www.skatteetaten.no

- Skatteetaten -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 09:58:d9:34:b9:1b:53:54:db:b5:2a:f2:96:74:d1:34 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Skatteetaten

Company registration number: 974 761 076
Organization: Skatteetaten
State / Province: Oslo
Locality: Oslo
Country: NO

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:58:d9:34:b9:1b:53:54:db:b5:2a:f2:96:74:d1:34
Serial Number (int): 12424379545651512177527118997751124276
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2a:6f:79:9d:74:93:26:24:93:a6:4d:f2:14:3d:e7:ea:b3:91:d0:44
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 95:0a:d3:6a:5b:65:88:c3:f7:71:ed:5a:cf:b1:a7:5f:14:23:e9:98
Fingerprint (sha256): 09:d7:ce:8b:e9:63:c3:30:53:64:ec:9d:16:d5:23:ec:4c:6c:51:8e:a8:aa:66:0c:a0:68:28:93:2f:01:5c:cb

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate www.skatteetaten.no

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.skatteetaten.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.skatteetaten.no
skatteetaten.no

Other certificates including the domain name skatteetaten.no

(limited to 100 certificates)
mx.skatteetaten.no
data.skatteetaten.no
chat.skatteetaten.no
*.app.skatteetaten.no
exchhybrid.skatteetaten.no
confluence.status.atlassian.com
skatteetaten.no
valutareginnrapp.skatteetaten.no
www.skatteetaten.no
skattemeldingen.skatteetaten.no
samarbeid.skatteetaten.no
skatteetaten.no
testdata.api.skatteetaten.no
tjenestertest.skatteetaten.no
www.skatteetaten.no
minmvatest.skatteetaten.no
kurs.skatteetaten.no
iplos.skatteetaten.no
skort.skatteetaten.no
*.cms.skatteetaten.no
skatteetaten.no
sslcertificate3.queue-it.net
valutareginnrapp.skatteetaten.no
minmva.skatteetaten.no
*.app.skatteetaten.no
skdm.skatteetaten.no
sslcertificate3.queue-it.net
minmva.skatteetaten.no
skatteetaten.no
skatteetaten.no
*.app.skatteetaten.no
pya2exp-edge01.skead.no
tips.skatteetaten.no
skatteetaten.no
testdata.api.skatteetaten.no
api.skatteetaten.no
sslcertificate3.queue-it.net
skatt.skatteetaten.no
sslcertificate3.queue-it.net
skattemeldingen.skatteetaten.no
skatteetaten.no
vraking.skatteetaten.no
skatt.skatteetaten.no
adfs.skatteetaten.no
testdata.skatteetaten.no
www.skatteetaten.no
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
skattekalkulator.formueinntekt.skatt.skatteetaten.no
skatt.skatteetaten.no
sslcertificate3.queue-it.net
pya1exp-edge02.skead.no
ssl867246.cloudflaressl.com
pya1exp-edge01.skead.no
venterom.skatteetaten.no
valutareginnrapp-test.skatteetaten.no
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
skatteetaten.no
me.skatteetaten.no
sslcertificate3.queue-it.net
valutareginnrapp.skatteetaten.no
www.skatteetaten.no
data.skatteetaten.no
pya1exp-edge01.skead.no
iplos.skatteetaten.no
pya2exp-edge02.skead.no
skattemeldingen.skatteetaten.no
testdata.skatteetaten.no
sslcertificate3.queue-it.net
me.skatteetaten.no
pya1exp-edge02.skead.no
sslcertificate3.queue-it.net
skatteetaten.no
sslcertificate3.queue-it.net
skatteetaten.no
minmva.skatteetaten.no
exchhybrid.skatteetaten.no
*.skatteetaten.no
iplos.skatteetaten.no
skatteetaten.no
testmva.skatteetaten.no
*.app.skatteetaten.no
www.skatteetaten.no
pya1exp-edge01.skead.no
samarbeid.skatteetaten.no
skatteetaten.no
mx.skatteetaten.no
ssl867247.cloudflaressl.com
sslcertificate3.queue-it.net
skort.skatteetaten.no
skatteetaten.no
sslcertificate3.queue-it.net
sslcertificate3.queue-it.net
skattemeldingen.skatteetaten.no
sslcertificate3.queue-it.net
sip.skatteetaten.no
beta.skatteetaten.no
tjenestertest.skatteetaten.no
szi01.skatteetaten.no

