regina-1.connector.think365.com

- Strategic Group -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:7c:23:b0:ed:9d:9b:2a:4b:55:06:42:87:5c:28:ed was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Strategic Group

Organization: Strategic Group
State / Province: AB
Locality: Calgary
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:7c:23:b0:ed:9d:9b:2a:4b:55:06:42:87:5c:28:ed
Serial Number (int): 1973796708274446246164468990318749933
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 01:95:f0:4f:ca:58:29:70:5c:1d:f1:0d:37:91:2c:57:ee:17:b2:72
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 4b:de:0b:e3:d7:f8:4c:49:2d:73:44:9a:7d:7a:12:c7:59:92:23:41
Fingerprint (sha256): 07:64:ea:a2:3a:dd:f5:5d:9a:f7:ac:8d:b5:b8:7a:07:b9:73:3b:fa:43:d4:4c:7c:50:4e:32:2e:1e:15:9b:1b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate regina-1.connector.think365.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for regina-1.connector.think365.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

regina-1.connector.think365.com
sip.regina.ca
sip.ttcce.ca

Other certificates including the domain name think365.com

(limited to 100 certificates)
fe01.ca3c.think365.com
sip.mt04.connector.think365.com
sip.ca1.hostedlync.com
chalgeo-1.connector.think365.com
chemco-1.connector.think365.com
sip.mt04.connector.think365.com
sip.poc.hostedlync.com
sip.mt04.connector.think365.com
sip02w1.ca3.think365.com
sip.ca2.think365.com
sip.ca1.hostedlync.com
regina-1.connector.think365.com
sip.mt01.connector.think365.com
sip.ca1.hostedlync.com
sip.mt04.connector.think365.com
sip.mt06.connector.think365.com
sip.mt03.connector.think365.com
sip.mt03.connector.think365.com
sip.ca1.hostedlync.com
sip.mt05.connector.think365.com
sip.mt02.connector.think365.com
sip.mt06.connector.think365.com
sip.ca1.hostedlync.com
sip.mt01.connector.think365.com
sip.ca1.hostedlync.com
*.think365.com
sip.ca1.hostedlync.com
sip.mt03.connector.think365.com
sip.mt05.connector.think365.com
sip.mt01.connector.think365.com
pembina-1.connector.think365.com
sip.ca1.hostedlync.com
sip.mt01.connector.think365.com
ClarityConnect.mpac.ca
scm-1.connector.think365.com
sip.ca2.think365.com
sip.ca1.hostedlync.com
cmhc-1.connector.think365.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
fxinnov-1.connector.think365.com
psac-1.connector.think365.com
sip.ca2.think365.com
sip.ca1.hostedlync.com
softlnd-1.connector.think365.com
sip.mt07.connector.think365.com
sip.mt04.connector.think365.com
sip.ca1.hostedlync.com
sip.mt01.connector.think365.com
sip.ca1.hostedlync.com
sip.mt07.connector.think365.com
*.think365.com
sip.mt06.connector.think365.com
sip.mt02.connector.think365.com
keyera-1.connector.think365.com
sip.mt04.connector.think365.com
sd83-1.connector.think365.com
clarityconnect.ocas.ca
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.mt05.connector.think365.com
*.think365.com
sip.mt04.connector.think365.com
sip.mt04.connector.think365.com
sip.mt05.connector.think365.com
sip.mt05.connector.think365.com
owas.adm.think365.com
sip.mt01.connector.think365.com
sip.mt07.connector.think365.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
*.think365.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.ca1.hostedlync.com
sip.mt02.connector.think365.com
sip02w1.ca3.think365.com
sip.mt06.connector.think365.com
fxinnov-1.connector.think365.com
logibec-1.connector.think365.com
sip.mt01.connector.think365.com
sip.mt04.connector.think365.com
sip02w1.ca3.think365.com
sip.mt03.connector.think365.com
sip.mt07.connector.think365.com
sip.mt01.connector.think365.com
sip.ca1.hostedlync.com
sip.mt01.connector.think365.com
agropur-1.connector.think365.com
abinnov-1.connector.think365.com
sip.mt03.connector.think365.com
sip.mt01.connector.think365.com
nuna-1.connector.think365.com
sip.mt04.connector.think365.com
sip.mt07.connector.think365.com
sip.mt01.connector.think365.com
sip.mt03.connector.think365.com
mcintos-1.connector.think365.com
fuller-1.connector.think365.com

