sfdc-58ktaz.sandbox.my.salesforce-sites.com

- salesforce.com, inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:99:99:40:1a:0c:ad:7d:90:17:c1:20:57:b5:e6:9f was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

salesforce.com, inc.

Organization: salesforce.com, inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:99:99:40:1a:0c:ad:7d:90:17:c1:20:57:b5:e6:9f
Serial Number (int): 8772897681399020133898351026149648031
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b7:fa:3b:c7:5d:e5:42:8a:9b:07:53:1e:c7:b3:b5:8b:8a:3b:26:75
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): df:96:8e:d9:8f:d6:39:f0:1b:a0:f5:cc:ca:78:d9:25:ee:d4:76:2c
Fingerprint (sha256): 0a:f9:22:e2:bb:b5:a2:ee:11:39:73:03:86:e6:e4:9b:f1:e1:37:7c:d5:11:a0:39:42:96:4d:88:79:17:b9:71

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate sfdc-58ktaz.sandbox.my.salesforce-sites.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sfdc-58ktaz.sandbox.my.salesforce-sites.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sfdc-58ktaz.sandbox.my.salesforce-sites.com
*.sandbox.my.salesforce-sites.com

Other certificates including the domain name salesforce-sites.com

(limited to 100 certificates)
lo2.my.lightning-container.com
sfdc-58ktaz.sandbox.my.salesforce-sites.com
iad.my.lightning-container.com
sfdc-58ktaz.sandbox.my.salesforce-sites.com
sfdc-58ktaz.my.salesforce-sites.com
sfdc-3d0u2f.my.salesforce-sites.com
sfdc-58ktaz.my.salesforce-sites.com
sfdc-lywfpd.sandbox.my.salesforce-sites.com
sfdc-58ktaz.sandbox.my.salesforce-sites.com
sfdc-lywfpd.sandbox.my.salesforce-sites.com
sfdc-lywfpd.sandbox.my.salesforce-sites.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
sfdc-i6sgwq.ephdm2.my.pc-rnd.salesforce-sites.com
sfdc-58ktaz.sandbox.my.salesforce-sites.com
salesforce-sites.com
wax.my.lightning-container.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
sfdc-lywfpd.my.salesforce-sites.com
sfdc-yfeipo.my.salesforce-sites.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
sfdc-lywfpd.sandbox.my.salesforce-sites.com
sfdc-lywfpd.my.salesforce-sites.com
sfdc-i6sgwq.ephdm3.my.pc-rnd.salesforce-sites.com
sfdc-vwfla6.sandbox.my.salesforce-sites.com
sfdc-i6sgwq.s.ephdm2.my.pc-rnd.salesforce-sites.com
ia5.my.salesforce-sites.com
sfdc-58ktaz.sandbox.my.salesforce-sites.com
sfdc-lywfpd.my.salesforce-sites.com
sfdc-lywfpd.sandbox.my.salesforce-sites.com
ttd.sandbox.my.lightning-container.com
sfdc-yfeipo.my.salesforce-sites.com
sfdc-58ktaz.sandbox.my.salesforce-sites.com
ia5.sandbox.my.lightning-container.com
phx.edge.my.salesforce-sites.com
ia4.my.lightning-container.com
sfdc-lywfpd.my.salesforce-sites.com
sfdc-yfeipo.my.salesforce-sites.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
sfdc-lywfpd.sandbox.my.salesforce-sites.com
lo2.sandbox.my.salesforce-sites.com
sfdc-ypmv18.my.salesforce-sites.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
cdg.my.lightning-container.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
ia7.my.salesforce-sites.com
hn3.my.salesforce-sites.com
sfdc-urlt2q.edge.sandbox.my.salesforce-sites.com
sfdc-58ktaz.my.salesforce-sites.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
chx.my.lightning-container.com
sfdc-58ktaz.sandbox.my.salesforce-sites.com
sfdc-yfeipo.my.salesforce-sites.com
prd.sandbox.stmpb.my.stm.salesforce-sites.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
sfdc-58ktaz.my.salesforce-sites.com
sfdc-58ktaz.sandbox.my.salesforce-sites.com
sfdc-lywfpd.my.salesforce-sites.com
hio.my.lightning-container.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
sfdc-yfeipo.my.salesforce-sites.com
hnd.sandbox.my.lightning-container.com
sfdc-58ktaz.my.salesforce-sites.com
sfdc-lywfpd.sandbox.my.salesforce-sites.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
cdg.sandbox.my.lightning-container.com
sfdc-58ktaz.sandbox.my.salesforce-sites.com
sfdc-yfeipo.my.salesforce-sites.com
sfdc-vwfla6.my.salesforce-sites.com
ttd.sandbox.my.lightning-container.com
sfdc-58ktaz.my.salesforce-sites.com
sfdc-yfeipo.my.salesforce-sites.com
sfdc-lywfpd.sandbox.my.salesforce-sites.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
cdg.my.salesforce-sites.com
phx.my.lightning-container.com
sfdc-yfeipo.my.salesforce-sites.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
sfdc-58ktaz.sandbox.my.salesforce-sites.com
sfdc-58ktaz.sandbox.my.salesforce-sites.com
sfdc-lywfpd.my.salesforce-sites.com
yhu.sandbox.my.lightning-container.com
sfdc-58ktaz.my.salesforce-sites.com
ord.my.lightning-container.com
sfdc-yfeipo.my.salesforce-sites.com
sfdc-58ktaz.sandbox.my.salesforce-sites.com
sfdc-lywfpd.my.salesforce-sites.com
sfdc-lywfpd.sandbox.my.salesforce-sites.com
lo2.edge.my.salesforce-sites.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
sfdc-yfeipo.sandbox.my.salesforce-sites.com
ia5.my.salesforce-sites.com
iad.sandbox.my.lightning-container.com
sfdc-yfeipo.my.salesforce-sites.com
sfdc-lywfpd.sandbox.my.salesforce-sites.com
salesforce-sites.com
sfdc-x579t5.e.perf1b.my.pc-rnd.salesforce-sites.com

