stateservice.officeapps.live-int.com

- Microsoft Corporation -

Issued by DigiCert Cloud Services CA-1

About this certificate

This digital certificate with serial number 0f:b1:42:83:c5:21:70:fd:dd:a6:33:f9:79:c4:86:2a was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: Washington
Locality: Redmond
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:b1:42:83:c5:21:70:fd:dd:a6:33:f9:79:c4:86:2a
Serial Number (int): 20858805559666508037579312652745999914
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 41:8e:7d:ac:44:42:c4:cd:20:85:b3:cf:0c:20:0f:06:a7:2f:78:14
AuthorityKeyId: dd:51:d0:a2:31:73:a9:73:ae:8f:b4:01:7e:5d:8c:57:cb:9f:f0:f7

Fingerprint (sha1): f4:ea:3e:88:58:51:b1:6a:78:11:a6:1d:c9:52:5a:51:c4:ee:5d:5e
Fingerprint (sha256): 07:12:77:65:98:a6:dc:fa:ea:e5:1c:31:a5:9e:96:9f:be:28:64:3b:d9:ec:e6:59:3d:0d:91:1d:6d:9d:a8:e9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertCloudServicesCA-1.crt

Revocation information

OCSP Server: http://ocspx.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertCloudServicesCA-1-g1.crl

Check the revocation status for certificate stateservice.officeapps.live-int.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stateservice.officeapps.live-int.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stateservice.officeapps.live-int.com
*.stateservice.officeapps.live-int.com

Other certificates including the domain name live-int.com

(limited to 100 certificates)
xd.live-int.com
entitlement.int2.onecare.live-int.com
login.live-int.com
images.partner.windowsphone.com
graph.windows.net
*.osi.office-int.net
*.osi.office-int.net
*.login.live-int.com
notify.mpnstress1.live-int.com
msm.live-int.com
graph.windows.net
graph.windows.net
SigningCert.login.live-int.com
graph.windows.net
skype-certapiqa-msaautocsrint.login.live-int.com
b.familysafety.microsoft.com
graph.windows.net
graph.windows.net
clientauthentication.retailer.officeapps.live-int.com
*.m2.tiles.live-int.com
profile-bvt.live-int.com
*.login.live-int.com
*.vo.msecnd.net
login.live-int.com
graph.windows.net
graph.windows.net
login.live-int.com
storage.live.com
graph.windows.net
Devices-gd.live-int.com
*.samples.live-int.com
graph.windows.net
buy.live-int.com
skype-certapiqa-msaautocsrint.login.live-int.com
api.choice.microsoft-int.com
support.msn-int.com
pptcs.officeapps.live-int.com
graph.windows.net
account.live-int.com
login.live-int.com
onedrive.live-int.com
graph.windows.net
graph.windows.net
*.login.live-int.com
login.live-int.com
graph.windows.net
graph.windows.net
msm.live-int.com
ieonline.live-int.com
account.live-int.com
graph.windows.net
graph.windows.net
stateservice.officeapps.live-int.com
PubSubAutoCSRClient.login.live-int.com
graph.windows.net
mid.live-int.com
captions.officeapps.live-int.com
login.live-int.com
f2.push.live-int.com
login.live.com
graph.windows.net
graph.windows.net
*.location.live-int.com
graph.windows.net
graph.windows.net
graph.windows.net
*.login.live-int.com
login.live-int.com
storage.live.com
api-s3.live-int.com
*.osi.office-int.net
pptcs.officeapps.live-int.com
graph.windows.net
busbuy.live-int.com
graph.windows.net
account.live-int.com
*.osi.office-int.net
*.osi.office-int.net
login.live-int.com
graph.windows.net
login.live-int.com
account.live-int.com
ols-idsapi.officeapps.live-int.com
ieonline.live-int.com
graph.windows.net
*.osi.office-int.net
hubblecontent.osi.office-int.net
hubble.officeapps.live-int.com
graph.windows.net
odcsm-aad-int.officeapps.live-int.com
*.login.live-int.com
graph.windows.net
onedrive.live-int.com
graph.windows.net
graph.windows.net
login.live-int.com
graph.windows.net
*.osi.office-int.net
cns.fss.live-int.com
s2s.aliasdirectory.live-int.com

