www.maestro.io

- Maestro Interactive Inc -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:0b:62:b6:7f:e9:e7:a6:20:0d:82:3d:e6:f5:64:b2 was issued on by DigiCert Inc.

With 112 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Maestro Interactive Inc

Organization: Maestro Interactive Inc
State / Province: California
Locality: Culver City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:0b:62:b6:7f:e9:e7:a6:20:0d:82:3d:e6:f5:64:b2
Serial Number (int): 19997537337471726551689667055325635762
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8e:84:d3:14:40:91:70:ca:98:da:fc:27:1a:67:6e:a8:27:92:60:6e
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 39:af:99:45:3d:93:a5:24:70:13:67:bc:b6:e2:4f:82:78:e2:5d:9d
Fingerprint (sha256): 0a:cd:4c:be:62:02:65:ce:59:14:2f:a5:f4:bd:4d:ba:ea:b8:82:c8:c3:25:86:43:55:50:66:07:c6:9d:f8:ca

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.maestro.io

112

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.maestro.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.maestro.io
live.gearsofwar.com
live.monstercat.com
live.startupgrind.com
live.ubisoft.com
sapphire.maestro.io
pearl.maestro.io
onyx.maestro.io
silver.maestro.io
diamond.maestro.io
www.bowltv.com
crystal.maestro.io
watch.sportsmax.tv
static.maestro.io
upload.maestro.io
developers.maestro.io
live.overwatchleague.com
live.cottonwood.org
media.maestro.io
live.complexity.gg
live.enewhope.org
live.halo.gg
gameday.andbox.com
live.crossroadschurch.net
worldcup.fortnite.com
claim.maestro.io
watch.fortnite.com
live.victoryatl.com
gaming.lenovo.com
stream.baduworldmarket.com
www.victorypromotionlive.com
watch.knights.gg
watch.streamticket.tv
watch.streamthegirls.com
watch.theinfatuationacademy.com
watch.earthdaylive2020.org
live.retrohash.com
watch.ambassco.com
www.roomservicefest.com
watch.dallascowboys.com
live.dctop20.com
uprisinglive.overwatchleague.com
watch.unskrypted.tv
live.peachtreerascal.store
tv.thehundreds.com
uforiamusic.univision.com
live.easleyblessed.com
www.vegovirtual.com
onstage.stadio.live
www.launchglobal.tv
watch.stadiaventures.com
watch.theinfatuation.com
live.virtualtattoogathering.com
live.laurieberkner.com
live.empowered21.com
www.etheridgetv.com
live.shopxxxtentacion.com
live.cnas.org
live.vidcon.com
avengers-wartable.square-enix-games.com
events.picturemotion.com
live.envy.gg
live.adweek.com
live.outcomesseries.com
live.tabletmag.com
live.trivium.org
live.pandora.com
www.protestparty.tv
live.udiscovermusic.com
live2.udiscovermusic.com
live3.udiscovermusic.com
www.pseweb.live
www.mau5trap.tv
www.gallolive.com
conventionlive.aft.org
live.fantracks.com
www.factoryfrontera.tv
live.timmcgraw.com
www.aftconvention.org
premium.bandsintown.com
streamit.nmrevents.com
live.atlanticrecords.com
aftconvention.org
www.info.maestro.io
factoryfrontera.tv
watch.livesounds.tv
live.katyperry.com
events.startingatzerofilm.com
watch.frontrow.dev
livestream.thestreetsmusic.co.uk
live.boilerroom.tv
www.cap-2021.com
watch.gtliveathome.com
www.futurelive.live
live.miyavi.com
www.ariandolivia.com
watch.livenation.com
events.demconvention.com
live.fanduel.com
live.funkfesttv.com
usopen.media
live.keithurban.net
bacconvention.org
watch.tokyosessions.com
live.comedystore.com
streaming.viniksportsgroup.com
live.twoheadeddreams.com
www.cbiwsvirtual.com
universal-inside-digital-edition.universal-music.de
live.up.auone.jp
live.betches.com
lalive.asiasociety.org

