epodweb.rfi.it

- AlmavivA – The Italian Innovation Company S.p.A. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:57:32:19:24:05:fa:9c:8c:dd:09:93:45:7d:c8:ca was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AlmavivA – The Italian Innovation Company S.p.A.

Organization: AlmavivA – The Italian Innovation Company S.p.A.
Organization unit: WEB01
State / Province: Lazio
Locality: Roma
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:57:32:19:24:05:fa:9c:8c:dd:09:93:45:7d:c8:ca
Serial Number (int): 13745025896874622634979429177861458122
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 58:4c:e6:fe:80:36:a3:87:5a:a1:89:50:50:33:96:1a:58:76:9f:b3
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 5e:32:e8:94:d1:80:d0:75:9c:89:5f:fd:03:83:fb:96:c2:f5:00:e3
Fingerprint (sha256): 05:0b:29:86:50:b7:1c:50:a6:5f:25:9b:e9:ed:bd:eb:34:2c:f9:7f:0e:80:01:b5:9e:ce:19:d2:46:92:38:f4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate epodweb.rfi.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for epodweb.rfi.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

epodweb.rfi.it

Other certificates including the domain name rfi.it

(limited to 100 certificates)
asterqap.rfi.it
asterppc.rfi.it
donet.rfi.it
rinf.rfi.it
stazionevirtuale.rfi.it
PICWEB.RFI.IT
PRM.RFI.IT
eap.fs.eu
portalerfi.rfi.it
gisnw.rfi.it
stazionevirtuale.rfi.it
picweb.rfi.it
NORMATIVAESERCIZIO.RFI.IT
picbi.rfi.it
epodweb.rfi.it
asterppc.rfi.it
salabluonline.rfi.it
giamp.rfi.it
portalerfi.rfi.it
itinere.rfi.it
direzionesanita.rfi.it
donet.rfi.it
stazionevirtuale.rfi.it
portalerfi.rfi.it
pir.rfi.it
app.optima-cert.rfi.it
picweb.rfi.it
PRM.RFI.IT
mobile.reteblu.rfi.it
mobile.reteblu.rfi.it
AstroIF.rfi.it
PICWEB.RFI.IT
salabluonline.rfi.it
m3m40if.rfi.it
ps2.rfi.it
inreteese-wd.rfi.it
NORMATIVAESERCIZIO.RFI.IT
portalerfi.rfi.it
giamp.rfi.it
PRM.RFI.IT
donet.rfi.it
www.rfi.it
muif.rfi.it
PRM.RFI.IT
NORMATIVAESERCIZIO.RFI.IT
gisnw.rfi.it
m3m40if.rfi.it
muif.rfi.it
reteblu.rfi.it
muif.rfi.it
portalerfiapp.rfi.it
messagenius.rfi.it
dwrfipro.rfi.it
salabluonline.rfi.it
AstroIF.rfi.it
aster.rfi.it
reteblu.rfi.it
portalerfi.rfi.it
NORMATIVAESERCIZIO.RFI.IT
logistica.rfi.it
stazionevirtuale.rfi.it
giamp.rfi.it
xre-wd.rfi.it
aster.rfi.it
BusinessIntelligence.RFI.it
resetpassword.rfi.it
picbi.rfi.it
asterppc.rfi.it
epod.rfi.it
adfs.pic.rfi.it
normativaesercizio.rfi.it
rfi.it
iman.form.rfi.it
picweb.rfi.it
retebluws.rfi.it
picweb.rfi.it
portalerfiapp.rfi.it
portalerfi.rfi.it
aster.rfi.it
adfs.pic.rfi.it
normativaesercizio.rfi.it
stazionevirtuale.rfi.it
m3m40if.rfi.it
ewp-wd.rfi.it
mobile.reteblu.rfi.it
sbc2accvip-a.rfi.it
ps2.rfi.it
M3M40.RFI.IT
pir.rfi.it
reteblu.rfi.it
picbi.rfi.it
retebluws.rfi.it
dls-b.rfi.it
mobile.reteblu.rfi.it
condivisione.rfi.it
M3M40.RFI.IT
NORMATIVAESERCIZIO.RFI.IT
logistica.rfi.it
ASTERMOBILE.RFI.IT
iman.rfi.it

