petapm.bhpbilliton.net

- BHP Billiton Innovation Pty Ltd -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:73:46:8c:26:70:42:3d:96:d5:30:33:2e:c2:72:3e was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BHP Billiton Innovation Pty Ltd

Organization: BHP Billiton Innovation Pty Ltd
Organization unit: Petroleum
State / Province: Victoria
Locality: Melbourne
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:73:46:8c:26:70:42:3d:96:d5:30:33:2e:c2:72:3e
Serial Number (int): 4586228998597403287245222906534457918
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 05:75:1e:82:aa:48:eb:ca:d2:0c:f4:39:2d:06:be:f7:69:2d:5e:41
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): a1:93:be:ab:21:8a:0a:86:a6:93:77:c5:1e:1b:4a:71:63:39:e4:41
Fingerprint (sha256): 08:2b:8f:93:d1:3f:d3:2c:6c:09:63:5f:0e:a3:d1:a3:e4:30:fb:1b:55:ea:83:00:31:4d:be:25:58:67:76:e2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate petapm.bhpbilliton.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for petapm.bhpbilliton.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

petapm.bhpbilliton.net
petapm.bhp.com

Other certificates including the domain name bhpbilliton.net

(limited to 100 certificates)
BMAPDC-VAM50V.apac.ent.bhpbilliton.net
petebs-zebs2.americas.ent.bhpbilliton.net
inside.bhpbilliton.net
incitrix.apac.ent.bhpbilliton.net
PER1069RVB002.ent.bhpbilliton.net
PDCRDGWAP01VEI.americas.ent.bhpbilliton.net
PER1073RVB001.ent.bhpbilliton.net
USDC2POCDM01.ENT.BHPBILLITON.NET
dspyxe-a-ise-01.americas.ent.bhpbilliton.net
incitrix.apac.ent.bhpbilliton.net
OD-TMS.apac.ent.bhpbilliton.net
bionmnyces01.bhpbilliton.net
petapm.bhpbilliton.net
phoupecmapl01.americas.ent.bhpbilliton.net
potashlearning.bhpbilliton.com
potash-mii.americas.ent.bhpbilliton.net
wdu1pweb01.bhpbilliton.net
biomulyces12.bhpbilliton.net
eroomtest.bhpbilliton.net
OD-TMS.bhp.com
dccsbx.bhpbilliton.com
PER1069RVB001.ent.bhpbilliton.net
phoupoamapl02.americas.ent.bhpbilliton.net
URAOLY-RHH01.APAC.ENT.BHPBILLITON.NET
tent.bhpbilliton.net
dcc.bhpbilliton.com
solmanjava.bhpbilliton.net
simcity.bhpbilliton.net
incvmcitrix.apac.ent.bhpbilliton.net
PET5083RVB001.ent.bhpbilliton.net
KUL2010RVB001.ent.bhpbilliton.net
phouaecoapw01.americas.ent.bhpbilliton.net
pdcrdgwap01vei.americas.ent.bhpbilliton.net
ecc-mdev.bhpbilliton.com
pet1gismobilesvc.bhpbilliton.com
phoudoamapl02.americas.ent.bhpbilliton.net
biopacyces01.bhpbilliton.net
PER1022RVB001.ent.bhpbilliton.net
pet5028rvb001.ent.bhpbilliton.net
inside.bhpbilliton.net
BMAPDC-KM03V.apac.ent.bhpbilliton.net
petoasis-test.bhpbilliton.net
phv1pweb01.bhpbilliton.net
petoasis-dev.bhpbilliton.net
pt5-portal.bhpbilliton.net
tfs.bhpbilliton.net
USDC1RCMPS01.tent.bhpbilliton.net
bmacitrix.apac.ent.bhpbilliton.net
pet5073rvb001.ent.bhpbilliton.net
pet5107rvb001.ent.bhpbilliton.net
pdc-medwb01vu.americas.ent.bhpbilliton.net
aris.bhpbilliton.net
JansenReports.bhp.com
colpdc-gis51v.apac.ent.bhpbilliton.net
simcity.bhpbilliton.net
p2broker.bhpbilliton.net
OLP0TCIT02.apac.ent.bhpbilliton.net
pam-production.bhp.com
accsbx.bhpbilliton.com
USDC1POCWA02.ENT.BHPBILLITON.NET
Phpoupmdmapw01.americas.ent.bhpbilliton.net
aris.bhpbilliton.net
bmapdc-km50v.apac.ent.bhpbilliton.net
red1pweb01.bhpbilliton.net
LER1024RVB001.ent.bhpbilliton.net
PET5079RVB001.ent.bhpbilliton.net
phoupgisapw26.americas.ent.bhpbilliton.net
shutdown.bhp.com
CHI5035RVB002.ent.bhpbilliton.net
yan4pweb01.bhpbilliton.net
phoudoamapl03.americas.ent.bhpbilliton.net
OD-TMS.apac.ent.bhpbilliton.net
PET5074RVB001.ent.bhpbilliton.net
petroleumtalentandlearning.bhpbilliton.net
dspyxe-a-ise-01.americas.ent.bhpbilliton.net
yan4pweb01.bhpbilliton.net
accsbx.bhpbilliton.com
bmapdc-inx01v.apac.ent.bhpbilliton.net
SUPPLIERSRM.BHPBILLITON.COM
ADL1036RVB002.ent.bhpbilliton.net
eroomdev.bhpbilliton.net
Inbrmcitrix.apac.ent.bhpbilliton.net
PDCVERSAwb01v.americas.ent.bhpbilliton.net
DAL5001PUI001.ent.bhpbilliton.net
JansenReports.bhp.com
smartplantapi-waio-qa.bhp.com
petoasis-uat.bhpbilliton.net
phoupoemapl01.americas.ent.bhpbilliton.net
colpdc-gis52v.apac.ent.bhpbilliton.net
saspdcarkwb04v.americas.ent.bhpbilliton.net
colpdc-gis50v.apac.ent.bhpbilliton.net
IAD5037RVB001.ent.bhpbilliton.net
pcnpdc.apac.ent.bhpbilliton.net
ADL1058RVB001.ent.bhpbilliton.net
eroom1.bhpbilliton.net
phoudoamapl04.americas.ent.bhpbilliton.net
bioyanyces01.bhpbilliton.net
OD-TMS.apac.ent.bhpbilliton.net
wdu1pweb01.bhpbilliton.net
iseportal.bhpbilliton.com

