s4b.ct950.com

- CallTower, Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0f:68:12:ae:25:0a:90:0d:97:63:4c:d7:78:29:c4:b5 was issued on by DigiCert Inc.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CallTower, Inc

Organization: CallTower, Inc
Organization unit: ASE
State / Province: Utah
Locality: South Jordan
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:68:12:ae:25:0a:90:0d:97:63:4c:d7:78:29:c4:b5
Serial Number (int): 20478797690598218272062417082052625589
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5b:45:6e:c0:86:34:d2:b6:d7:6b:29:61:b5:bd:0a:4b:bc:f1:0f:a7
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): ae:b0:29:42:18:a0:91:36:53:88:bd:9b:c7:1c:98:19:11:11:ee:b5
Fingerprint (sha256): 0c:6b:73:49:8c:d4:86:69:db:00:8e:66:7d:e6:b9:f8:26:ba:50:34:f6:41:c1:a6:dc:59:8f:2b:17:32:c7:bd

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate s4b.ct950.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s4b.ct950.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s4b.ct950.com
meet.ct950.com
dialin.ct950.com
lyncdiscover.ct950.com
lyncdiscover.andygump.com
lyncdiscover.res.us
lyncdiscover.anglerenvironmental.com
lyncdiscover.carmelpartners.net
lyncdiscover.cloverbcm.com
lyncdiscover.dwsteel.com
lyncdiscover.ebaengineering.com
lyncdiscover.empirepetroleum.com
lyncdiscover.ltfoodsamericas.com
lyncdiscover.mmrs.com
lyncdiscover.millermilling.com
lyncdiscover.pointbcap.com
lyncdiscover.pointb.com
lyncdiscover.sucampo.com
lyncdiscover.voaches.org
lyncdiscover.worksoft.com
lyncdiscover.calltower.com
lyncdiscover.pucschools.org
lyncdiscover.hartmanadvisors.com
lyncdiscover.ctdemo12.com
lyncdiscover.boingo.com
lyncdiscover.lhfs.com
lyncdiscover.ninthdecimal.com
lyncdiscover.zerotothree.org
lyncdiscover.transpogroup.com
lyncdiscover.naocean.com
lyncdiscover.polarisgm.com
lyncdiscover.asisonline.org
lyncdiscover.west-chester.com
lyncdiscover.gogsf.com
lyncdiscover.psgconsults.com
lyncdiscover.naproperties.com
lyncdiscover.blendtec.com
lyncdiscover.wrtdesign.com
lyncdiscover.spoken.com
lyncdiscover.greystonecommunities.com
lyncdiscover.searchwizards.com
lyncdiscover.accds.com
lyncdiscover.jmpco.com
lyncdiscover.onenorth.com
lyncdiscover.bmpc-law.com
lyncdiscover.carrprop.com
lyncdiscover.ffnm.org
lyncdiscover.goldenstatelumber.com
lyncdiscover.guentner.com.mx
lyncdiscover.hssi.com
lyncdiscover.macmiller.com
lyncdiscover.shawconstruction.net
lyncdiscover.wm2a.com
lyncdiscover.qual-pro.com
lyncdiscover.knowledgelake.com
lyncdiscover.ctdemo07.com
lyncdiscover.persante.com
lyncdiscover.purelycloud.com
lyncdiscover.eonreality.com
lyncdiscover.suebausa.com
lyncdiscover.migonline.com
lyncdiscover.rff.org
lyncdiscover.voloridge.com
s4b3.ct950.com
lyncdiscover.ncqa.org
lyncdiscover.operationsmile.org
lyncdiscover.pepperconstruction.com
lyncdiscover.perkinseastman.com
atls4b.ct950.com
s4b1.ct950.com
lyncdiscover.strategichotels.com
s4b41.ct950.com
s4b02.ct950.com
s4b42.ct950.com
lyncdiscover.pinnaclecampusliving.com
lyncdiscover.cdlf.org
lyncdiscover.westfield-bank.com
lyncdiscover.clarknexsen.com
lyncdiscover.thinkhwi.com
lyncdiscover.metropower.com
s4b51.ct950.com
s4b52.ct950.com
s4b61.ct950.com
s4b62.ct950.com
s4bint.ct950.com
lyncdiscover.withum.com
lyncdiscover.corgan.com
lyncdiscover.corganmedialab.com
s4b71.ct950.com
lyncdiscover.pabst.com
lyncdiscover.mcpc.com
lyncdiscover.clevelandfoundry.org