Other certificates including the domain name maestro.io

(limited to 100 certificates)
dns-vetting1c.map.fastly.net
blog.maestro.io
sni59702.cloudflaressl.com
www.maestro.io
f.ssl.fastly.net
api.us-central1-devops.gcp.maestro.io
info.maestro.io
sni.cloudflaressl.com
sni59702.cloudflaressl.com
sni59702.cloudflaressl.com
info.maestro.io
coppincamps.com
s.ssl.fastly.net
f.ssl.fastly.net
www.maestro.io
www.maestro.io
www.maestro.io
www.maestro.io
info.maestro.io
sni59702.cloudflaressl.com
grafana.us-central1-master.gcp.maestro.io
dns-vetting1c.map.fastly.net
dns-vetting1c.map.fastly.net
www.maestro.io
sni59702.cloudflaressl.com
sni59702.cloudflaressl.com
www.vodio.org
dns-vetting1c.map.fastly.net
sni59702.cloudflaressl.com
sni59702.cloudflaressl.com
sni59702.cloudflaressl.com
sni59702.cloudflaressl.com
sni59702.cloudflaressl.com
www.maestro.io
dns-vetting1c.map.fastly.net
sni59702.cloudflaressl.com
f.ssl.fastly.net
f.ssl.fastly.net
dns-vetting1c.map.fastly.net
dns-vetting1c.map.fastly.net
www.maestro.io
sni59702.cloudflaressl.com
www.maestro.io
www.maestro.io
sni59702.cloudflaressl.com
www.maestro.io
www.maestro.io
upload.maestro.io
info.maestro.io
dns-vetting1c.map.fastly.net
dns-vetting1c.map.fastly.net
carcheck.city
www.maestro.io
www.maestro.io
info.maestro.io
sni59702.cloudflaressl.com
go.maestro.io
sni59702.cloudflaressl.com
dns-vetting1c.map.fastly.net
sni59702.cloudflaressl.com
dns-vetting1c.map.fastly.net
www.maestro.io
www.maestro.io
www.maestro.io
www.maestro.io
dns-vetting1c.map.fastly.net
sni59702.cloudflaressl.com
info.maestro.io
authenticate.us-central1-load.gcp.maestro.io
sni59702.cloudflaressl.com
sni59702.cloudflaressl.com
www.maestro.io
www.maestro.io
sni59702.cloudflaressl.com
dns-vetting1c.map.fastly.net
dns-vetting1c.map.fastly.net
s.ssl.fastly.net
www.maestro.io
dns-vetting1c.map.fastly.net
sni59702.cloudflaressl.com
www.maestro.io
sni59702.cloudflaressl.com
dns-vetting1c.map.fastly.net
sni59702.cloudflaressl.com
applicationsoap.beezsocialerp.com
dns-vetting1c.map.fastly.net
www.maestro.io
dns-vetting1c.map.fastly.net
sni59702.cloudflaressl.com
sni59702.cloudflaressl.com
www.maestro.io
alertmanager.us-central1-dev.gcp.maestro.io
sni59702.cloudflaressl.com
sni59702.cloudflaressl.com
dns-vetting1c.map.fastly.net
s.ssl.fastly.net
www.maestro.io
sni59702.cloudflaressl.com
s.ssl.fastly.net
sni59702.cloudflaressl.com

