mahoosuc.thayer.dartmouth.edu

- Dartmouth College -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 05:5f:98:e3:9c:61:b9:c2:8a:28:e6:f3:76:e1:1a:34 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Dartmouth College

Organization: Dartmouth College
State / Province: New Hampshire
Locality: Hanover
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:5f:98:e3:9c:61:b9:c2:8a:28:e6:f3:76:e1:1a:34
Serial Number (int): 7142509139935838344194098014028110388
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 12:eb:a8:23:bf:28:ea:4f:63:6b:67:a4:55:54:6a:cc:a6:e5:ad:87
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): b9:3b:53:e8:43:bb:c4:6f:81:67:cb:5f:78:18:c1:d1:34:67:13:db
Fingerprint (sha256): 05:63:38:2e:48:6c:55:46:05:95:b2:0e:38:3f:b0:80:2a:de:5f:b3:91:a4:55:ac:f7:9e:26:f2:e0:d2:42:3f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate mahoosuc.thayer.dartmouth.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mahoosuc.thayer.dartmouth.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mahoosuc.thayer.dartmouth.edu

Other certificates including the domain name dartmouth.edu

(limited to 100 certificates)
test-web-lws.edu.help
fm13-db01-prd.dartmouth.edu
vsfd.hoodmuseum.dartmouth.edu
acquia-sites.com
admissions.emeritus.org
cluster3.technolutions.net
billtest.host.dartmouth.edu
cluster3.technolutions.net
cysfibtest.dartmouth.edu
nartc.fcm.arizona.edu
giftplanning.dartmouth.edu
connect.tdi.dartmouth.edu
libanswers.dartmouth.edu
software.dartmouth.edu
tuck-jms.tucknt.dartmouth.edu
sustainability.dartmouth.edu
tto.dartmouth.edu
ppsg.dartmouth.edu
www.kyu.vsfd.hoodmuseum.dartmouth.edu
cluster3.technolutions.net
www.naaer.hoodmuseum.dartmouth.edu
longtermcare.dartmouth.edu
sni.cloudflaressl.com
apply.tuck.dartmouth.edu
jupyter.dartmouth.edu
digitalcommons.dartmouth.edu
cluster2.technolutions.net
spaceplanner.thayer.dartmouth.edu
design.dartmouth.edu
www.kyu.vsfd.hoodmuseum.dartmouth.edu
emmy.dartmouth.edu
qbri.dartmouth.edu
integration-rabbit-prod.dartmouth.edu
dfbconnect.dartmouth.edu
5739121058250752-fe3.pantheonsite.io
digitalarts.cs.dartmouth.edu
mailhub3.dartmouth.edu
www.blogs.earthjustice.org
daedalus.thayer.dartmouth.edu
webdev.colorado.edu
virtual2.unlv.edu
magnuson.dartmouth.edu
organtransportmap.host.dartmouth.edu
rmillan.host.dartmouth.edu
upenn-it.asc.upenn.edu
doob.dartmouth.edu
digitalcommons.dartmouth.edu
*.dartmouth.edu
apply.dartmouth.edu
agent-dev.thayer.dartmouth.edu
www.tto.dartmouth.edu
tuck.dartmouth.edu
jhub.dartmouth.edu
portfolio.dartmouth.edu
apply.bridge.tuck.dartmouth.edu
cluster3.technolutions.net
sustainability.dartmouth.edu
sni.cloudflaressl.com
vsfd.hoodmuseum.dartmouth.edu
www.naaer.hoodmuseum.dartmouth.edu
secure-usea1-1.tessituranetwork.com
fm-disc02-prd.dartmouth.edu
ns2.dartmouth.edu
grigoryanlab.org
allagash.dartmouth.edu
informatics.dartmouth.edu
5764577597849600-fe1.pantheonsite.io
apply.bridge.tuck.dartmouth.edu
www.vsfd.hoodmuseum.dartmouth.edu
www.adotson.vsfd.hoodmuseum.dartmouth.edu
federation.tucknt.dartmouth.edu
lcs.thayer.dartmouth.edu
snaps-app01-dev.dartmouth.edu
5769457217568768-fe2.pantheonsite.io
doob.dartmouth.edu
securessl-est2.tessituranetworkhost.com
esc.dartmouth.edu
katahdin.cs.dartmouth.edu
mahoosuc.thayer.dartmouth.edu
clip.dartmouth.edu
ns1.dartmouth.edu
nurse.dartmouth.edu
5764577597849600-fe1.pantheonsite.io
doob.dartmouth.edu
5764577597849600-fe1.pantheonsite.io
dartmouth.livesitestudio.com
speechsurrogates.host.dartmouth.edu
cluster3.technolutions.net
glnecec.dartmouth.edu
www.aklein.vsfd.hoodmuseum.dartmouth.edu
5764577597849600-fe1.pantheonsite.io
*.tuck.dartmouth.edu
securessl-est2.tessituranetworkhost.com
inspire.host.dartmouth.edu
sni.cloudflaressl.com
securessl-est2.tessituranetworkhost.com
dali.dartmouth.edu
brussels.dartmouth.edu
tto.dartmouth.edu
giving.dartmouth.edu

