pt-ecomm.cvshealth.com

- CVS Pharmacy Inc -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:e6:5c:a0:15:0e:f5:3c:7e:d9:96:94:4e:e1:d6:e3 was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CVS Pharmacy Inc

Organization: CVS Pharmacy Inc
State / Province: Rhode Island
Locality: Woonsocket
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:e6:5c:a0:15:0e:f5:3c:7e:d9:96:94:4e:e1:d6:e3
Serial Number (int): 11829930908449143837221789971878368995
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 76:60:31:8d:0e:e5:5b:e3:bf:e5:71:75:26:6f:35:81:8c:13:69:12
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 80:46:d4:ee:56:dc:8e:ec:46:40:0b:ca:21:4a:fd:d6:68:55:62:4c
Fingerprint (sha256): 0a:32:0c:dd:08:d7:1c:c6:e8:3a:c3:c5:03:91:e4:78:6c:4b:2a:49:2b:4d:12:4b:1f:bd:55:0f:35:18:16:c6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate pt-ecomm.cvshealth.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pt-ecomm.cvshealth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pt-ecomm.cvshealth.com
pt-bellcenter.cvshealth.com
pt1-ecomm.cvshealth.com
pt2-ecomm.cvshealth.com
pt3-ecomm.cvshealth.com
pt4-ecomm.cvshealth.com
pt-ste-ms.cvshealth.com
pt-csr-ecomm.cvshealth.com

Other certificates including the domain name cvshealth.com

(limited to 100 certificates)
habitat-depot.cic.cvshealth.com
oclzeta.cvshealth.com
psfb.corp.cvscaremark.com
eastscim.corp.cvscaremark.com
ri-spm-dev21.retail-spm-east.cic.cvshealth.com
rsfb.corp.cvscaremark.com
openstack-east.cic.cvshealth.com
assets-sit3.cvshealth.com
ocl_alpha.cvshealth.com
rri2tibapa1.corp.cvscaremark.com
ngaxpcanprod.cvshealth.com
caremark.com
secureappslb.caremark.com
mypassword.cvshealth.com
b2b.cvshealth.com
rri2tibapa1.corp.cvscaremark.com
DevFieldEncryption.cvshealth.com
pazshdcf5intprd2.cvshealth.com
FederationE.cvscaremark.com
OAZ1INTDQW1V.cloudad.cic.cvshealth.com
stressiibip.cvshealth.com
cvsservicemgr-uat.cvs.com
*.aseprod.cvshealth.com
R-RIWOON-F5-DIS2-vCMP1.cvshealth.com
testwww.caremark.com
*.QAIP.CVSHEALTH.COM
digital-retail-rx-prod.dr.cvshealth.com
uatmftservices.cvshealth.com
RRI1ASEWPW2V.corp.cvscaremark.com
pt-metrics.cvshealth.com
rricudcf5webdmzs10-01-Bv.cvshealth.com
rricudcf5webdmzs09-01-Av.cvshealth.com
PAZ1ASEWUW1V.corp.cvscaremark.com
mylife-pt.cvshealth.com
sandbox.digital-services.cvshealth.com
c5401021vcc008.aeth.aetna.com
ocliota.cvshealth.com
omnicon.cvshealth.com
digital-retail-rx-dev.cvshealth.com
www.heartbeat-dev1.api.cvshealth.com
oclepsilon.cvshealth.com
prod-bellcenter.cvshealth.com
PAZ1ASEWUW4V.corp.cvscaremark.com
argocd-qa-ohs-ms.cvshealth.com
AetO365.cvshealth.com
assets-sit2.cvshealth.com
cvshealth.com
mytableauinsights.cvshealth.com
qaapih8.aetna.com
pazshdcf5as4exp-01vCMP2.cvshealth.com
apigee-sw-non-prod.cvshealth.com
apih7.aetna.com
wallet-dev.cvshealth.com
sprx-azuat0.cvshealth.com
devhl7.cvshealth.com
testgrc.cvshealth.com
digital-retail-rx-prod.cvshealth.com
paz1prowtw10v.corp.cvscaremark.com
mattermost.cvshealth.com
digital-specialty-rx-prod.cvshealth.com
test4vcert.azuread.cvshealth.com
openstack.pt1.cic.cvshealth.com
FederationE.cvscaremark.com
dev-services.west.cvshealthcloud.com
sprx-sit1.cvshealth.com
mattermost.cvshealth.com
twistlockconsole.healthehost.com
paz1rproxf5pa7p.caremarkrx.net
mylife-pt.cvshealth.com
ocldelta.cvshealth.com
ftp-medd.cvshealth.com
oaz1drsdd1l1v.pbm-eom-west.cic.cvshealth.com
epp-fhir.cvshealth.com
DLP.cvshealth.com
sprx-dr.cvshealth.com
epp.cvshealth.com
dev-digital-auditlogs.cvshealth.com
iot.dev.cvshealth.com
www.cvs.com
vv-images-prod.cvshealth.com
riwssbc460extp-01.cvshealth.com
api.bam-notification-receiver.cvshealth.com
OAZ1CTMWTW1V.cloudad.cic.cvshealth.com
rsfb.corp.cvscaremark.com
uipathapps-qa.cvshealth.com
san-9-s10.tlsprovisioning.exacttarget.com
uat.omnicare.com
ocp-devwww33.aetna.com
pbmcti.cvshealth.com
cteiibip.cvshealth.com
ri-spm-dev21.retail-spm-east.cic.cvshealth.com
Pazshdcf5intprdtt6-2-2-B.cvshealth.com
cvscaremark.com
www.caremark.com
ori1appdw1v.cloudad.cic.cvshealth.com
apih78.aetna.com
AWspacetest.cvshealth.com
cloud.e.healthcloud.cvshealth.com
pt-ecomm.cvshealth.com
tririga-pt.cvshealth.com