Certificate

The complete raw certificate details for www.maestro.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIP5zCCDs+gAwIBAgIQDwtitn/p56YgDYI95vVksjANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjAwOTEwMDAwMDAwWhcN
MjAxMjIzMTIwMDAwWjBzMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p
YTEUMBIGA1UEBxMLQ3VsdmVyIENpdHkxIDAeBgNVBAoTF01hZXN0cm8gSW50ZXJh
Y3RpdmUgSW5jMRcwFQYDVQQDEw53d3cubWFlc3Ryby5pbzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANMFwILqFoSU+SQNRMj81CCYKGoSflZ7xDrK5o0/
tTjNp2hc/q/XOda8JmiuNd0q5uNEPwTYNE0W8tIoW2zRPROakzhQlDVyFKBCTSvs
ZwuRbeSyPGcZE4DcT1XIUQzo/BinSROJdhUhTtsFckC0INZWxrQ5hMzWYwdLzaZ3
1S+OdsWv4FiKUZVicSO4he9Wt8A3HXCjAe3HPg/J34PNBUzcrNqHUBu654u3y1P/
NRPW7q/QyOOmSUdogwPNWqrbcmy8zuPlxEvNJ7tvNMJuPd1n09gpVIue1jbu8rCW
5riHO/cl8sufdqNhhUZ8K0ZGMCHqIP8aSm1DnfXgwPBpg5ECAwEAAaOCDJswggyX
MB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBSOhNMU
QJFwypja/CcaZ26oJ5JgbjCCCdUGA1UdEQSCCcwwggnIgg53d3cubWFlc3Ryby5p
b4ITbGl2ZS5nZWFyc29md2FyLmNvbYITbGl2ZS5tb25zdGVyY2F0LmNvbYIVbGl2
ZS5zdGFydHVwZ3JpbmQuY29tghBsaXZlLnViaXNvZnQuY29tghNzYXBwaGlyZS5t
YWVzdHJvLmlvghBwZWFybC5tYWVzdHJvLmlvgg9vbnl4Lm1hZXN0cm8uaW+CEXNp
bHZlci5tYWVzdHJvLmlvghJkaWFtb25kLm1hZXN0cm8uaW+CDnd3dy5ib3dsdHYu
Y29tghJjcnlzdGFsLm1hZXN0cm8uaW+CEndhdGNoLnNwb3J0c21heC50doIRc3Rh
dGljLm1hZXN0cm8uaW+CEXVwbG9hZC5tYWVzdHJvLmlvghVkZXZlbG9wZXJzLm1h
ZXN0cm8uaW+CGGxpdmUub3ZlcndhdGNobGVhZ3VlLmNvbYITbGl2ZS5jb3R0b253
b29kLm9yZ4IQbWVkaWEubWFlc3Ryby5pb4ISbGl2ZS5jb21wbGV4aXR5LmdnghFs
aXZlLmVuZXdob3BlLm9yZ4IMbGl2ZS5oYWxvLmdnghJnYW1lZGF5LmFuZGJveC5j
b22CGWxpdmUuY3Jvc3Nyb2Fkc2NodXJjaC5uZXSCFXdvcmxkY3VwLmZvcnRuaXRl
LmNvbYIQY2xhaW0ubWFlc3Ryby5pb4ISd2F0Y2guZm9ydG5pdGUuY29tghNsaXZl
LnZpY3RvcnlhdGwuY29tghFnYW1pbmcubGVub3ZvLmNvbYIac3RyZWFtLmJhZHV3
b3JsZG1hcmtldC5jb22CHHd3dy52aWN0b3J5cHJvbW90aW9ubGl2ZS5jb22CEHdh
dGNoLmtuaWdodHMuZ2eCFXdhdGNoLnN0cmVhbXRpY2tldC50doIYd2F0Y2guc3Ry
ZWFtdGhlZ2lybHMuY29tgh93YXRjaC50aGVpbmZhdHVhdGlvbmFjYWRlbXkuY29t
ghp3YXRjaC5lYXJ0aGRheWxpdmUyMDIwLm9yZ4ISbGl2ZS5yZXRyb2hhc2guY29t
ghJ3YXRjaC5hbWJhc3Njby5jb22CF3d3dy5yb29tc2VydmljZWZlc3QuY29tghd3
YXRjaC5kYWxsYXNjb3dib3lzLmNvbYIQbGl2ZS5kY3RvcDIwLmNvbYIgdXByaXNp
bmdsaXZlLm92ZXJ3YXRjaGxlYWd1ZS5jb22CE3dhdGNoLnVuc2tyeXB0ZWQudHaC
GmxpdmUucGVhY2h0cmVlcmFzY2FsLnN0b3JlghJ0di50aGVodW5kcmVkcy5jb22C
GXVmb3JpYW11c2ljLnVuaXZpc2lvbi5jb22CFmxpdmUuZWFzbGV5Ymxlc3NlZC5j
b22CE3d3dy52ZWdvdmlydHVhbC5jb22CE29uc3RhZ2Uuc3RhZGlvLmxpdmWCE3d3
dy5sYXVuY2hnbG9iYWwudHaCGHdhdGNoLnN0YWRpYXZlbnR1cmVzLmNvbYIYd2F0
Y2gudGhlaW5mYXR1YXRpb24uY29tgh9saXZlLnZpcnR1YWx0YXR0b29nYXRoZXJp
bmcuY29tghZsaXZlLmxhdXJpZWJlcmtuZXIuY29tghRsaXZlLmVtcG93ZXJlZDIx
LmNvbYITd3d3LmV0aGVyaWRnZXR2LmNvbYIZbGl2ZS5zaG9weHh4dGVudGFjaW9u
LmNvbYINbGl2ZS5jbmFzLm9yZ4IPbGl2ZS52aWRjb24uY29tgidhdmVuZ2Vycy13
YXJ0YWJsZS5zcXVhcmUtZW5peC1nYW1lcy5jb22CGGV2ZW50cy5waWN0dXJlbW90
aW9uLmNvbYIMbGl2ZS5lbnZ5Lmdngg9saXZlLmFkd2Vlay5jb22CF2xpdmUub3V0
Y29tZXNzZXJpZXMuY29tghJsaXZlLnRhYmxldG1hZy5jb22CEGxpdmUudHJpdml1
bS5vcmeCEGxpdmUucGFuZG9yYS5jb22CE3d3dy5wcm90ZXN0cGFydHkudHaCF2xp
dmUudWRpc2NvdmVybXVzaWMuY29tghhsaXZlMi51ZGlzY292ZXJtdXNpYy5jb22C
GGxpdmUzLnVkaXNjb3Zlcm11c2ljLmNvbYIPd3d3LnBzZXdlYi5saXZlgg93d3cu
bWF1NXRyYXAudHaCEXd3dy5nYWxsb2xpdmUuY29tghZjb252ZW50aW9ubGl2ZS5h
ZnQub3JnghJsaXZlLmZhbnRyYWNrcy5jb22CFnd3dy5mYWN0b3J5ZnJvbnRlcmEu
dHaCEmxpdmUudGltbWNncmF3LmNvbYIVd3d3LmFmdGNvbnZlbnRpb24ub3Jnghdw
cmVtaXVtLmJhbmRzaW50b3duLmNvbYIWc3RyZWFtaXQubm1yZXZlbnRzLmNvbYIY
bGl2ZS5hdGxhbnRpY3JlY29yZHMuY29tghFhZnRjb252ZW50aW9uLm9yZ4ITd3d3
LmluZm8ubWFlc3Ryby5pb4ISZmFjdG9yeWZyb250ZXJhLnR2ghN3YXRjaC5saXZl
c291bmRzLnR2ghJsaXZlLmthdHlwZXJyeS5jb22CHWV2ZW50cy5zdGFydGluZ2F0
emVyb2ZpbG0uY29tghJ3YXRjaC5mcm9udHJvdy5kZXaCIGxpdmVzdHJlYW0udGhl
c3RyZWV0c211c2ljLmNvLnVrghJsaXZlLmJvaWxlcnJvb20udHaCEHd3dy5jYXAt
MjAyMS5jb22CFndhdGNoLmd0bGl2ZWF0aG9tZS5jb22CE3d3dy5mdXR1cmVsaXZl
LmxpdmWCD2xpdmUubWl5YXZpLmNvbYIUd3d3LmFyaWFuZG9saXZpYS5jb22CFHdh
dGNoLmxpdmVuYXRpb24uY29tghhldmVudHMuZGVtY29udmVudGlvbi5jb22CEGxp
dmUuZmFuZHVlbC5jb22CE2xpdmUuZnVua2Zlc3R0di5jb22CDHVzb3Blbi5tZWRp
YYITbGl2ZS5rZWl0aHVyYmFuLm5ldIIRYmFjY29udmVudGlvbi5vcmeCF3dhdGNo
LnRva3lvc2Vzc2lvbnMuY29tghRsaXZlLmNvbWVkeXN0b3JlLmNvbYIec3RyZWFt
aW5nLnZpbmlrc3BvcnRzZ3JvdXAuY29tghhsaXZlLnR3b2hlYWRlZGRyZWFtcy5j
b22CFHd3dy5jYml3c3ZpcnR1YWwuY29tgjN1bml2ZXJzYWwtaW5zaWRlLWRpZ2l0
YWwtZWRpdGlvbi51bml2ZXJzYWwtbXVzaWMuZGWCEGxpdmUudXAuYXVvbmUuanCC
EGxpdmUuYmV0Y2hlcy5jb22CFmxhbGl2ZS5hc2lhc29jaWV0eS5vcmcwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8E
ZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2
LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1n
Ni5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0
cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEE
cDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYB
BQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJT
ZWN1cmVTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADCCAQQGCisGAQQB1nkCBAIE
gfUEgfIA8AB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABdHaT
hTUAAAQDAEcwRQIhAICZIz8ek+NrTI3WJiygLeamst0WvEuAIjIdauT6k+UdAiAb
