brion.bri.co.id

- PT. Bank Rakyat Indonesia (Persero) Tbk -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:5e:d7:b0:5a:65:0b:57:07:61:05:5d:44:e9:9d:ab was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

PT. Bank Rakyat Indonesia (Persero) Tbk

Organization: PT. Bank Rakyat Indonesia (Persero) Tbk
Locality: Jakarta Pusat
Country: ID

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:5e:d7:b0:5a:65:0b:57:07:61:05:5d:44:e9:9d:ab
Serial Number (int): 9797046565393878470204973039527501227
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d5:49:1a:ee:49:c6:fa:4e:c9:0a:b5:98:74:f2:5f:c3:db:ac:41:6c
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 24:a2:d7:f3:da:95:8f:7e:95:d0:02:f1:79:cd:81:ce:ca:08:17:45
Fingerprint (sha256): 0a:69:36:88:ca:35:b4:bf:e8:44:8b:9d:a6:f0:50:31:7f:7e:ef:72:56:71:a0:da:4d:5d:8d:c7:b5:93:8f:c4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate brion.bri.co.id

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brion.bri.co.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brion.bri.co.id

Other certificates including the domain name bri.co.id

(limited to 100 certificates)
ibank.bri.co.id
3dsecure2.bri.co.id
brisim.bri.co.id
brimo.bri.co.id
junio-smart.bri.co.id
brimola.bri.co.id
mobilecc.bri.co.id
api.briconnect.bri.co.id
webmail.bri.co.id
content.makna.bri.co.id
commercialcard.bri.co.id
alert.bri.co.id
brilinkmobile.bri.co.id
infolelang.bri.co.id
*.bri.co.id
cabincrew.bri.co.id
britouch.bri.co.id
brismartapi.bri.co.id
briefx.bri.co.id
ib.bri.co.id
prowlth.bri.co.id
webmail1.bri.co.id
apimybri.bri.co.id
br1-ws-is2.corp.bri.co.id
brion.bri.co.id
mobilecc.bri.co.id
*.bigdata.bri.co.id
api.panen.bri.co.id
jadimerchant.bri.co.id
brinvoice.bri.co.id
pos.makna.bri.co.id
ibank.bri.co.id
webmail.bri.co.id
api.bristars.bri.co.id
digital.bri.co.id
ib.bri.co.id
sbn.bri.co.id
brilink.bri.co.id
app.ceria.bri.co.id
ib.bri.co.id
webmail.bri.co.id
eform.bri.co.id
3dsecure2.bri.co.id
agen.bri.co.id
fois.bri.co.id
apidocs.bri.co.id
api.bri.co.id
mobile.bri.co.id
api-staging.brispot.bri.co.id
ibank-tbn.bri.co.id
agen.bri.co.id
apps.bri.co.id
app.ceria.bri.co.id
developers.bri.co.id
bri.co.id
api.bristars.bri.co.id
prioritas.bri.co.id
cdn.wirausahabrilian.bri.co.id
ib.bri.co.id
tmsverifone.bri.co.id
s3.brimo.bri.co.id
br1-ws-is1.corp.bri.co.id
apilpdp.bri.co.id
login.work.bri.co.id
ambilin.bri.co.id
wirausahabrilian.bri.co.id
br1-ws-is2.corp.bri.co.id
apimybri.bri.co.id
mis.bri.co.id
rbaweb.bri.co.id
apps.bri.co.id
portalbgrepo.bri.co.id
sandbox.partner.api.bri.co.id
brieazycash-api.bri.co.id
3dsecure.bri.co.id
webmail1.bri.co.id
incapsula.com
openbsa.bri.co.id
myqrservice.bri.co.id
iumk.bri.co.id
biz.bri.co.id
briefx.bri.co.id
biz.bri.co.id
brieazycash.bri.co.id
brisolutions.bri.co.id
ceria-payment-sandbox.bri.co.id
*.digiporto.bri.co.id
cdn.wirausahabrilian.bri.co.id
*.bri.co.id
eform.bri.co.id
mobilemms.bri.co.id
brv.bri.co.id
mybri.bri.co.id
pasarbrilink.bri.co.id
merchant.ceria.bri.co.id
bri.co.id
brilinkers-admin.bri.co.id
sandbox.partner.api.bri.co.id
merchant.ceria.bri.co.id
qlola.bri.co.id

