com
mbrdev.prod.acquia-sites.com
www.stg.solocal.com
tplwebsitestg.prod.acquia-sites.com
raritanvalstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
batterseadev.prod.acquia-sites.com
aupairworld.prod.acquia-sites.com
www.dev.solocal.com
www.stg.solocal.com
premiereprep.com
acquia-sites.com
ee.dustindev.com
cloudapi.enterprise-g1.acquia-sites.com
batterseadev.prod.acquia-sites.com
stewardcommunity.prod.acquia-sites.com
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
planetpaymentprod.prod.acquia-sites.com
trocairestg.prod.acquia-sites.com
tsysitesdev.prod.acquia-sites.com
tplwebsitestg.prod.acquia-sites.com
acquia-sites.com
milgardstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
rrd8multidev.prod.acquia-sites.com
pnwdsstg.prod.acquia-sites.com
www.dev.solocal.com
acquia-sites.com
useastucc5.acquia.com
www.anzacmemorial.nsw.gov.au
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
newhousedev.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
firstnamesgrouptest.devcloud.acquia-sites.com
acquia-sites.com
jfkldev.prod.acquia-sites.com
acquia-sites.com
cloudapi.trex-prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
quickanddirtytipsdev.prod.acquia-sites.com
acquia-sites.com
stewardcommunity.prod.acquia-sites.com
acquia-sites.com
oitcomms.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
univadisstg.prod.acquia-sites.com
useastucc5.acquia.com
datacms.prod.acquia-sites.com
acquia-sites.com
tplwebsitedev.prod.acquia-sites.com
bmistg.prod.acquia-sites.com

Certificate

The complete raw certificate details for acquia-sites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPVTCCDj2gAwIBAgIQBSD63EAnXl8o4lUgyvPTSzANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0xNDA5MTEwMDAwMDBaFw0xNTExMjAxMjAwMDBa
MH8xCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNldHRzMQ8wDQYDVQQH
EwZCb3N0b24xEzARBgNVBAoTCkFjcXVpYSBJbmMxFzAVBgNVBAsTDkFjcXVpYSBI
b3N0aW5nMRkwFwYDVQQDExBhY3F1aWEtc2l0ZXMuY29tMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEAxxYi5oP81ffPiIBz1T+baf2TqKdbt3bo5/W2pK8I
tunplfdmMCQKT0ermCVTR94XUMlEETkrfz0T2pKpwHFHedFdbVh9AVTx0z7vf3wR
XtvGG14DhTpDhhktwUJcXeDcCGbwbZXu4kf1q/1IaLnHEyWX9goPvbLL5wGbSKTZ
RUlZUV3dK3ZfcEkLMX116kTLI5BisYijNrCFbeEmfW/ckyzOJ8nBDD4M3Y5OQLnB
6zpgMxxK1fafcMQ/qLVbOTxmxvCKL/OYgre54I7zLg8ROcTsBQ4iBErLxJJKRSyp
z+DHFd4Z4NJRtgBA3hDqVe/eJy3x5mM+OmEQWm+aScdwwgP3/jkhy41sjfINB7iS
FHflcuWdb1iLylUSnwuGLfY9e7+1Xa2iFTFUBUhhnGpn7Wl9wLaDOI+uyQ3Tx4pU
kbRPz0g8vRcdgg+NoBjDhM7e1n+VZOZNyrThKKAP9ydlKkX3g2Mp/OEtl6QYjHQx
DT8VRiT3MliLG7JyFksshAFLUT2qtBsH5bmY2ADIsBxoqKeD7AV9Xam8PWdSbNa9
DqGPBvih5Lyc1tayHI7MCPHtT4v8RrLPnfWYLYoi5nuBidb5kP5JWu6DRwVJnY00
rZ5/yBYwcBPBAOGaW8VBoff+yc0kkLWsUDCaE58fS5NfA+2HyfVjUmqU9Y+e1NqO
KYcCAwEAAaOCCtowggrWMB8GA1UdIwQYMBaAFFFo/5CvAgd1PMzZZWRiohK4WXI7
MB0GA1UdDgQWBBRHo2ljA9S2+/DWeHncgiNl78+erjCCCQoGA1UdEQSCCQEwggj9
ghBhY3F1aWEtc2l0ZXMuY29tggtsYXcucnd1LmVkdYIZd3d3LnNldmVudGhnZW5l
cmF0aW9uLmNvbYIHcnd1LmVkdYIOd3d3Lm5ld2RtYS5vcmeCCm5ld2RtYS5vcmeC
C3d3dy5tZmEub3JnghJ3d3cuYnVuZ2Fsb3ctYi5jb22CD3d3dy5lY2FjY2Vzcy5j
Y4ISd3d3Lmpvc2hncm9iYW4uY29tghRtcG93ZXJlZHRvZGVjaWRlLmNvbYITd3d3
LndtZ2JhY2tsaW5lLmNvbYIPd3d3Lm54c3RhZ2UuY29tghBuZWFzYy5iYWJzb24u
ZWR1ghhmYWN1bHR5cG9ydGFsLmJhYnNvbi5lZHWCFWlubm92YXRpb24uYmFic29u
LmVkdYIVZGV2Lm1hc3NjaGFsbGVuZ2Uub3JnghVzdGcubWFzc2NoYWxsZW5nZS5v
cmeCEW1hc3NjaGFsbGVuZ2Uub3JnghBzbWFydGJhbGFuY2UuY29tghNnaWZ0LmJ1
bmdhbG93LWIuY29tghNnaWZ0Lmpvc2hncm9iYW4uY29tghBnaWZ0LmVjYWNjZXNz
LmNjgg5qb2huZWR3YXJkLm5ldIIdZ2lmdHNob3Auc3Rsb3Vpc2NoaWxkcmVucy5v
cmeCG2dpdmluZy5zdGxvdWlzY2hpbGRyZW5zLm9yZ4IbbnVyc2VzLnN0bG91aXNj
aGlsZHJlbnMub3Jnghh3d3cuc3Rsb3Vpc2NoaWxkcmVucy5vcmeCEnd3dy5qb2hu
ZWR3YXJkLm5ldIINaW1wcml2YXRhLmNvbYIXd3d3LmFhdmlkdGhlcm1hbGxveS5j
b22CFHd3dy5zbWFydGJhbGFuY2UuY29tghF3d3cuZGVudGFsMzYwLm5ldIIcd3d3
LmRlbnRhbHByb2R1Y3RzaG9wcGVyLmNvbYIWd3d3LmRlbnRhbGxlYXJuaW5nLm5l
dIIdd3d3Lmh5Z2llbmVwcm9kdWN0c2hvcHBlci5jb22CFHd3dy50ZWFjaGZvcmFs