09PkighbJuuEUz++9Hoh1jWel8NYK5nLLtNhQ8q01QB2AF6nc/nfVsDntTZIfdBJ
4DJ6kZoMhKESEoQYdZaBcUVYAAABdHaThUgAAAQDAEcwRQIgBvZS6UuYZHydVxOP
c345Tnt8KWlIRnXWpSlyAtHpqz4CIQC5Yf53vQ0lz6YKynAyNFWYNZ8ns3HSlIk7
fWEXd5RxTjANBgkqhkiG9w0BAQsFAAOCAQEAHcXc7gfu9hZb5t7J6waStKgkIUPn
nIdb9J781uBOkBWHsxrmrbWxGZBeU30fEcoBPDFihIJtW3iteiAg5I8xLUuby8oM
ZP9BuTEp+qz7s4dZbWfAidECdk7z7qIMYW5Zp9bTDBRUHYYvXNxNYKpmSUt9wl8y
RpZOChqM/FPMRnkJAULk2tr+4rHY3zi3WCCIOIWcKQiDzkjFQv8xrJRG3ypGVZnl
98/Gm9uCxaAOkFpXz3xoxP30ikNIhot94LbBj0xAdl64uEzC2KWulqEI7V/MFFDy
fDMUuqpIuprnyX3Wmll0dHAAHAjgCvxPqWUjjTlD4gwqMo7/6SEKiVKVCw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wXAguoWhJT5JA1EyPzU
IJgoahJ+VnvEOsrmjT+1OM2naFz+r9c51rwmaK413Srm40Q/BNg0TRby0ihbbNE9
E5qTOFCUNXIUoEJNK+xnC5Ft5LI8ZxkTgNxPVchRDOj8GKdJE4l2FSFO2wVyQLQg
1lbGtDmEzNZjB0vNpnfVL452xa/gWIpRlWJxI7iF71a3wDcdcKMB7cc+D8nfg80F
TNys2odQG7rni7fLU/81E9bur9DI46ZJR2iDA81aqttybLzO4+XES80nu280wm49
3WfT2ClUi57WNu7ysJbmuIc79yXyy592o2GFRnwrRkYwIeog/xpKbUOd9eDA8GmD
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19997537337471726551689667055325635762
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Culver City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maestro Interactive Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.maestro.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26639118763567277538365161059438231489292323722456472465080734762783417680004450383826243070036727320145207096938925822532538784620061180331882736769570912079397247853034669450659897412828893946860944315882839545627393471406794211256574675331737264928491331259321713767755436471192452022606550941085176958284166179120819909906349985743158669194301513248647264801584497508821018497482435790780073885140955050406603525792879398662059405268829180772166679138637695171047640583203133085327146607508853218703630382930402846913359516311134517857470434951882872684433730690811717012857372011728805435797455127417773550568337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e84d314409170ca98dafc271a676ea82792606e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2508 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maestro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.gearsofwar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.monstercat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.startupgrind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ubisoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapphire.maestro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearl.maestro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onyx.maestro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silver.maestro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamond.maestro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowltv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crystal.maestro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.sportsmax.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.maestro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upload.maestro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.maestro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.overwatchleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.cottonwood.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.maestro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.complexity.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.enewhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.halo.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameday.andbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.crossroadschurch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldcup.fortnite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claim.maestro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.fortnite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.victoryatl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaming.lenovo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream.baduworldmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victorypromotionlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.knights.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.streamticket.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.streamthegirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.theinfatuationacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.earthdaylive2020.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.retrohash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.ambassco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roomservicefest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.dallascowboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.dctop20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uprisinglive.overwatchleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.unskrypted.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.peachtreerascal.