*.iij-engineering.co.jp

- IIJ Engineering Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0f:66:0c:ad:cf:92:91:b9:32:72:48:7b:f1:d3:56:11 was issued on by DigiCert Inc.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IIJ Engineering Inc.

Organization: IIJ Engineering Inc.
Organization unit: Information Systems
State / Province: Tokyo
Locality: Chiyoda
Country: JP

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:66:0c:ad:cf:92:91:b9:32:72:48:7b:f1:d3:56:11
Serial Number (int): 20468291375972237661547589946681021969
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 10:ff:88:16:11:1f:63:d3:44:ed:31:1b:5f:b4:3c:88:d3:dc:86:74
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 1a:f9:46:77:58:a7:ed:59:dd:b6:f4:2f:32:e1:dd:28:40:a0:1e:92
Fingerprint (sha256): 05:13:b2:53:dc:d8:28:86:5a:b6:0e:6c:53:37:bb:e8:79:cc:a4:ea:b2:7f:df:c8:7f:c4:c9:e8:15:f6:dd:72

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g3.crl

Check the revocation status for certificate *.iij-engineering.co.jp

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.iij-engineering.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.iij-engineering.co.jp
iij-engineering.co.jp
api-w01.pf.iij-engineering.co.jp
wsq-w01.pf.iij-engineering.co.jp
doc01.pf.iij-engineering.co.jp
content01.pf.iij-engineering.co.jp
recvgw01.pf.iij-engineering.co.jp
ieds1.ieds.iij-engineering.co.jp
ieds2.ieds.iij-engineering.co.jp
wsq-w02.pf.iij-engineering.co.jp
users.pf.iij-engineering.co.jp
wsterm-w01.pf.iij-engineering.co.jp

Other certificates including the domain name iij-engineering.co.jp

(limited to 100 certificates)
desk.nrroofs.com
*.iij-engineering.co.jp
metropax.doit.dev.br
help.revian.com
help.simplesclique.com.br
support.wisdomtree.com.au
support.valcon.us
atendimento.agenteverde.com.br
help.simplesclique.com.br
*.iij-engineering.co.jp
*.iij-engineering.co.jp
*.iij-engineering.co.jp
helpdesk.apextechres.net
atendimento.agenteverde.com.br
help.metaprisebanking.com
help.simplesclique.com.br
help.simplesclique.com.br
*.iij-engineering.co.jp
help.simplesclique.com.br
gcalshelp.gdc.ga.gov
support.dotmac.ng
support.valcon.us
help.simplesclique.com.br
*.iij-engineering.co.jp
support.itresolve.com.au
www.iij-engineering.co.jp
*.iij-engineering.co.jp
help.metaprisebanking.com
help.revian.com
help.simplesclique.com.br
support.dotmac.ng
*.iij-engineering.co.jp
jumpcloud.sinfopac.com
survey.iij-engineering.co.jp
support.kapspire.com
*.iij-engineering.co.jp
support.tabschool.in
support.dailymenus.com
support.wisdomtree.com.au
help.simplesclique.com.br
help.simplesclique.com.br
support.itresolve.com.au
*.iij-engineering.co.jp
*.iij-engineering.co.jp
atendimento.agenteverde.com.br
surveys.c3-solutions.ca
support.tabschool.in
help.simplesclique.com.br
survey.ivanrakovar.ru
help.simplesclique.com.br
support.tabschool.in
surveys.c3-solutions.ca
metropax.doit.dev.br
help.simplesclique.com.br
help.simplesclique.com.br
desk.digitalbusinessintel.com
support.valcon.us
soporte.bo.cl
*.iij-engineering.co.jp
jumpcloud.sinfopac.com
support.dailymenus.com
support.asylum-serve.com
*.iij-engineering.co.jp
support.wisdomtree.com.au
support.iij-engineering.co.jp
atendimento.agenteverde.com.br
*.iij-engineering.co.jp
gcalshelp.gdc.ga.gov
*.iij-engineering.co.jp
atendimento.agenteverde.com.br
soporte.sanelmann.es
*.iij-engineering.co.jp
*.iij-engineering.co.jp
support.wisdomtree.com.au
support.dotmac.ng
help.revian.com
atendimento.agenteverde.com.br
support.asylum-serve.com
help.simplesclique.com.br
*.iij-engineering.co.jp
tamil.awake.rkmm.org
help.simplesclique.com.br
*.iij-engineering.co.jp
*.iij-engineering.co.jp
rebates.tviewc.com
desk.nrroofs.com
smarthome.ebn.host
support.djip.ca
desk.nrroofs.com
support.cangopal.com
help.simplesclique.com.br
help.simplesclique.com.br
www.iij-engineering.co.jp
support.djip.ca
*.iij-engineering.co.jp
help.simplesclique.com.br
gcalshelp.gdc.ga.gov
helpdesk.apextechres.net
helpdesk.rebelroam.com
*.iij-engineering.co.jp

Certificate

The complete raw certificate details for *.iij-engineering.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv876FwmGGVELfxkhU5zf
JICGwu8YtAZGAs9EEGOhEORFeW/rBXFbwbjNY/8XqC0AEPGNNIHlWVyhCl/KWvD3
qxkNIXpeOteA9gMWCf6TXEEjEedKlWJ2uJQiotry/rhnESSAYJhEgFl/0t3ywPFy
m0horAwgocVgxA2hkN3MyktWPbckvLCmd71/skwvS/pSYf78CcnJE7XRsi7u+Auj
sKXii860vNhvux+9or50y6iA1VuEIBp2bYl6YtoHh2BCdKNmlynhX43vPMMReafN
Z8HPzCYM4erNxklqQ2M0vGvI1tHnbpyVKi0UChcKMa5cpellqOAuaMT+XP/hKbui
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20468291375972237661547589946681021969
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chiyoda'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IIJ Engineering Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Systems'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.iij-engineering.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24213580368802223391899250729147635277364790040729392600503461890970683729298004779439986916772768050336198950741371194221317558307527311413333159618158642490420229425263926505384003540339361862528141703798297225706240888666930412988388653536011628568853463537342769060637260383453376919960166959940087678696752456565424882670479388127675985560236100558859742705320905113555747405664910013443023596560402603470672753685931799840936436775193451139771986908861278218808923650909225474859286550097843242562736936989119403696568126659335622708531997056283890520664656604144169229850826419273712675919044809817720868283069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10ff8816111f63d344ed311b5fb43c88d3dc8674
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (394 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-w01.pf.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsq-w01.pf.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doc01.pf.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content01.pf.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recvgw01.pf.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieds1.ieds.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieds2.ieds.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsq-w02.pf.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'users.pf.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsterm-w01.pf.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00941a915e7a6011f13caf441fc7cf041296218eb37743045766a4b4122737841d50753f8dc6cd8f50c9d1afb474a825a739b9f4c0faa75c45288955d09283e74530a5bfa9625044f482e766dbeea95222e6c7511439de041788207ed83572c829099575c41a03055236f20eba6d16ef15d877cf34e430d2d31d4c99c1665d5e7ce825b2025cb460e43346cc71a39f5fd3cf1f586e5fd508b2dd69e8d1b96d14756917d489156ea55f2f26aca5b6bb46c31bb1f5391060779c4c96b369dab2cb595a235d820ecff498acc5659f8938cb50280b1bb86bbe7d0855cd64d03f2adb57de8b01c313eb648f57996d35df78ee2d7bc141e782314aba50b5de673e144b01