bionmnyces01.bhpbilliton.net

- BHP Billiton Innovation Pty Ltd -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:be:9c:c9:91:47:84:62:7d:c8:c2:83:85:cc:13:62 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BHP Billiton Innovation Pty Ltd

Organization: BHP Billiton Innovation Pty Ltd
Organization unit: IS
State / Province: Victoria
Locality: Melbourne
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:be:9c:c9:91:47:84:62:7d:c8:c2:83:85:cc:13:62
Serial Number (int): 6306628411981901095262054390633861986
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a2:f7:7f:40:0d:36:28:17:d7:41:42:56:f3:58:73:21:69:14:42:24
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 85:d8:e6:b3:67:8f:aa:5b:c4:29:35:ba:a7:e7:51:ae:e0:24:f7:9e
Fingerprint (sha256): 07:f7:58:df:2b:c5:77:7c:49:f4:1d:f5:df:b7:d7:63:82:49:13:88:1a:ee:01:2b:da:17:bc:a6:c6:14:6f:fc

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate bionmnyces01.bhpbilliton.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bionmnyces01.bhpbilliton.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bionmnyces01.bhpbilliton.net
bionmnyces01.bhp.com

Other certificates including the domain name bhpbilliton.net

(limited to 100 certificates)
BMAPDC-VAM50V.apac.ent.bhpbilliton.net
petebs-zebs2.americas.ent.bhpbilliton.net
inside.bhpbilliton.net
incitrix.apac.ent.bhpbilliton.net
PER1069RVB002.ent.bhpbilliton.net
PDCRDGWAP01VEI.americas.ent.bhpbilliton.net
PER1073RVB001.ent.bhpbilliton.net
USDC2POCDM01.ENT.BHPBILLITON.NET
dspyxe-a-ise-01.americas.ent.bhpbilliton.net
incitrix.apac.ent.bhpbilliton.net
OD-TMS.apac.ent.bhpbilliton.net
bionmnyces01.bhpbilliton.net
petapm.bhpbilliton.net
phoupecmapl01.americas.ent.bhpbilliton.net
potashlearning.bhpbilliton.com
potash-mii.americas.ent.bhpbilliton.net
wdu1pweb01.bhpbilliton.net
biomulyces12.bhpbilliton.net
eroomtest.bhpbilliton.net
OD-TMS.bhp.com
dccsbx.bhpbilliton.com
PER1069RVB001.ent.bhpbilliton.net
phoupoamapl02.americas.ent.bhpbilliton.net
URAOLY-RHH01.APAC.ENT.BHPBILLITON.NET
tent.bhpbilliton.net
dcc.bhpbilliton.com
solmanjava.bhpbilliton.net
simcity.bhpbilliton.net
incvmcitrix.apac.ent.bhpbilliton.net
PET5083RVB001.ent.bhpbilliton.net
KUL2010RVB001.ent.bhpbilliton.net
phouaecoapw01.americas.ent.bhpbilliton.net
pdcrdgwap01vei.americas.ent.bhpbilliton.net
ecc-mdev.bhpbilliton.com
pet1gismobilesvc.bhpbilliton.com
phoudoamapl02.americas.ent.bhpbilliton.net
biopacyces01.bhpbilliton.net
PER1022RVB001.ent.bhpbilliton.net
pet5028rvb001.ent.bhpbilliton.net
inside.bhpbilliton.net
BMAPDC-KM03V.apac.ent.bhpbilliton.net
petoasis-test.bhpbilliton.net
phv1pweb01.bhpbilliton.net
petoasis-dev.bhpbilliton.net
pt5-portal.bhpbilliton.net
tfs.bhpbilliton.net
USDC1RCMPS01.tent.bhpbilliton.net
bmacitrix.apac.ent.bhpbilliton.net
pet5073rvb001.ent.bhpbilliton.net
pet5107rvb001.ent.bhpbilliton.net
pdc-medwb01vu.americas.ent.bhpbilliton.net
aris.bhpbilliton.net
JansenReports.bhp.com
colpdc-gis51v.apac.ent.bhpbilliton.net
simcity.bhpbilliton.net
p2broker.bhpbilliton.net
OLP0TCIT02.apac.ent.bhpbilliton.net
pam-production.bhp.com
accsbx.bhpbilliton.com
USDC1POCWA02.ENT.BHPBILLITON.NET
Phpoupmdmapw01.americas.ent.bhpbilliton.net
aris.bhpbilliton.net
bmapdc-km50v.apac.ent.bhpbilliton.net
red1pweb01.bhpbilliton.net
LER1024RVB001.ent.bhpbilliton.net
PET5079RVB001.ent.bhpbilliton.net
phoupgisapw26.americas.ent.bhpbilliton.net
shutdown.bhp.com
CHI5035RVB002.ent.bhpbilliton.net
yan4pweb01.bhpbilliton.net
phoudoamapl03.americas.ent.bhpbilliton.net
OD-TMS.apac.ent.bhpbilliton.net
PET5074RVB001.ent.bhpbilliton.net
petroleumtalentandlearning.bhpbilliton.net
dspyxe-a-ise-01.americas.ent.bhpbilliton.net
yan4pweb01.bhpbilliton.net
accsbx.bhpbilliton.com
bmapdc-inx01v.apac.ent.bhpbilliton.net
SUPPLIERSRM.BHPBILLITON.COM
ADL1036RVB002.ent.bhpbilliton.net
eroomdev.bhpbilliton.net
Inbrmcitrix.apac.ent.bhpbilliton.net
PDCVERSAwb01v.americas.ent.bhpbilliton.net
DAL5001PUI001.ent.bhpbilliton.net
JansenReports.bhp.com
smartplantapi-waio-qa.bhp.com
petoasis-uat.bhpbilliton.net
phoupoemapl01.americas.ent.bhpbilliton.net
colpdc-gis52v.apac.ent.bhpbilliton.net
saspdcarkwb04v.americas.ent.bhpbilliton.net
colpdc-gis50v.apac.ent.bhpbilliton.net
IAD5037RVB001.ent.bhpbilliton.net
pcnpdc.apac.ent.bhpbilliton.net
ADL1058RVB001.ent.bhpbilliton.net
eroom1.bhpbilliton.net
phoudoamapl04.americas.ent.bhpbilliton.net
bioyanyces01.bhpbilliton.net
OD-TMS.apac.ent.bhpbilliton.net
wdu1pweb01.bhpbilliton.net
iseportal.bhpbilliton.com