bC5pbmZvghB0ZWFjaGZvcmFsbC5pbmZvghF3d3cuaW1wcml2YXRhLmNvbYITd3d3
LmJyZWVkZXJzY3VwLmNvbYIPYnJlZWRlcnNjdXAuY29tghJuYXZpbmV0c3VwcG9y
dC5uZXSCD21vdGhlcmpvbmVzLmNvbYITd3d3Lm1vdGhlcmpvbmVzLmNvbYIQd3d3
LnN1Z2FyY3JtLmNvbYIRZ3JhZHVhdGUudWNzZi5lZHWCCmFjdXZ1ZS5jb22CDXd3
dy5hYXZpZC5jb22CDHd3dy51c2JnLmdvdoIQZHdmbS5uYXRyYXBzLmNvbYIVMjAx
Mi5kcnVwYWxjYW1wbGEuY29tghF3d3cuY2VzYXJzd2F5LmNvbYIUd3d3LmF1dGlz
bXNwZWFrcy5vcmeCEGFsbGlhbmNlLmJkby5jb22CDnd3dy5hY3V2dWUuY29tggtj
YXJseWxlLmNvbYIRd3d3Lm1pY3JvdGVjaC5uZXSCE3RoZWNhcmx5bGVncm91cC5j
b22CEnNjaG9sYXIuYmFic29uLmVkdYIPc2l0ZXM3LnNmc3UuZWR1ghJ3d3cuYmFz
c21hc3Rlci5jb22CHGNhcmx5bGVncm91cGNyZWF0ZXN2YWx1ZS5jb22CEG1lbW9y
aWFsY2FyZS5vcmeCFHd3dy5tZW1vcmlhbGNhcmUub3Jngg5hbGVydC5tdGEuaW5m
b4IPd3d3LmRvZ2Zpc2guY29tgg93d3cuYmVya2xlZS5lZHWCFHd3dy5yb2h3cmVz
dGxpbmcuY29tggtpdC51Y3NmLmVkdYIIdWNzZi5lZHWCEHd3dy5pbXByaXZhdGEu
bHWCEHd3dy5pbXByaXZhdGEuZnKCEHd3dy5pbXByaXZhdGEuYmWCEHd3dy5pbXBy
aXZhdGEubm+CB2VzcmkuY2GCC2JlcmtsZWUuZWR1ghNzaG93Y2FzZWNpbmVtYXMu
Y29tghhzdHVkZW50cG9ydGFsLmJhYnNvbi5lZHWCC2JyaWRnZXcuZWR1gg93d3cu
YnJpZGdldy5lZHWCEHd3dzIuYnJpZGdldy5lZHWCEGFydHMuYnJpZGdldy5lZHWC
Fm1pY3Jvc2l0ZXMuYnJpZGdldy5lZHWCFHN0cmF0ZWd5LmJyaWRnZXcuZWR1gh13
d3cubWVudGFsaGVhbHRoY29tbWlzc2lvbi5jYYILZG9nZmlzaC5jb22CFGNvbW1v
bnNlbnNlbWVkaWEub3Jngg9tZXRsaWZlZGFhZy5jb22CE2Rldi5iZWxsLmJhYnNv
bi5lZHWCFXN0YWdlLmJlbGwuYmFic29uLmVkdYIWc3RhZ2UyLmJlbGwuYmFic29u
LmVkdYIcZGV2LnN0dWRlbnRwb3J0YWwuYmFic29uLmVkdYIec3RhZ2Uuc3R1ZGVu
dHBvcnRhbC5iYWJzb24uZWR1gh9zdGFnZTIuc3R1ZGVudHBvcnRhbC5iYWJzb24u
ZWR1ghxkZXYuZmFjdWx0eXBvcnRhbC5iYWJzb24uZWR1gh5zdGFnZS5mYWN1bHR5
cG9ydGFsLmJhYnNvbi5lZHWCH3N0YWdlMi5mYWN1bHR5cG9ydGFsLmJhYnNvbi5l
ZHWCGWRldi5pbm5vdmF0aW9uLmJhYnNvbi5lZHWCG3N0YWdlLmlubm92YXRpb24u
YmFic29uLmVkdYIcc3RhZ2UyLmlubm92YXRpb24uYmFic29uLmVkdYIWZGV2Lndl
YmZvcm0uYmFic29uLmVkdYIYc3RhZ2Uud2ViZm9ybS5iYWJzb24uZWR1ghlzdGFn
ZTIud2ViZm9ybS5iYWJzb24uZWR1gg9iZWxsLmJhYnNvbi5lZHWCEndlYmZvcm0u
YmFic29uLmVkdYIQZ2VhdXRvbWF0aW9uLmNvbYIXd3d3LnNob3djYXNlY2luZW1h
cy5jb22CF2Rldi5zaG93Y2FzZWNpbmVtYXMuY29tghlzdGFnZS5zaG93Y2FzZWNp
bmVtYXMuY29tghFtLmJyZWVkZXJzY3VwLmNvbYIPc2lnbmFnZS5hb2MuZ292MA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdQYD
VR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NoYTItaGEt
c2VydmVyLWc0LmNybDA0oDKgMIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3No
YTItaGEtc2VydmVyLWc0LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgG
CCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAEC
AjCBgwYIKwYBBQUHAQEEdzB1MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp
Y2VydC5jb20wTQYIKwYBBQUHMAKGQWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv
bS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJhbmNlU2VydmVyQ0EuY3J0MAwGA1UdEwEB
/wQCMAAwDQYJKoZIhvcNAQELBQADggEBAK+zPehEqEZ5giii4GMg221V/DVx/IiN
PVjGaZ58iwHj+7zak1V8AlH1a+ZF+XBPvTwUcFlC1hM7MjXCfQPMYy6EMOD+gJ/H
cRXPkHC8b7OTytaXh8cyef9vVzAOqKjd4NnzrpQWuwo7GZKKJ8QeCDi23XDqoqZb
jFe7JfARX891S3xauUOEtvJLeZWqmwtB00MdBFgMqm+YcpdUutI2WUtg0WxSC++7
Jp0Qk1HQlmLMxcmVoy9CvkATJqBs6nZTXSD/0rFeFYh47AeQ7jI6B5grO84C6bH/
CEt38gW4wli2xNnMG8hOEia+8pqLpdD5L7Xo2chiio9jIk+32zyg7VA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6817381530848994297759410967270380363
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Boston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquia-sites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 