travelexpensecusaqa.cusa.canon.com

- Canon U.S.A., INC. -

Issued by DigiCert Global G3 TLS ECC SHA384 2020 CA1

About this certificate

This digital certificate with serial number 05:cc:2e:6f:6e:6f:0c:1b:d9:48:6a:19:f4:5b:93:00 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Canon U.S.A., INC.

Organization: Canon U.S.A., INC.
State / Province: New York
Locality: Melville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:cc:2e:6f:6e:6f:0c:1b:d9:48:6a:19:f4:5b:93:00
Serial Number (int): 7706310357411090289362177597778924288
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: da:99:cf:fb:02:c3:24:dc:08:ca:9e:09:af:c5:99:eb:8b:f8:1a:d0
AuthorityKeyId: 8a:23:eb:9e:6b:d7:f9:37:5d:f9:6d:21:39:76:9a:a1:67:de:10:a8

Fingerprint (sha1): 5a:bd:d7:a2:09:aa:21:a4:f4:f2:81:d5:5f:06:31:8a:a4:47:40:f6
Fingerprint (sha256): 07:8d:a0:14:69:40:e1:1a:90:d9:2f:d3:71:63:e8:65:dc:da:d9:20:d7:ec:72:ab:79:bd:5e:44:bc:37:ad:45

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl

Check the revocation status for certificate travelexpensecusaqa.cusa.canon.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for travelexpensecusaqa.cusa.canon.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

travelexpensecusaqa.cusa.canon.com

Other certificates including the domain name canon.com

(limited to 100 certificates)
secure07.stage.lithium.com
quickscan.ciis.canon.com
magentoapi.usa.canon.com
canammobileconnect.usa.canon.com
nwstg.cusa.canon.com
lfsstorefront.com
*.dev-apps.cusa.canon.com
www.cfsdealerportal.com
nyrhdz21.cusa.canon.com
WMBMQPRD.cusa.canon.com
commerce.mylan.csa.canon.com
cusa.canon.com
taxserviceqa.usa.canon.com
secure1.canon.com
essdmtes1qa.cusa.canon.com
nyrhdz20.cusa.canon.com
s21fsrcbrqa.cusa.canon.com
access.ciis.canon.com
Replenish.usa.canon.com
thinkinkdigital.com
www.employee-rewards.cusa.canon.com
secure1.canon.com
essdmtes2qa.cusa.canon.com
ecarriers.csa.canon.com
www.developersupport.canon.com
canonusaextranets.cusa.canon.com
chatbot-dev.ciis.canon.com
www.cla.canon.com
mps.cbps.canon.com
contentqa.cusa.canon.com
www.developersupport.canon.com
ereturn.usa.canon.com
www.support.cusa.canon.com
csa.canon.com
secure04.lithium.com
adseast.solutions.canon.com
msdjira.sc.rd.canon.com
s21.cusa.canon.com
ereturn.usa.canon.com
secure04.lithium.com
s21fsrcbrop.cusa.canon.com
ereturn.usa.canon.com
shop.usa.canon.com
shop.dev.csa.canon.com
mycanon.stg.cusa.canon.com
events.biggestfantour.com
shopqa-auth.cusa.canon.com
cdf.dt-ext.vpn.ciis.canon.com
learn.usa.canon.com
shop.usa.canon.com
imagination.usa.canon.com
web1cdvny.cfs.canon.com
esbprd.cusa.canon.com
ereturn.usa.canon.com
thinkinkdigital.com
secure04.lithium.com
globaldispatchsolution.api.esb.usa.canon.com
ccldev.cusa.canon.com
www.servicetrainingsolutions.cusa.canon.com
adscentral.solutions.canon.com
preview.partnernet.usa.canon.com
canonva.cvi.canon.com
cvi.canon.com
rtbcx.jp.canon.com
VAARCOTFORT.CUSA.CANON.COM
in-fedservice.cusa.canon.com
unbe.sxg.cusa.canon.com
ciis.canon.com
vapgp01.cusa.canon.com
cpfprismadirect.cusa.canon.com
akamai-san195.exacttarget.com
magentocloud37.map.fastly.net
www.cla.canon.com
esbqa-2.cusa.canon.com
raise.usa.canon.com
magentocloud52.map.fastly.net
www.developersupport.canon.com
secure11.lithium.com
mycsa.s21qa.csa.canon.com
ess1.csa.canon.com
lsarprx.cusa.canon.com
upload-photos.dtp-community.usa.canon.com
shortstack.usa.canon.com
email2.cusa.canon.com
varhdv117.cusa.canon.com
www.support.cusa.canon.com
secure11.lithium.com
impact-uat.csa.canon.com
kbsupport.cusa.canon.com
events.ciis.canon.com
ereturn.usa.canon.com
cfsdealerportal.com
taxservice.usa.canon.com
secure07.stage.lithium.com
*.cusa.canon.com
www.support.cusa.canon.com
travelexpensecusaqa.cusa.canon.com
oneweb.api-stg.esb.usa.canon.com
mnyacs1121.cusa.canon.com
smarterdocs.corp.cbps.canon.com