Certificate

The complete raw certificate details for brion.bri.co.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGuTCCBaGgAwIBAgIQB17XsFplC1cHYQVdROmdqzANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjMxMjAyMDAwMDAwWhcN
MjQxMjAzMjM1OTU5WjBxMQswCQYDVQQGEwJJRDEWMBQGA1UEBxMNSmFrYXJ0YSBQ
dXNhdDEwMC4GA1UEChMnUFQuIEJhbmsgUmFreWF0IEluZG9uZXNpYSAoUGVyc2Vy
bykgVGJrMRgwFgYDVQQDEw9icmlvbi5icmkuY28uaWQwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDtEIuzbdVrbXBaStlSpfI73yW+jPVCOJq3V1zd6jJM
Ap58Tx/riUnsmEcjLfu9zd3FdwGmRsqtAgy8izgCFQS2/1yvGHcZs7V88K7woEWs
Mv047KZaWY1zzZa2uJZLJFSdzDHoSo1HEhdYwXDwyQ8hnYsNsnoKvjbXVtQR0oQ8
zOaXEhjpQeay4/37g+/xTXA6EIeIIJg39qhm2YiUlNgtAn35V2VxMAF4lfxdYSrq
uQHqYOyFaVqGrTVp0LTXf98ipljcesKHavhZwVE/wco/zUIF2e54uhe6n66tRfX0
2zGO8a7KFKGha3LpcG7Px0fWHdwTFzgVr4xQNIL9HnJnAgMBAAGjggNvMIIDazAf
BgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQU1Uka7knG
+k7JCrWYdPJfw9usQWwwGgYDVR0RBBMwEYIPYnJpb24uYnJpLmNvLmlkMD4GA1Ud
IAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNl
cnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMIGNBgNVHR8EgYUwgYIwP6A9oDuGOWh0dHA6Ly9jcmwzLmRpZ2lj
ZXJ0LmNvbS9EaWdpY2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS0xLmNybDA/oD2gO4Y5
aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2ljZXJ0U0hBMlNlY3VyZVNlcnZl
ckNBLTEuY3JsMH4GCCsGAQUFBwEBBHIwcDAkBggrBgEFBQcwAYYYaHR0cDovL29j
c3AuZGlnaWNlcnQuY29tMEgGCCsGAQUFBzAChjxodHRwOi8vY2FjZXJ0cy5kaWdp
Y2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EtMi5jcnQwDAYDVR0T
AQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA7s3QZNXbGs7FXLed
tM0TojKHRny87N7DUUhZRnEftZsAAAGMKsY/NgAABAMARzBFAiAv6CClboYOMv25
/F6hDdSbqeJY6xaC5PjMaL/d5InPcQIhAOMA1lHxyoa3Zi1CJ4TwfAewjfJUYIsn
gQj3mK7jpiXFAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGM
KsY/KwAABAMARzBFAiAz6yivV29fyMlTYEDIOimY/oolH06WXdP3Pd3UulMfaQIh
ALDeZhnz6fVxVKKzYXVxZLmclQHUAGg0lnttaTXIITVNAHYAPxdLT9ciR1iUHWUc
hL4NEu2QN38fhWrrwb8ohez4ZG4AAAGMKsY/bQAABAMARzBFAiAUers8JGIxiF4R
ejf9cckaPJqbq6tIWPBI6TOq/6eJCQIhAKJ81K4bojVg1B7PkaKOTUvC37JBjo+b
Bdv52saEY+lOMA0GCSqGSIb3DQEBCwUAA4IBAQAeTKvFF4aT46cf4gMzhRa0PAPQ
xrnarXN2ZUnyBtvMM9DSTbotX5pb/IaLTXKkBv038Uv3TPtJnFeZXCkKpLnPMB30
ZDEhpCrv+Judr7AzG0Z4j3clD214SiNQjczyIUgcne2Gw78EP0A/phN9S9aCgzAR
rG34vFm42HU54tuU3bYIG0HpKJupXbMrEzNyKZuFjT3viqvnTuxoLgBx1JVM1uTp
cA6n2lCngiDkyNWQH8HBIvmc1ErnYh7/nBI8kQbFoiJrBH2BymcRexv3zvCMqhph
pXde/OcGhHI/p0OHITkFd3lWIegkugsHC5yAuV+51RKkCmUnAoi+W/HVzNth
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RCLs23Va21wWkrZUqXy
O98lvoz1Qjiat1dc3eoyTAKefE8f64lJ7JhHIy37vc3dxXcBpkbKrQIMvIs4AhUE
tv9crxh3GbO1fPCu8KBFrDL9OOymWlmNc82WtriWSyRUncwx6EqNRxIXWMFw8MkP
IZ2LDbJ6Cr4211bUEdKEPMzmlxIY6UHmsuP9+4Pv8U1wOhCHiCCYN/aoZtmIlJTY
LQJ9+VdlcTABeJX8XWEq6rkB6mDshWlahq01adC013/fIqZY3HrCh2r4WcFRP8HK
P81CBdnueLoXup+urUX19NsxjvGuyhShoWty6XBuz8dH1h3cExc4Fa+MUDSC/R5y
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9797046565393878470204973039527501227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jakarta Pusat'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT. Bank Rakyat Indonesia (Persero) Tbk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brion.bri.co.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29926637268979933255974582068660168036115284661914914792330689185869707825670811606865161118083307947715115540712986049162951310950446886918619348522675657251828948926600049279921795937645972864092917924098494136463059861881366734673280484059652964006143654213723912691644112252248095992044183315281261706965907302345894791649755541016207507514978250456856773332350658953528242969399043216634623903527713073980440242852338260765197621573215319431207455657762906923329227232884775006626211910874130545463990635986627820792022166318187747188312540999652429241589680794817344947623746223234253929614733635197821876335207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5491aee49c6fa4ec90ab59874f25fc3dbac416c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brion.bri.co.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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