Certificate

The complete raw certificate details for bionmnyces01.bhpbilliton.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldfXpDe4IvS5wIOh4PsG
/9geJXWx5fRegVFmZdsVyGYYBshTIgnG7Ij9A2dva4YCrUp7MVCdue1MUUHDzuNP
mLyGRVr/jZ1trn1rwLP3raoySafA8CgjQtnKgoiqrNf7pW+z7aU5Gm615OeJntwS
2uuopDMA1y4kep6TwgjcQV/ads/jeMgrcKbHmFu7z24T9pZfO0AHwzFF9atch8sQ
iGtbOwcV8jfG2R872KnPkYmzNZzJiuSnpkjkFhollw/+8ZCa0S3i7K36qq0c0XRD
Teaz/Mq/carFUhddwT7Ba0qzO/gLs71ljv4Ir2xvls7akRmDkfSqCbsGQ5Sv03lF
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6306628411981901095262054390633861986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BHP Billiton Innovation Pty Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bionmnyces01.bhpbilliton.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18915943269405054737689824343037752758461920746168576191693121515790810550617163099365518234132492254261731542598802617345582574796046442708274760059311930875328616793438947450901252274975262055846060361484960884969581346372969062790542966488161785627962211147949432746322386697659635365796654944301069892284707296708555052020416033016099717876379991397181647132967723691602439495722810354518175768883920834460537827980288153426869334446153717830762253327697812679736027591905374248066281713272585923974760087077671078017388952187381568853745962219399715804014136237064088804071224595753689175052008496441318228706799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2f77f400d362817d7414256f358732169144224
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionmnyces01.bhpbilliton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bionmnyces01.bhp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002588c3a71031ede3fc530ddf946cb9c88ff8aa48e13f1c6f0143e6c1f14ed8b0a53b310d8c12becbde77c88f28e3475c6f4641b49ee5b7158d003729ad13e67d4240c97a5aae462f3881c2f22cf6238fc6aac1793b35573299aa9fd413a2d6c0e959fe6359cfad0bb7d309ccc6b67f390a840a6a04c6b3adde67bee943a4ecbfa9d0cff18fc8382ef8ab894ba0133b67d0f95e8be8d2ca23d38b5a3afc458ca9700f7a2725226cef56ad3907ccd11d6d124c4b75fa735b4eb77ef124ca6bbfcf41893d3b7e640da40e1a436dc426609602904d0c5b61ddc4672edf955a1560cee7bf4e49d6a929be9d38c37f9023afd806978f28423fb072caadaffc6e25362e