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.thehundreds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uforiamusic.univision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.easleyblessed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vegovirtual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onstage.stadio.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.launchglobal.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.stadiaventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.theinfatuation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.virtualtattoogathering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.laurieberkner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.empowered21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etheridgetv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.shopxxxtentacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.cnas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.vidcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avengers-wartable.square-enix-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.picturemotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.envy.gg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.adweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.outcomesseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.tabletmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.trivium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.pandora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protestparty.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.udiscovermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live2.udiscovermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live3.udiscovermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pseweb.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mau5trap.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gallolive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conventionlive.aft.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.fantracks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factoryfrontera.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.timmcgraw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aftconvention.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premium.bandsintown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamit.nmrevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.atlanticrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aftconvention.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.info.maestro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factoryfrontera.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.livesounds.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.katyperry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.startingatzerofilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.frontrow.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livestream.thestreetsmusic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.boilerroom.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cap-2021.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.gtliveathome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futurelive.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.miyavi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ariandolivia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.livenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.demconvention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.fanduel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.funkfesttv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usopen.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.keithurban.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bacconvention.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.tokyosessions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.comedystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streaming.viniksportsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.twoheadeddreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbiwsvirtual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universal-inside-digital-edition.universal-music.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.up.auone.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.betches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lalive.asiasociety.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001747693853500000403004730450221008099233f1e93e36b4c8dd6262ca02de6a6b2dd16bc4b8022321d6ae4fa93e51d02201bd3d3e48a085b26eb84533fbef47a21d6359e97c3582b99cb2ed36143cab4d50076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000174769385480000040300473045022006f652e94b98647c9d57138f737e394e7b7c2969484675d6a5297202d1e9ab3e022100b961fe77bd0d25cfa60aca7032345598359f27b371d294893b7d61177794714e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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