Certificate

The complete raw certificate details for petapm.bhpbilliton.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDaU37XGr3PJkSBK3kJm
9QDuurUGkcrbZ3lHFBPu2rpdJbs+Ow9AFjLxCl2X/SeTeF4O49c2+x3p0KUTmGGl
HGnSCeBeKLLMn4MRGjq5bRZovqWLNG1op+ZbRet4iP5mZB4kXBiPt/z+cFdRVF5Y
kmd+TVLcfHc6CrQ0sU5ssrKyG9rWIGVzXprY2PlPJVHVceu/wflk9wLIVT/qPUqe
fgbI0ny0m06iafdLF/VvP6ec65hBbJW9LPnGkVTht48KdyEPTcXTXuYHEvjlKHYW
u78lZkQIhlEFM5JdASbtgt9q0593p/+GL37VUF7TgYJ4CRu0q3l/llUKohzgiBsI
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4586228998597403287245222906534457918
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BHP Billiton Innovation Pty Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Petroleum'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'petapm.bhpbilliton.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20729997174231730008837488323626857501117407483220114903063616299737288534438249688563840253066460596022526440385857608637820790441676827508890945034342344078533188622843951459867496069229667988880980922731385819149937283263186647245667234969051353340718141702045376531534411117577021081559065869912120091925107756395366003522330099202402926394410802683624794071688918234301641782175470909701705961602147199335880803268786963241008943357904430349880496541441753184208241252231830567524990192420514493550787213067354221480416228688291380245905982950040184111580170012683473036216116065658671647321264218813153043745001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05751e82aa48ebcad20cf4392d06bef7692d5e41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petapm.bhpbilliton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petapm.bhp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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