Certificate

The complete raw certificate details for mahoosuc.thayer.dartmouth.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGgjCCBWqgAwIBAgIQBV+Y45xhucKKKObzduEaNDANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0xOTA1MjMwMDAwMDBaFw0yMTA1MjcxMjAwMDBa
MHsxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1OZXcgSGFtcHNoaXJlMRAwDgYDVQQH
EwdIYW5vdmVyMRowGAYDVQQKExFEYXJ0bW91dGggQ29sbGVnZTEmMCQGA1UEAxMd
bWFob29zdWMudGhheWVyLmRhcnRtb3V0aC5lZHUwggIiMA0GCSqGSIb3DQEBAQUA
A4ICDwAwggIKAoICAQDa6e/9ShlZD7aFAmolvvi55qO125JDnyyHoFqO9w+axkyT
il8aEJNUpVL6X61u0Qx1/L6G4cODMLRl4IECxfzDvVtx9878fj1GjZDGpg+2CqY4
1ZcnRI3RYiy4bnvcre5T8PRSt64EvidFyRKE5Ma00iNECDes9BqiYtTNEQQ26jYd
JxGZXsKq1fWViilTp2ynm7x/WSQJgXnmlsyyj0Rca5EXSccTd6T7aAcLmqMSyALl
VGCBVl5JCd9HdC/1Dmz25LOi0wNjRtI6AkTMUTBuzChhRLFWF+Lnq0kss8J3fCRr
K2MzvCZ0tt1peuWBTrBAJ+oFQk2xFVDaZ7Fh+2c5/7nejvRvLQgzYh3t2de0VOBP
CBd7VUJVGstsQUXb62d8b/HkzqEE4uUZTl07n34Sj1wjs6x9EP6V/mnvS3KnAE9v
UuHf3/2ol1nUNfwX5HQNM+bq6GfUHwF1Avlj5hORxaxaM9J2RhwlO4C6ezD+Wt+S
0EwAGe2K+IAVb1CmTSVVK/9izOz3DKi0kVNd1AB3PsaS9pqwM4nyLdorldFB2Pg0
t0kG8yF6y7e5kga0x2zrkyD6toGgbZ6pkOvNg+ye4uJFiQ9qbC7svW4fH6zb9NsS
4WtzFI7ubEys9fyVjOB2Mfbx8iHiazhBvMNVKeDl0bzJkGE2aETqolN4MIdYNwID
AQABo4ICCzCCAgcwHwYDVR0jBBgwFoAUUWj/kK8CB3U8zNllZGKiErhZcjswHQYD
VR0OBBYEFBLrqCO/KOpPY2tnpFVUasym5a2HMCgGA1UdEQQhMB+CHW1haG9vc3Vj
LnRoYXllci5kYXJ0bW91dGguZWR1MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2Ny
bDMuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDA0oDKgMIYuaHR0
cDovL2NybDQuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDBMBgNV
HSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k
aWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjCBgwYIKwYBBQUHAQEEdzB1MCQGCCsG
AQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTQYIKwYBBQUHMAKGQWh0
dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJh
bmNlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQC
BQAwDQYJKoZIhvcNAQELBQADggEBAFlHFwQml9MEDaf8N6HyeA6CDMmzft2l3fWI
SiDhkZp8k7sMWc0tx2vXzviUQoTxvoNu8C8RL3huCUQ8La1+VCY5HltxCQDyvcSH
EF5/TwHJErzRiW3rndLU75ADj5jl+Yr5PXQYaJkfFw7HWHum3S3jUSgEMAfLH/i7
ksoyyvb694BrtwkRRKA78xkOlDGoSEU5MThW9hD9NYbkZ14TXHdJZv+evTEPE8Q5
ej2STafRn5WhkSAek3nJhuCTOE8bQkKdqI6uNlck4GSZKogocFZ2fMt+bRmOc1CS
ikOtmkNFRccgBlHesv1Qc5Nb/nj0RAuu5s5/6N+sV7kwliliw3M=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2unv/UoZWQ+2hQJqJb74
ueajtduSQ58sh6BajvcPmsZMk4pfGhCTVKVS+l+tbtEMdfy+huHDgzC0ZeCBAsX8