Other certificates including the domain name ct950.com

(limited to 100 certificates)
sip3.ct950.com
sip51.ct950.com
sip3.ct950.com
s4b.ct950.com
sip11.ct950.com
sip51.ct950.com
s4b.ct950.com
sip3.ct950.com
sip41.ct950.com
sip3.ct950.com
sip61.ct950.com
sip41.ct950.com
s4b.ct950.com
sip41.ct950.com
sip.ct950.com
sip43.ct950.com
sip51.ct950.com
sip.ct950.com
s4b.ct950.com
sip3.ct950.com
s4b.ct950.com
sip61.ct950.com
s4b.ct950.com
sip3.ct950.com
sip.ct950.com
sip.ct950.com
sip41.ct950.com
sip61.ct950.com
sip41.ct950.com
sip.ct950.com
sip61.ct950.com
sip71.ct950.com
s4b.ct950.com
sip61.ct950.com
sip71.ct950.com
sip61.ct950.com
s4b.ct950.com
s4b.ct950.com
sip41.ct950.com
sip.ct950.com
sip61.ct950.com
sip51.ct950.com
sip71.ct950.com
sip71.ct950.com
s4b41.ct950.com
s4b.ct950.com
sip11.ct950.com
sip51.ct950.com
sip51.ct950.com
sip41.ct950.com
sip71.ct950.com
sip.ct950.com
sip71.ct950.com
sip51.ct950.com
sip51.ct950.com
sip31.ct950.com
sip41.ct950.com
sip.ct950.com
sip3.ct950.com
sip41.ct950.com
sip41.ct950.com
sip.ct950.com
sip51.ct950.com
sip61.ct950.com
sip.ct950.com
sip61.ct950.com
sip41.ct950.com
sip.ct950.com
sip51.ct950.com
sip61.ct950.com
sip.ct950.com
ct950.com
sip61.ct950.com
rp.ct950.com
sip41.ct950.com
sip51.ct950.com
sip3.ct950.com
sip61.ct950.com
sip51.ct950.com
sip71.ct950.com
s4b.ct950.com
sip51.ct950.com
sip43.ct950.com
sip61.ct950.com
sip3.ct950.com
sip51.ct950.com
sip41.ct950.com
s4b.ct950.com
sip61.ct950.com
cfe.ct950.com
sip.ct950.com
sip3.ct950.com
sip71.ct950.com
sip41.ct950.com
sip71.ct950.com
sip51.ct950.com
sip.ct950.com
sip61.ct950.com
sip71.ct950.com
sip41.ct950.com