Certificate

The complete raw certificate details for epodweb.rfi.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIQClcyGSQF+pyM3QmTRX3IyjANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkxMjMwMDAwMDAwWhcN
MjEwMTEwMTIwMDAwWjCBkjELMAkGA1UEBhMCSVQxDjAMBgNVBAgTBUxhemlvMQ0w
CwYDVQQHEwRSb21hMTswOQYDVQQKDDJBbG1hdml2QSDigJMgVGhlIEl0YWxpYW4g
SW5ub3ZhdGlvbiBDb21wYW55IFMucC5BLjEOMAwGA1UECxMFV0VCMDExFzAVBgNV
BAMTDmVwb2R3ZWIucmZpLml0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxgWS9Va0eK2dxdaiZg09eD9K/G9nw14Zy8Fu+QqYLD5Nrq61cGdhef37TnsP
AvVqJiZn2Oig9q5wcDx6BCF/4uB6BPuiLrSJympgJOjRLUg0k1vPwe+Dpb1bs+nv
IT+V66NgVGtYfcFrjM4MVLns21AxqysIUSiYC5f/XDlfdgqfJ436Oy5Lmsouhcjp
pMPlic7ZiYAw0ynIH+6YymfrHAKaSY91fgWO+kA8gTD8kjaC89jDWylKLb+BMVL5
LVIyrFikg/STBERTFyZA1GjNSEy5fKYJXL7qU2lPYYx+J2eYmyZ9ikLSblm1B2HY
RWt+mUUhUwGhjmlwNoEkKZYnuwIDAQABo4IB5zCCAeMwHwYDVR0jBBgwFoAUD4Bh
HIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFFhM5v6ANqOHWqGJUFAzlhpYdp+z
MBkGA1UdEQQSMBCCDmVwb2R3ZWIucmZpLml0MA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0
cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0
dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARF
MEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2lj
ZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcw
AYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8v
Y2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0Eu
Y3J0MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL
BQADggEBANK9njB/tZsO6lS7Myy7QGxhxqwahoq5IXDQoKGTmFtosSCkp1ZWYgwi
cdfwet50mHYn+XaekrGgUVJDrTKBA1rBcMibNowQ3thZSYxru7VFqJDnrL6j/BrA
rbEniYF3xbOSjMD2vDMCVE1lHt4NTlfA/BTIgpE1zVhJSU8FqvqW+sjaFTPXao45
NiZfvDJ4xgtQBYeDTZiCjEPd2Jv0h+rnbu1LuzMNI0eM+a33YqJvsla5RAkK50da
+A6P3EszjrYyUuMn2pYwbTRzURi4J74WycgeytGVy8lB1MlaYV7b8Xb68IpiUGqM
jMThNTMZUtwgYEHILkib+gWdhYhhbxk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgWS9Va0eK2dxdaiZg09
eD9K/G9nw14Zy8Fu+QqYLD5Nrq61cGdhef37TnsPAvVqJiZn2Oig9q5wcDx6BCF/
4uB6BPuiLrSJympgJOjRLUg0k1vPwe+Dpb1bs+nvIT+V66NgVGtYfcFrjM4MVLns
21AxqysIUSiYC5f/XDlfdgqfJ436Oy5LmsouhcjppMPlic7ZiYAw0ynIH+6Yymfr
HAKaSY91fgWO+kA8gTD8kjaC89jDWylKLb+BMVL5LVIyrFikg/STBERTFyZA1GjN
SEy5fKYJXL7qU2lPYYx+J2eYmyZ9ikLSblm1B2HYRWt+mUUhUwGhjmlwNoEkKZYn
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13745025896874622634979429177861458122
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lazio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AlmavivA – The Italian Innovation Company S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WEB01'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'epodweb.rfi.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24997933052772699426893538749087937229437684491858668180422080787856715485608718594169883298196151295092604779443749679481305955544087960516271760879143819373814253230467259497351304092140339442567022375161909293539630444879396127389591559864096524260266273934938455278992929439468784905321889413651422119633491096653301726802453832230983961337176885910369578676481997574115391516937803073151771155680571040694820545843200148063639251922613495207537119292011751129194960199095692995064675262137408953670859132420967318825854480093844128254732081219116705083435236069666957723172418681419431021329520709005519638374331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							584ce6fe8036a3875aa189505033961a58769fb3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epodweb.rfi.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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