Certificate

The complete raw certificate details for sfdc-58ktaz.sandbox.my.salesforce-sites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIQBpmZQBoMrX2QF8EgV7XmnzANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMTA5MjgwMDAwMDBa
Fw0yMjA5MjcyMzU5NTlaMIGPMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZv
cm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEdMBsGA1UEChMUc2FsZXNmb3Jj
ZS5jb20sIGluYy4xNDAyBgNVBAMTK3NmZGMtNThrdGF6LnNhbmRib3gubXkuc2Fs
ZXNmb3JjZS1zaXRlcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIKMoE7MCfD5hRZqVHFx+/834+I0sVgbDwu+Qc/QHn0sJ/6iUNW94BP+KBtFBj
gg74MtnUrMlb3P/FOulZWgxdHWcfsQ7B8U+xZ9LFZ1jrHYh/TRzoTTjOAQznpyvi
zNLa1D0Czgiec99zaItxW83HgSC7Oml3TBsYPuXoqY22KQDSHbv9+okpWW9ps/Q7
v8zPkBDTiaC6YIFKHQEaaq8BH879bSzPwUcu+4CnzT3q2yjKdOdn1gTP6yhnBPPf
PaGk4KWbB1eG0qQGllBrerBixleMOARnM/Yaju9E4biDhZnFj1WHPryGgQCB0FC2
FlkEsK40Q/po+H3MUiXHWH8nAgMBAAGjggJEMIICQDAfBgNVHSMEGDAWgBS3a6Lq
qKqEjHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQUt/o7x13lQoqbB1Mex7O1i4o7JnUw
WQYDVR0RBFIwUIIrc2ZkYy01OGt0YXouc2FuZGJveC5teS5zYWxlc2ZvcmNlLXNp
dGVzLmNvbYIhKi5zYW5kYm94Lm15LnNhbGVzZm9yY2Utc2l0ZXMuY29tMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgY8GA1Ud
HwSBhzCBhDBAoD6gPIY6aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0
VExTUlNBU0hBMjU2MjAyMENBMS00LmNybDBAoD6gPIY6aHR0cDovL2NybDQuZGln
aWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00LmNybDA+BgNV
HSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2lj
ZXJ0LmNvbS9DUFMwfwYIKwYBBQUHAQEEczBxMCQGCCsGAQUFBzABhhhodHRwOi8v
b2NzcC5kaWdpY2VydC5jb20wSQYIKwYBBQUHMAKGPWh0dHA6Ly9jYWNlcnRzLmRp
Z2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwDAYD
VR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsXlx92VCFdgxOezlH25lqPYse8c2zI6r7HD8EyR4t/eAErXCpN1JxJufKs2y
w8c/6+frnsMhoq3lr8meCGsdSfmdZWg47rglwRJe9FSvWsJv0J5yyKB80dDafIB1
4Z9AG53AgRmL1TVJ0DDrqahujPISRYiXGhmMKpRGdfG4alUMY5VbC0RdinzNQI6h
FjEa8e5YDpgCL6imz6yu+MY60ZJfGVgC7DEHBB/aW8CzgUWo13A8W6yZfsu+FJ4Z
ZwdN0qSrCo7uscCIZu8LZI1in2/at31lgZSJdM0MCzRXncXyVtNj2xaxFaqCtxwJ
T8RaiZpIPGv9yClLRaw/MqCD7g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCjKBOzAnw+YUWalRxcf
v/N+PiNLFYGw8LvkHP0B59LCf+olDVveAT/igbRQY4IO+DLZ1KzJW9z/xTrpWVoM
XR1nH7EOwfFPsWfSxWdY6x2If00c6E04zgEM56cr4szS2tQ9As4InnPfc2iLcVvN
x4Eguzppd0wbGD7l6KmNtikA0h27/fqJKVlvabP0O7/Mz5AQ04mgumCBSh0BGmqv
AR/O/W0sz8FHLvuAp8096tsoynTnZ9YEz+soZwTz3z2hpOClmwdXhtKkBpZQa3qw
YsZXjDgEZzP2Go7vROG4g4WZxY9Vhz68hoEAgdBQthZZBLCuNEP6aPh9zFIlx1h/
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8772897681399020133898351026149648031
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'salesforce.com, inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sfdc-58ktaz.sandbox.my.salesforce-sites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25267774866639641362746775872871291998385984714636419412391695742010931506910293039299742668535300460313397624255431926248075878554831950694718762118359253958588838571159128058115933553687097847949181741253885432139208348287502157878605851993030428313628214221849939699586439227426199111277632751769214027677350638219443839060167521875419809447052584426035851657775668798496236335131133542943368406804851074526256073455555542031797252800624099402171700600957328577501564002319484198219442444849331099141421105236764120322972431514455609890730996102647859703124004462244263780295326672585019540825190608823726108081959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7fa3bc75de5428a9b07531ec7b3b58b8a3b2675
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfdc-58ktaz.sandbox.my.salesforce-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.my.salesforce-sites.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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