*.aimco.alberta.ca

- Alberta Investment Management Corporation -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 07:1b:16:c3:0e:11:52:8b:09:ae:bc:9a:24:46:49:87 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Alberta Investment Management Corporation

Organization: Alberta Investment Management Corporation
State / Province: Alberta
Locality: Edmonton
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:1b:16:c3:0e:11:52:8b:09:ae:bc:9a:24:46:49:87
Serial Number (int): 9445249652531553749871133980610677127
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2f:d7:5f:b3:d5:bd:0a:bb:7b:f8:9f:20:3e:b1:41:d7:10:52:4f:b3
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): d7:29:1b:30:d4:28:0b:58:9d:be:69:20:8a:5a:18:57:83:2f:47:c1
Fingerprint (sha256): 0b:bc:81:56:a9:8c:74:87:47:ce:7f:69:78:90:e9:e7:cc:70:57:42:b3:d1:9e:91:fe:71:ca:2c:ff:cc:49:c2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.aimco.alberta.ca

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.aimco.alberta.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aimco.alberta.ca
aimco.alberta.ca
mbam.aimco.alberta.ca

Other certificates including the domain name alberta.ca

(limited to 100 certificates)
platform-test.myhealth.alberta.ca
foip.alberta.ca
fs.alt.alberta.ca
sslvs07.igloosoftware.com
hermis.alberta.ca
sip.aimco.alberta.ca
data.environment.alberta.ca
*.ae.alberta.ca
qa.myhealth.alberta.ca
vpn.loshared.alberta.ca
commercialhearings-internal.alberta.ca
mypass.alberta.ca
aemagis.gov.ab.ca
geodiscover.alberta.ca
qa.myhealth.alberta.ca
*.aimco.alberta.ca
seniors.alberta.ca
getfile.alberta.ca
abdlan.gov.ab.ca
*.acstraining.alberta.ca
sslvs07.igloosoftware.com
albertaready.aema.alberta.ca
sslvs07.igloosoftware.com
ext.sp.tb.alberta.ca
*.aet.alberta.ca
justice-digital.alberta.ca
lyncaccess2.gov.ab.ca
otdr.health.alberta.ca
platform.healthvault.alberta.ca
transportal.alberta.ca
projects.transportation.alberta.ca
sslvs07.igloosoftware.com
mhaloginppe.alberta.ca
lufsp.alberta.ca
regionaldashboard.alberta.ca
surplusuat.alberta.ca
abdlan.gov.ab.ca
sslvs07.igloosoftware.com
exts2.aep.alberta.ca
ppe2.myhealth.alberta.ca
sni.cloudflaressl.com
sslvs07.igloosoftware.com
alberta.ca
www.maps.srd.alberta.ca
ddi.health.alberta.ca
sslvs07.igloosoftware.com
defecttracking.health.alberta.ca
spin.stg.alt.alberta.ca
acc-qa.myhealth.alberta.ca
wa8.sp.alberta.ca
sslvs07.igloosoftware.com
mhalogin.alberta.ca
pats.alberta.ca
aemagis.gov.ab.ca
wildfire.alberta.ca
work.alberta.ca
account.healthvault.alberta.ca
*.aimco.alberta.ca
support.alberta.ca
pabapps.alberta.ca
siamsfs.madi.alberta.ca
info.health.alberta.ca
connect.tbf.alberta.ca
sslvs07.igloosoftware.com
www.opra.alberta.ca
sslvs07.igloosoftware.com
work.alberta.ca
*.aimco.alberta.ca
tls.automattic.com
www.hrextcguat1.alberta.ca
alberta.ca
citizens.sit.cloud.digitalid.alberta.ca
lyncaccess2.gov.ab.ca
api.iam.alberta.ca
abdlan.gov.ab.ca
uat.questaplus.alberta.ca
sni.cloudflaressl.com
www.hrextcg.alberta.ca
wildfire.alberta.ca
stpgrants.alberta.ca
secure.myloan.studentaid.alberta.ca
*.aet.alberta.ca
citizens.sit2.cloud.digitalid.alberta.ca
sslvs07.igloosoftware.com
aish-apply.alberta.ca
open.alberta.ca
stage.ecommittee.alberta.ca
caqc.alberta.ca
qa.myhealth.alberta.ca
*.aimco.alberta.ca
sslvs07.igloosoftware.com
saml.public.uat.sadfs.alberta.ca
vision.alberta.ca
maps.srd.alberta.ca
personaldirectives.alberta.ca
*.aimco.alberta.ca
projects.alberta.ca
data.iae.alberta.ca
Contractornet.ocya.alberta.ca
portfolio-management2.health.alberta.ca