Certificate

The complete raw certificate details for travelexpensecusaqa.cusa.canon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFkDCCBRagAwIBAgIQBcwub25vDBvZSGoZ9FuTADAKBggqhkjOPQQDAzBZMQsw
CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypEaWdp
Q2VydCBHbG9iYWwgRzMgVExTIEVDQyBTSEEzODQgMjAyMCBDQTEwHhcNMjMwNDEy
MDAwMDAwWhcNMjQwNDExMjM1OTU5WjB9MQswCQYDVQQGEwJVUzERMA8GA1UECBMI
TmV3IFlvcmsxETAPBgNVBAcTCE1lbHZpbGxlMRswGQYDVQQKExJDYW5vbiBVLlMu
QS4sIElOQy4xKzApBgNVBAMTInRyYXZlbGV4cGVuc2VjdXNhcWEuY3VzYS5jYW5v
bi5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAASZrGAsV6yYXtzfAIcjqWKU
NWFhpVHg3ajsorB5Je9gDjrU/jkyP02vX0zqj5sQdso9PM8WtRCgJ4S5Uj1MQxrd
o4IDmjCCA5YwHwYDVR0jBBgwFoAUiiPrnmvX+Tdd+W0hOXaaoWfeEKgwHQYDVR0O
BBYEFNqZz/sCwyTcCMqeCa/FmeuL+BrQMC0GA1UdEQQmMCSCInRyYXZlbGV4cGVu
c2VjdXNhcWEuY3VzYS5jYW5vbi5jb20wDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBEhkJodHRw
Oi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHM1RMU0VDQ1NIQTM4
NDIwMjBDQTEtMi5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9E
aWdpQ2VydEdsb2JhbEczVExTRUNDU0hBMzg0MjAyMENBMS0yLmNybDA+BgNVHSAE
NzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0
LmNvbS9DUFMwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0cDovL29j
c3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0cy5kaWdp
Y2VydC5jb20vRGlnaUNlcnRHbG9iYWxHM1RMU0VDQ1NIQTM4NDIwMjBDQTEtMi5j
cnQwCQYDVR0TBAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHcA7s3QZNXb
Gs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGHdUPsCwAABAMASDBGAiEA/jRW
X1r4EtnVjkHyE2sRwdKPRzxD6P/U5s+7BYepXfICIQDO+QanmIzQEkcQVxVtRR1g
Dlas3kTfRy0YJo5ngVWfBwB1AHPZnokbTJZ4oCB9R53mssYc0FFecRkqjGuAEHrB
d3K1AAABh3VD7GsAAAQDAEYwRAIgeQP854l3q4ZquUJfb21A9Jys2S3B7KycMRgU
cvaLeKUCIEs3azoRmuLmHlpPD7xWvyXoFI/Lq2pivVkABskCFXagAHUASLDja9qm
RzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGHdUPsUwAABAMARjBEAiAxeY+i
KkSVZxNb8VIGemdvWuO/S3ukzLZnQs4yrMV3ZgIgc5FBQj8pxj63abNznyPr8BUt
kawHmc1sDxT8C3wqrl4wCgYIKoZIzj0EAwMDaAAwZQIwFGL3wX/gMtZORPa1SBWL
VX9a3aGurX/5yF0RG25wWDSaUwgFgXGNIA0vW8zliTHiAjEAlLAVbDshCug8z3bB
iOkn0+rMbdWKbdl9peLJ6/yIgNEFAz0WmrytkpzjdzLQxldf
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEmaxgLFesmF7c3wCHI6lilDVhYaVR
4N2o7KKweSXvYA461P45Mj9Nr19M6o+bEHbKPTzPFrUQoCeEuVI9TEMa3Q==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7706310357411090289362177597778924288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G3 TLS ECC SHA384 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Melville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canon U.S.A., INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'travelexpensecusaqa.cusa.canon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000499ac602c57ac985edcdf008723a96294356161a551e0dda8eca2b07925ef600e3ad4fe39323f4daf5f4cea8f9b1076ca3d3ccf16b510a02784b9523d4c431add
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8a23eb9e6bd7f9375df96d2139769aa167de10a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da99cffb02c324dc08ca9e09afc599eb8bf81ad0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelexpensecusaqa.cusa.canon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (824 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3137783835591370838507216106554529844707061947328373427095340212056204791827924065979051022909307181714744233505250
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22885151079204600957053064121850342225793137395875702828661442166304241011809037271451208413834607148918592130930527