812201936516152157802110054400232754597665912147914519903794254913133951490708203685628762268632892307429937929025023689622661426535892816593759336128812021995345126751491430098253967739004703724625994182239118340751255998525746362308961868430138699282309826488098669477736282199914478066235971905377652033034015513550188668380296123329677419198926359544340178390857292216056373603868136989072438458192906962565790539167665918074321812834575072526419047221004582299572402039503128965136163374080636066309757568937086344134407206249959266485894898996803531744914796029029560483651312101208642009718317836454267115915752326163446443681217334886128331617681918215692519912182030828669047376147718382147796846040335570295495650033271252463554827753785154108517460360936049192380964803599141461933868055069821608149997183699796304102117620305080811669803623706733158001007833224457839386585225082388892959309233705669234286735239498818117227457727912844501606942065640785976249949970580299266111499334745710814386679454706693710518496303878995501452453655984969194014200274727422799510716035085638466734819791688324900839531089835534329301315384928150894098970255228771484907148262962547010030843338091062034816220974913370440540554668423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47a3696303d4b6fbf0d67879dc822365efcf9eae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2305 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.rwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seventhgeneration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newdma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newdma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mfa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bungalow-b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecaccess.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joshgroban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpoweredtodecide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmgbackline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nxstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neasc.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facultyportal.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.masschallenge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.masschallenge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masschallenge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartbalance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gift.bungalow-b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gift.joshgroban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gift.ecaccess.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnedward.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftshop.stlouischildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.stlouischildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nurses.stlouischildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stlouischildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnedward.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imprivata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aavidthermalloy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartbalance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dental360.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dentalproductshopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dentallearning.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hygieneproductshopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teachforall.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teachforall.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imprivata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breederscup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breederscup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navinetsupport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motherjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motherjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sugarcrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graduate.ucsf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acuvue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aavid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usbg.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwfm.natraps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2012.drupalcampla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cesarsway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autismspeaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliance.bdo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acuvue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.microtech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecarlylegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholar.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites7.sfsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bassmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlylegroupcreatesvalue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memorialcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.memorialcare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alert.mta.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dogfish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berklee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rohwrestling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.ucsf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucsf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imprivata.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imprivata.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imprivata.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imprivata.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esri.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berklee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showcasecinemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentportal.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgew.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgew.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.bridgew.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arts.bridgew.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsites.bridgew.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategy.bridgew.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mentalhealthcommission.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogfish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commonsensemedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metlifedaag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bell.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.bell.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2.bell.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.studentportal.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.studentportal.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2.studentportal.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.facultyportal.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.facultyportal.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2.facultyportal.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.innovation.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.innovation.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2.innovation.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.webform.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.webform.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2.webform.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bell.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webform.babson.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geautomation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.showcasecinemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.showcasecinemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.showcasecinemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.breederscup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signage.aoc.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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