Certificate

The complete raw certificate details for *.aimco.alberta.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIQBxsWww4RUosJrryaJEZJhzANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0yMDAzMTYwMDAwMDBaFw0yMTA3MjkxMjAwMDBa
MIGDMQswCQYDVQQGEwJDQTEQMA4GA1UECBMHQWxiZXJ0YTERMA8GA1UEBxMIRWRt
b250b24xMjAwBgNVBAoTKUFsYmVydGEgSW52ZXN0bWVudCBNYW5hZ2VtZW50IENv
cnBvcmF0aW9uMRswGQYDVQQDDBIqLmFpbWNvLmFsYmVydGEuY2EwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGPbHDH0hduLSKv5XG6/gsROrvWKjw3d4t
XiAhzuCc1eZTfrTdmHQuOYF9LCIfdMBZV590ApsO6jkNzLxBvBPQbapqVU22ntEi
vrGPVV3+/j9rCPJO5wYjNY3aFcguCYOTWneGcKKitvJ+/+afTK9CyLmptDkgbFI1
gOP49CSgKNljwCS9Y3WmMUzy6Hezyx0e6b2zmwsfRsaXOwNbeswdfotGs9rJZqpG
LByRiWSnKkEZMOPMQXgih4ij6ErCyOgpt+DIO243lvMPlBbniJqsmvfm/JfDTnzq
I2cj90H3v+2gR51el+z7nHd2oUpi6tMOOT6vRYdkdSHDjrFqc/h5AgMBAAGjggIp
MIICJTAfBgNVHSMEGDAWgBRRaP+QrwIHdTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQU
L9dfs9W9Crt7+J8gPrFB1xBST7MwRgYDVR0RBD8wPYISKi5haW1jby5hbGJlcnRh
LmNhghBhaW1jby5hbGJlcnRhLmNhghVtYmFtLmFpbWNvLmFsYmVydGEuY2EwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNV
HR8EbjBsMDSgMqAwhi5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1oYS1z
ZXJ2ZXItZzYuY3JsMDSgMqAwhi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc2hh
Mi1oYS1zZXJ2ZXItZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYI
KwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQIC
MIGDBggrBgEFBQcBAQR3MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2lj
ZXJ0LmNvbTBNBggrBgEFBQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29t
L0RpZ2lDZXJ0U0hBMkhpZ2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/
BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAks6
d48CVoblYd9JpeHZukERiS4/tVJcdZ5nGvZFYK8yGoFLou9DmVKA/tbthBsMqQLi
lwcYUgN4xG2gjuj8ypTO3+o3+xo6N2mz1teG5TnUVG18kanEVAazHsIhpH5wllOv
O9L176B3vl0fNkJE8/a+QFsromay118rQwZ3WpJST9g3axvyUZgNxShTJUw4Muub
xAEdVfH0hOfsFA65+NefJJJvlYUV3Bq8i/yrrO5KSt/Uf8bUvtVKDW86aiU7GEI1
x7cwfqCfSoNy3xL+gdTPkgXTg+O4+tfZrm3aUZpvUhORqPW9dHHLbjkHs206xKiI
T+511UpYYkIkVoZhxQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj2xwx9IXbi0ir+Vxuv4
LETq71io8N3eLV4gIc7gnNXmU3603Zh0LjmBfSwiH3TAWVefdAKbDuo5Dcy8QbwT
0G2qalVNtp7RIr6xj1Vd/v4/awjyTucGIzWN2hXILgmDk1p3hnCiorbyfv/mn0yv
Qsi5qbQ5IGxSNYDj+PQkoCjZY8AkvWN1pjFM8uh3s8sdHum9s5sLH0bGlzsDW3rM
HX6LRrPayWaqRiwckYlkpypBGTDjzEF4IoeIo+hKwsjoKbfgyDtuN5bzD5QW54ia
rJr35vyXw0586iNnI/dB97/toEedXpfs+5x3dqFKYurTDjk+r0WHZHUhw46xanP4
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9445249652531553749871133980610677127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alberta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Edmonton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alberta Investment Management Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.aimco.alberta.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25025607017689258226504719762886804716809402018636477771432152820913084821121119115737013075874369218499195517949421604619625006447712524395419015190564405032627885531627637951536643473340109227911634456505451365389927420310279711620976187104192171712897056943350407682395360018802437864439220681966710918046812392158000630175765726823762496471155505297243115670990689809114857840228968431393118840002112442024139961696261857167927242148306555048696625282116220847039275471384558604482720992305907178512660878384033191691702312913897126544265042539878043483972206286379550562697823378050791442032757344097430779721849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fd75fb3d5bd0abb7bf89f203eb141d710524fb3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aimco.alberta.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimco.alberta.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbam.aimco.alberta.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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