production-kraken-valencia-preview.use1.huffpo.net

- AOL, Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0a:f5:74:23:f1:21:b0:b0:db:82:75:a3:20:5d:76:eb was issued on by DigiCert Inc.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AOL, Inc

Organization: AOL, Inc
State / Province: Virginia
Locality: Dulles
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:f5:74:23:f1:21:b0:b0:db:82:75:a3:20:5d:76:eb
Serial Number (int): 14566748295316519408985756399287760619
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 64:7f:1f:9b:39:22:99:99:ae:6f:e0:53:4d:23:1f:dc:e4:a5:e7:cf
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): b6:d6:4a:0f:d6:e1:ce:55:6e:7b:df:b8:85:8b:2a:19:45:65:28:6a
Fingerprint (sha256): 06:bf:71:d3:de:f6:2a:c9:cf:df:b6:d0:67:37:63:67:5a:ef:90:bb:08:2f:74:aa:c2:d3:66:7c:51:e8:e3:04

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl

Check the revocation status for certificate production-kraken-valencia-preview.use1.huffpo.net

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for production-kraken-valencia-preview.use1.huffpo.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

production-kraken-valencia-preview.use1.huffpo.net
staging-kraken-valencia-preview.use1.huffpo.net
production-kraken-preview.use1.huffpo.net
staging-kraken-preview.use1.huffpo.net
preview.www.huffingtonpost.com
preview.www.huffingtonpost.co.uk
staging.preview.www.huffingtonpost.com
staging.preview.www.huffingtonpost.co.uk
preview.m.huffpost.com
uk-preview.m.huffpost.com
origin-staging.m.huffpost.com
origin-production.m.huffpost.com
staging.preview.m.huffpost.com
staging.uk-preview.m.huffpost.com

Other certificates including the domain name huffpo.net

(limited to 100 certificates)
qa-athena-mongo-image.huffpo.net
production-athenizer.use1.huffpo.net
staging-origin-life.huffpo.net
qa.mapi.huffpost.com
*.app-west.buzzfeed.io
production-athena-mongo-cms.huffpo.net
buildbot.office.aol.com
staging-content-transform.use1.huffpo.net
qa.mapi.huffpost.com
src5.yahoo.com
staging-origin-life.huffpo.net
production-modulous-tag-manager.use1.huffpo.net
beta-origin-cambria-alb.huffpo.net
production-kraken-valencia-preview.use1.huffpo.net
qa.preview.www.huffpost.com
*.utils.huffpo.net
qa.preview.www.huffpost.com
www.huffpost.com
origin-kraken.huffpo.net
origin-hanami.huffpo.net
beta-origin-cambria-alb.huffpo.net
qa.preview.www.huffpost.com
www.huffingtonpost.com
www.huffingtonpost.com
staging-modulous-api-lb.use1.huffpo.net
qa-origin-life.huffpo.net
staging-athena-mongo-cms.huffpo.net
beta.www.huffpost.com
src5.yahoo.com
src5.yahoo.com
qa-origin-life.huffpo.net
*.prod.buzzfeed.io
qa-origin-life.huffpo.net
origin-kraken.huffpo.net
src5.yahoo.com
staging-modulous-api-varnish.use1.huffpo.net
qa-origin-life.huffpo.net
staging-mtkiller-mongo.use1.huffpo.net
origin-identifiers.huffpost.net
www.huffingtonpost.com
staging-origin-hanami-alb.huffpo.net
origin-hanami-alb.huffpo.net
qa.preview.www.huffpost.com
production-athenizer.use1.huffpo.net
*.stage.buzzfeed.io
staging.modulous.aol.com
*.prod.buzzfeed.io
*.stage.buzzfeed.io
staging-athena-mongo-cms.huffpost.net
staging.preview.www.huffpost.com
*.use1.huffpo.net
preview.www.huffpost.com
preview.beta.www.huffpost.com
staging-athena-mongo-cms.huffpo.net
*.app-west.buzzfeed.io
*.edge.huffpo.net
qa.mapi.huffpost.com
beta.www.huffpost.com
preview.www.huffpost.com
origin-kraken.huffpo.net
qa-origin-life.huffpo.net
qa.www.huffpost.com
*.edge.huffpo.net
*.app-west.buzzfeed.io
src5.yahoo.com
www.huffpost.com
staging.preview.www.huffpost.com
origin-identifiers.huffpost.net
production-trait-manager.use1.huffpo.net
production-athenizer.use1.huffpo.net
production-kraken-valencia-preview.use1.huffpo.net
*.amp.edge.huffpo.net
*.prod.buzzfeed.io
qa-origin-life.huffpo.net
*.games.yahoo.com
src5.yahoo.com
www.huffpost.com
production-kraken-valencia-preview.use1.huffpo.net
*.cambria-production.huffpo.net
production-athenizer.use1.huffpo.net
www.huffingtonpost.com
qa.preview.www.huffpost.com
*.utils.huffpo.net
origin-hanami.huffpo.net
staging.preview.www.huffpost.com
modulous.aol.com
*.stage.buzzfeed.io
staging-audiogram.use1.huffpo.net
src5.yahoo.com
www.huffingtonpost.com
qa-athena-mongo-cms.huffpo.net
staging-content-transform.use1.huffpo.net
*.app-west.buzzfeed.io
*.use1.huffpo.net
src5.yahoo.com
origin-identifiers.huffpost.net
*.use1.huffpo.net
src5.yahoo.com
beta-preview-origin-cambria-alb.huffpo.net
*.app-west.buzzfeed.io

Certificate

The complete raw certificate details for production-kraken-valencia-preview.use1.huffpo.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR/WDdI1A/bu8No7XS73
Fnw6GpM7F7KkaWFGGDjq85lEMhd3Nk3sFDV5Czyn0msNzOBQlLBOsMdrDQUWxtFK
A63ohPy/6c7j1mLkGIiABl85dyzD3X6RbWsu0ONj46pCqHltnEB5vUXNdT7YzfYS
KxWwbcoepSVpipw9s6QlWq81XzLxJe4rfQnhncs4fVunQDcPB4/JiYrlcl62h7S9
dm04HDYB1fRJMQt2OvoiIMjky4dVok0QM3GrR/5NyUYB+9n/g9WlYnJCC6ntCaf2
N6vznGfpI+vznBWHGdUdZoMwIU4pRPlJSxFxmZc1sEFHQRA6titIRC+NFidxRfI6
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14566748295316519408985756399287760619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dulles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AOL, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'production-kraken-valencia-preview.use1.huffpo.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21349972529146145644178307777636476836705855527097927324444881694308274693316437307192938883299818011511036998222536677751032519934857814927250506696236482404550621919859228440990053432633631122896800208465657366435591437299239840064880936717566043320890432043384265409898442185298281414014989794456512615032505326139598742347433792485565620289558377413145266573022330059029198069558563406832783053907573949456376743615865600514005229513155421118421915533189499087741542499879079507502792612993108017581844793612144199637377061468587406575226931897244309496558869647920642978914710347213891469461245141017896034646589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							647f1f9b39229999ae6fe0534d231fdce4a5e7cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (519 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-kraken-valencia-preview.use1.huffpo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-kraken-valencia-preview.use1.huffpo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-kraken-preview.use1.huffpo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-kraken-preview.use1.huffpo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.www.huffingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.www.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.preview.www.huffingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.preview.www.huffingtonpost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.m.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk-preview.m.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-staging.m.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-production.m.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.preview.m.huffpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.uk-preview.m.huffpost.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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