Certificate

The complete raw certificate details for pt-ecomm.cvshealth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW+z+BegSTqwjWq85GKc
dpCIjvhbGqpU1x1wrOJpYeYrsb8oqyDbdbPIkmcJ7qY0yuo7xPm4ErsGEThdjD0Q
UhmZUwTOz+aaUcYaP10mgcF72fAJ4Nx8QzRJXLKS1nUN1jmFYh2LKyQ4nfBF9e77
/tDz/aVzsjKTdjmKfq2LOKOj9HbwGGi31JVMkCXVBtyq7onsY/9y/bSbk78GRFiw
Ft+NIsupwcL8QsqM2ceGmJoSO7qLknK7gkrbgbfT+ClFsaSfiZWDtV3WwGOTlWqH
Aotjpj6gq4KDIjbHelbGsNyD0GIOazIs4ykH3oJmW0Dl2ugfXoWt6o6rpdkAyVYx
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11829930908449143837221789971878368995
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rhode Island'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Woonsocket'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CVS Pharmacy Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pt-ecomm.cvshealth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23409169223124105025249784427086977623706368091853873275365799025772632697859694937899594180531212319144324916602545434348800352702098978885227410704816731620999098204460518726118320314154474622460546227598161189309409868543815133930757133403720271517734447441364113515924882753305555300256644086265362005068575392142054399736535553857615740957347791335373937904999675126432267234900621542862929736095340523768572779080497953012703332965513724488311528683260068101392408614164967679464005218725668927795967510843880568536995433792793232799473627478858300097913861880250444329893886883130066250283603134158023054209483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7660318d0ee55be3bfe57175266f35818c136912
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (209 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt-ecomm.cvshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt-bellcenter.cvshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt1-ecomm.cvshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt2-ecomm.cvshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt3-ecomm.cvshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt4-ecomm.cvshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt-ste-ms.cvshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt-csr-ecomm.cvshealth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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