Certificate

The complete raw certificate details for regina-1.connector.think365.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIQAXwjsO2dmypLVQZCh1wo7TANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwNzEwMDAwMDAwWhcN
MjEwNzE0MTIwMDAwWjBwMQswCQYDVQQGEwJDQTELMAkGA1UECBMCQUIxEDAOBgNV
BAcTB0NhbGdhcnkxGDAWBgNVBAoTD1N0cmF0ZWdpYyBHcm91cDEoMCYGA1UEAxMf
cmVnaW5hLTEuY29ubmVjdG9yLnRoaW5rMzY1LmNvbTCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBAKd1mXXevUwRvNXlwUGTZX4aYD1FZ9TbhnaX/zLztQ72
pN+oHxwC9O8VQOwuyxG71eQa3kaUD7Ar5UTqO0nztJ1icsOHrPbLK6RDwFaR2S11
J5pV96rhnoMxb1crMk9B0S9v4szFaKkLFW9vqzOlmt0HbOI4ctVdFB+MrnxtcG0j
3oY2UTFWNx+v+IhigofvOsOonA9MPFXaZ/JLcOo2pgTBkFfIkWuqjJOmK566RlFR
DV83tj9ydWmUy++BQFH2NK3HgFIELZ1snfuERwISaFvRrmJsJNe2X3PTj9O0T1kL
TnZ90IuznsXH58jEWgJHUAZQfbVzxQo6byKx3q1RX2UCAwEAAaOCAhgwggIUMB8G
A1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBQBlfBPylgp
cFwd8Q03kSxX7heycjBHBgNVHREEQDA+gh9yZWdpbmEtMS5jb25uZWN0b3IudGhp
bmszNjUuY29tgg1zaXAucmVnaW5hLmNhggxzaXAudHRjY2UuY2EwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBi
MC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNy
bDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5j
cmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6
Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBu
MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUH
MAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1
cmVTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEACbbxuEVkWsuBNKdP/+YLKlFo04RXP8xx2Lg3
1XSlhIJqepMeQb5iyRshgXhMoUKoOBd9LE16J42KYDOzzizqSH19vF+HoTpxqhlm
7GR2c5et4aKROi4y15RPdxxokUB+AdBawAxzoeUWmn2FSpJhLM/FNTZzpBc0PUyJ
NbbBtqkwJBw7trEhTavomnBOfn4hAp/Iby3FvqzyuI0/8M8kCQH7TLBrqK8DMAuh
lt6S7EkppxPt7kHMC+jyeiB39a8jDNn4fZI0z6IV6ElBd4Qkl8+uSmd7hEBxUWfK
TWYvCwF/bl+66hGvRdGX9PS9n6/A26HEQ5+YhQNljrK2en7cVA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3WZdd69TBG81eXBQZNl
fhpgPUVn1NuGdpf/MvO1Dvak36gfHAL07xVA7C7LEbvV5BreRpQPsCvlROo7SfO0
nWJyw4es9ssrpEPAVpHZLXUnmlX3quGegzFvVysyT0HRL2/izMVoqQsVb2+rM6Wa
3Qds4jhy1V0UH4yufG1wbSPehjZRMVY3H6/4iGKCh+86w6icD0w8Vdpn8ktw6jam
BMGQV8iRa6qMk6YrnrpGUVENXze2P3J1aZTL74FAUfY0rceAUgQtnWyd+4RHAhJo
W9GuYmwk17Zfc9OP07RPWQtOdn3Qi7OexcfnyMRaAkdQBlB9tXPFCjpvIrHerVFf
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1973796708274446246164468990318749933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Calgary'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Strategic Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'regina-1.connector.think365.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21139787381829713973651963037615304217814621072069102797490362311883699585160851987647687044937434485068857070815531108451991899593793121017329613092118560097351808357928396054244468882233560529959229498008576927373313834880103298672732547646547948611330412221937728686098169694416813248869374324750765044178924344977535940964825354528852905637973285720596934047098370149369923093344213991753425326332192502878679264542306574220586642603814701927187968683177305353233799767956391734949150302019224524430522702037839530243762523704168366441281023544333133943374142866978917033000017890028478928783366236178660874870629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0195f04fca5829705c1df10d37912c57ee17b272
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regina-1.connector.think365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.regina.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ttcce.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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