w71bcffO/H49Ro2QxqYPtgqmONWXJ0SN0WIsuG573K3uU/D0UreuBL4nRckShOTG
tNIjRAg3rPQaomLUzREENuo2HScRmV7CqtX1lYopU6dsp5u8f1kkCYF55pbMso9E
XGuRF0nHE3ek+2gHC5qjEsgC5VRggVZeSQnfR3Qv9Q5s9uSzotMDY0bSOgJEzFEw
bswoYUSxVhfi56tJLLPCd3wkaytjM7wmdLbdaXrlgU6wQCfqBUJNsRVQ2mexYftn
Of+53o70by0IM2Id7dnXtFTgTwgXe1VCVRrLbEFF2+tnfG/x5M6hBOLlGU5dO59+
Eo9cI7OsfRD+lf5p70typwBPb1Lh39/9qJdZ1DX8F+R0DTPm6uhn1B8BdQL5Y+YT
kcWsWjPSdkYcJTuAunsw/lrfktBMABntiviAFW9Qpk0lVSv/Yszs9wyotJFTXdQA
dz7GkvaasDOJ8i3aK5XRQdj4NLdJBvMhesu3uZIGtMds65Mg+raBoG2eqZDrzYPs
nuLiRYkPamwu7L1uHx+s2/TbEuFrcxSO7mxMrPX8lYzgdjH28fIh4ms4QbzDVSng
5dG8yZBhNmhE6qJTeDCHWDcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7142509139935838344194098014028110388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hanover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dartmouth College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mahoosuc.thayer.dartmouth.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 893090459818346724985794437085197389610320124633469838348617289402384386775118908239207503741135450571572215839836073096261481479188991182521419055777101869311320883947016774387901591107778198417785773812880526868554105151169122888545358018847579866730642460181735167796734862020313544966068135157074978335228351324507777804618131643771540430142525548936386778969300362147233060975317726731213011044171928828134399174658765785315842597543591613179001178907753116300830441145334116456749316758051390715332359228595950721872671729355844020686514158844946777265485796870677817079458004319221169274183537431279708424773929580072477420895985342287342097666921824008499856635311885189126553387599167167396904013322495607389877380103841812358985331938034162159258374691466041599795281217131455916438675081600189930337563605555901801830889197145426168080683332813204620885131976948118599874041364174441031157164559637923390140945845775950985266956131919547433363204571521177495732369568702591727775779370340890309851572617268193680904382993259187473499858351563521429940790194340993395037316713806812605024443242995047151370561120917205529133515386116982697711081398260828774626798514061889550080506648287508396223726944189939610858629322807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12eba823bf28ea4f636b67a455546acca6e5ad87
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahoosuc.thayer.dartmouth.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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