Certificate

The complete raw certificate details for stateservice.officeapps.live-int.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIQD7FCg8UhcP3dpjP5ecSGKjANBgkqhkiG9w0BAQsFADBL
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSUwIwYDVQQDExxE
aWdpQ2VydCBDbG91ZCBTZXJ2aWNlcyBDQS0xMB4XDTIyMDYwNjAwMDAwMFoXDTIz
MDUwNjIzNTk1OVowgYMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u
MRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRp
b24xLTArBgNVBAMTJHN0YXRlc2VydmljZS5vZmZpY2VhcHBzLmxpdmUtaW50LmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALylWd00V+Y++3TQpmP6
nPXjnwg3AXHpdWhOJJE0CtpxvnrtkKWFaeEHSrxf6bQYw0Y1Iy7cxN7ZO107nHS4
XIfgqQvxcipB1PPacZV0veoLXupIYSQNA28vE5S2FjUMh7fyQRH3AJ62BnfNroji
xGNbBRYV9GMtZ1Azz7Oq4X6opll4yI/FjbH2vLxaZK5Lyij77iEjHbJjgBG++mK3
Rxva+2hCFUywsZHW0K6iGZISW1IaetgLLvrnbxoY5RO+Oua7sFSl/JcwJp6EpAIn
KqDKvurhkltLPXSdfw8QENfL+6Beivbdp288teQU3PLW1IH/nI1Wss1U4pjNuxiP
i50CAwEAAaOCAj0wggI5MB8GA1UdIwQYMBaAFN1R0KIxc6lzro+0AX5djFfLn/D3
MB0GA1UdDgQWBBRBjn2sRELEzSCFs88MIA8Gpy94FDBXBgNVHREEUDBOgiRzdGF0
ZXNlcnZpY2Uub2ZmaWNlYXBwcy5saXZlLWludC5jb22CJiouc3RhdGVzZXJ2aWNl
Lm9mZmljZWFwcHMubGl2ZS1pbnQuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgY0GA1UdHwSBhTCBgjA/oD2gO4Y5aHR0
cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0Q2xvdWRTZXJ2aWNlc0NBLTEt
ZzEuY3JsMD+gPaA7hjlodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRD
bG91ZFNlcnZpY2VzQ0EtMS1nMS5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAn
BggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHwGCCsGAQUF
BwEBBHAwbjAlBggrBgEFBQcwAYYZaHR0cDovL29jc3B4LmRpZ2ljZXJ0LmNvbTBF
BggrBgEFBQcwAoY5aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0
Q2xvdWRTZXJ2aWNlc0NBLTEuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIE
AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAC/LqoN1Ofa3Ny2sdRPVPA74iTL2
X530OTGRzFTxE5Zh+FV01++UKLEFVcAa9/gy7xzDN6AQbKO9w4j96TMw4HD0qIFH
BVNmhZOS1ZVZPBBkKYT3QB2qG7y0U1g79USXGBbQx8BQ+9Uh6PhySWJhcEB1Hsq/
nQjU09y9CrGt+Hpjx+wIR0B+qU7w2520lUbHfg7+VYJjF9T07SFb+rGqQuBW8jLy
0Dd7Ta7vMXbRWnk9An4/hXOATmFCajwTK9BUi0QN8B/2hBeo7E6VOcnSShKnKu+3
G+AJpOJCN7s4rBuBVTpC4JeFEOM7vTESRT5UHOGUsLHPlhkrWNKbm1aVgc0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKVZ3TRX5j77dNCmY/qc
9eOfCDcBcel1aE4kkTQK2nG+eu2QpYVp4QdKvF/ptBjDRjUjLtzE3tk7XTucdLhc
h+CpC/FyKkHU89pxlXS96gte6khhJA0Dby8TlLYWNQyHt/JBEfcAnrYGd82uiOLE
Y1sFFhX0Yy1nUDPPs6rhfqimWXjIj8WNsfa8vFpkrkvKKPvuISMdsmOAEb76YrdH
G9r7aEIVTLCxkdbQrqIZkhJbUhp62Asu+udvGhjlE7465ruwVKX8lzAmnoSkAicq
oMq+6uGSW0s9dJ1/DxAQ18v7oF6K9t2nbzy15BTc8tbUgf+cjVayzVTimM27GI+L
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20858805559666508037579312652745999914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Cloud Services CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stateservice.officeapps.live-int.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23814338966231570797049813782326677554374188163484150681541589718134955587050613555324896041415931392138311353797767994700748706941777582796345956353805267762323379617131728489206389083835957571402312807192132292256695865604942782907337291421343779326178038182313226839016998321024791298046507516652572328919410855949193856450552103281120638009665050698556325328001656795681931317354635380355422422785581781348181459485166320143192598879481539204052749425932981704821317726672603289736491602015035299906428262151257997600530669979665199632970919995424167198025368838692119910950129510425993478399519975920241495477149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dd51d0a23173a973ae8fb4017e5d8c57cb9ff0f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							418e7dac4442c4cd2085b3cf0c200f06a72f7814
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stateservice.officeapps.live-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stateservice.officeapps.live-int.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertCloudServicesCA-1-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocspx.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertCloudServicesCA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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