Certificate

The complete raw certificate details for www.skatteetaten.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHJzCCBg+gAwIBAgIQCVjZNLkbU1TbtSrylnTRNDANBgkqhkiG9w0BAQsFADB1
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk
IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTIyMDYwMzAwMDAwMFoXDTIzMDYwMzIz
NTk1OVowgacxEzARBgsrBgEEAYI3PAIBAxMCTk8xGjAYBgNVBA8MEUdvdmVybm1l
bnQgRW50aXR5MRQwEgYDVQQFEws5NzQgNzYxIDA3NjELMAkGA1UEBhMCTk8xDTAL
BgNVBAgTBE9zbG8xDTALBgNVBAcTBE9zbG8xFTATBgNVBAoTDFNrYXR0ZWV0YXRl
bjEcMBoGA1UEAxMTd3d3LnNrYXR0ZWV0YXRlbi5ubzCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBALUA3snJXIN1GHRPBKYbnjSXUOKe7JXFjJauKAnNMpmJ
oyZbnCXPaOP3u1jTm/EsfJftJMF0vEYuo6pbu6OkEnccSQbtCM0tZ5EUeNUoCqzH
au3a5Nk8YJ/fGpTxOBYDu6FBnFZusn/vlb/O+gw3MHhnzLaapEAVjePsXXExEpDl
3y48praoDBYk++TmICW7TLVKJslwhDuQtxSnhmCPB1JTziRwQxxkmTHjdqYKhVhg
dMEEZRdp/QYtkixdYS/7N4yr9/FC6xBHKGF8+nmjh28gIdcKdS/cKN+HIVt8qkAn
34dlnQKX0baX77/RozNp5M9mHPFaq6hacsJl9ZDfsmUCAwEAAaOCA34wggN6MB8G
A1UdIwQYMBaAFD3TUKXWoK3u80pgCmXTIdT4+NYPMB0GA1UdDgQWBBQqb3mddJMm
JJOmTfIUPefqs5HQRDAvBgNVHREEKDAmghN3d3cuc2thdHRlZXRhdGVuLm5vgg9z
a2F0dGVldGF0ZW4ubm8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5odHRwOi8vY3JsMy5kaWdp
Y2VydC5jb20vc2hhMi1ldi1zZXJ2ZXItZzMuY3JsMDSgMqAwhi5odHRwOi8vY3Js
NC5kaWdpY2VydC5jb20vc2hhMi1ldi1zZXJ2ZXItZzMuY3JsMEoGA1UdIARDMEEw
CwYJYIZIAYb9bAIBMDIGBWeBDAEBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cu
ZGlnaWNlcnQuY29tL0NQUzCBiAYIKwYBBQUHAQEEfDB6MCQGCCsGAQUFBzABhhho
dHRwOi8vb2NzcC5kaWdpY2VydC5jb20wUgYIKwYBBQUHMAKGRmh0dHA6Ly9jYWNl
cnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJFeHRlbmRlZFZhbGlkYXRpb25T
ZXJ2ZXJDQS5jcnQwCQYDVR0TBAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFn
AHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGBKJscywAABAMA
RzBFAiBmrI2bcEcPvfjNCMSxaIkdz1u2qpgOhUUmLaE3x5P4dAIhAIjruQl3ikKs
XbaQzkYcmOO9A+TJ+I4yZT31EPqUncLeAHUANc8ZG7+xbFe/D61MbULLu7YnICZR
6j/hKu+oA8M71kwAAAGBKJscoQAABAMARjBEAiA8pJIy5DW3ObX6ywyS6Jv3Qo7Z
q56sXAQnoVDq/vIcGgIgQbk7q6lxickzc+EQDQHYaoGMQ7MwYKsehBqIrsmglUkA
dgCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAAAYEomxzDAAAEAwBH
MEUCIHMYol/OJUlGFOXkOmxIHy9XZTreVwB6+bU3k7SQlPAnAiEAjGctgWMZcrPL
UXeysY636iPsd5hTAZhSRY3vMYnjzj4wDQYJKoZIhvcNAQELBQADggEBAIg3kY67
B3q6Yh2Hhrfh01936xnHbOIjtIUMplpGvcN83NpufwzyhyovJgiAluo3QYD+W5bz
bu48E6tSw8wjcvglfT684k0gozMRtWBSx5U0ruNU59Bm7uzUDCejjtqqCJ6DUSmM
f4Zxv8VmsFDpcP+wQar022cPlxB8o/tappDGCCcXuWOSMYC/HN0t/Whpb/WwTBBb
ypx4bvpOw7N2xm71ATd6yjr3K9SWH5Vab+0g4Y6ZV6LFGaRQK6Vu5Y+7I+MDZNI5
NNMbr8KMRQ7N9rX8KzVhWuzCtE3uyWwr6lTQfW8iNiZy7Vl6po1HZA773b1ZFcoL
gO/aJJDJhiBL3X8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQDeyclcg3UYdE8Ephue
NJdQ4p7slcWMlq4oCc0ymYmjJlucJc9o4/e7WNOb8Sx8l+0kwXS8Ri6jqlu7o6QS
dxxJBu0IzS1nkRR41SgKrMdq7drk2Txgn98alPE4FgO7oUGcVm6yf++Vv876DDcw
eGfMtpqkQBWN4+xdcTESkOXfLjymtqgMFiT75OYgJbtMtUomyXCEO5C3FKeGYI8H
UlPOJHBDHGSZMeN2pgqFWGB0wQRlF2n9Bi2SLF1hL/s3jKv38ULrEEcoYXz6eaOH
byAh1wp1L9wo34chW3yqQCffh2WdApfRtpfvv9GjM2nkz2Yc8VqrqFpywmX1kN+y
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12424379545651512177527118997751124276
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '974 761 076'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oslo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oslo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Skatteetaten'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.skatteetaten.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22849562343271400719056696661368601165273168420423787622267836416119036545150838241159695818137130851990813409250588245627091614530950417160520227127461079860455193137029259861871238306838376166404065039518578472043291862876384320297284311418696599218407389256317627191953750924271874958851252348056127460922703640048212100428576941625849363541879990984484514540791982197177200135082325293745300448248495871898944004650946563071061362458529432163827245883976029727021280583437446635259891627793699675590396484070843699084732722965723935384572854663728990584422523750466448252313581106143313438537246596760399213736549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a6f799d7493262493a64df2143de7eab391d044
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skatteetaten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skatteetaten.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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