Certificate

The complete raw certificate details for s4b.ct950.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO+DCCDeCgAwIBAgIQD2gSriUKkA2XY0zXeCnEtTANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0xODA4MjMwMDAwMDBaFw0yMDA3MDgxMjAwMDBa
MHIxCzAJBgNVBAYTAlVTMQ0wCwYDVQQIEwRVdGFoMRUwEwYDVQQHEwxTb3V0aCBK
b3JkYW4xFzAVBgNVBAoTDkNhbGxUb3dlciwgSW5jMQwwCgYDVQQLEwNBU0UxFjAU
BgNVBAMTDXM0Yi5jdDk1MC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmq/490VeW10ogefOoY1PcT816lYhD/dqJe0YlXkzUDt2GtgxFm1jx3ZZ/
rM3hPlJ25NMoCK+j697XC6twpKs97tFUTkXvyu8m5DP4vvQwTHiXPjjtBYlZ+3tu
bj7Z2jtR1Pl5DlWTNPKkh+1W1rl10Rsy9X9tHvKcKOWA8IaW3rm2S4hscrJPSXDD
qwdlboDAyLmVbdBTvEso9YZcbYXG61meHJ08TvaVrDQIhHVp9FcO3/Ctx6ivx1C1
Do9U2PJSEsvlllqm0y1L617Wm29Xd0ODM9PjaLEF4WirFopLsGbzpb7eDbpb6y/Y
K/nTCLUVIuD7F25Cfw8vHHJIwoL9AgMBAAGjgguKMIILhjAfBgNVHSMEGDAWgBRR
aP+QrwIHdTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQUW0VuwIY00rbXaylhtb0KS7zx
D6cwggmlBgNVHREEggmcMIIJmIINczRiLmN0OTUwLmNvbYIObWVldC5jdDk1MC5j
b22CEGRpYWxpbi5jdDk1MC5jb22CFmx5bmNkaXNjb3Zlci5jdDk1MC5jb22CGWx5
bmNkaXNjb3Zlci5hbmR5Z3VtcC5jb22CE2x5bmNkaXNjb3Zlci5yZXMudXOCJGx5
bmNkaXNjb3Zlci5hbmdsZXJlbnZpcm9ubWVudGFsLmNvbYIfbHluY2Rpc2NvdmVy
LmNhcm1lbHBhcnRuZXJzLm5ldIIabHluY2Rpc2NvdmVyLmNsb3ZlcmJjbS5jb22C
GGx5bmNkaXNjb3Zlci5kd3N0ZWVsLmNvbYIfbHluY2Rpc2NvdmVyLmViYWVuZ2lu
ZWVyaW5nLmNvbYIgbHluY2Rpc2NvdmVyLmVtcGlyZXBldHJvbGV1bS5jb22CIGx5
bmNkaXNjb3Zlci5sdGZvb2RzYW1lcmljYXMuY29tghVseW5jZGlzY292ZXIubW1y
cy5jb22CHmx5bmNkaXNjb3Zlci5taWxsZXJtaWxsaW5nLmNvbYIabHluY2Rpc2Nv
dmVyLnBvaW50YmNhcC5jb22CF2x5bmNkaXNjb3Zlci5wb2ludGIuY29tghhseW5j
ZGlzY292ZXIuc3VjYW1wby5jb22CGGx5bmNkaXNjb3Zlci52b2FjaGVzLm9yZ4IZ
bHluY2Rpc2NvdmVyLndvcmtzb2Z0LmNvbYIabHluY2Rpc2NvdmVyLmNhbGx0b3dl
ci5jb22CG2x5bmNkaXNjb3Zlci5wdWNzY2hvb2xzLm9yZ4IgbHluY2Rpc2NvdmVy
LmhhcnRtYW5hZHZpc29ycy5jb22CGWx5bmNkaXNjb3Zlci5jdGRlbW8xMi5jb22C
F2x5bmNkaXNjb3Zlci5ib2luZ28uY29tghVseW5jZGlzY292ZXIubGhmcy5jb22C
HWx5bmNkaXNjb3Zlci5uaW50aGRlY2ltYWwuY29tghxseW5jZGlzY292ZXIuemVy
b3RvdGhyZWUub3Jngh1seW5jZGlzY292ZXIudHJhbnNwb2dyb3VwLmNvbYIYbHlu
Y2Rpc2NvdmVyLm5hb2NlYW4uY29tghpseW5jZGlzY292ZXIucG9sYXJpc2dtLmNv
bYIbbHluY2Rpc2NvdmVyLmFzaXNvbmxpbmUub3Jngh1seW5jZGlzY292ZXIud2Vz
dC1jaGVzdGVyLmNvbYIWbHluY2Rpc2NvdmVyLmdvZ3NmLmNvbYIcbHluY2Rpc2Nv
dmVyLnBzZ2NvbnN1bHRzLmNvbYIdbHluY2Rpc2NvdmVyLm5hcHJvcGVydGllcy5j
b22CGWx5bmNkaXNjb3Zlci5ibGVuZHRlYy5jb22CGmx5bmNkaXNjb3Zlci53cnRk
ZXNpZ24uY29tghdseW5jZGlzY292ZXIuc3Bva2VuLmNvbYIlbHluY2Rpc2NvdmVy
LmdyZXlzdG9uZWNvbW11bml0aWVzLmNvbYIebHluY2Rpc2NvdmVyLnNlYXJjaHdp
emFyZHMuY29tghZseW5jZGlzY292ZXIuYWNjZHMuY29tghZseW5jZGlzY292ZXIu
am1wY28uY29tghlseW5jZGlzY292ZXIub25lbm9ydGguY29tghlseW5jZGlzY292
ZXIuYm1wYy1sYXcuY29tghlseW5jZGlzY292ZXIuY2FycnByb3AuY29tghVseW5j
ZGlzY292ZXIuZmZubS5vcmeCImx5bmNkaXNjb3Zlci5nb2xkZW5zdGF0ZWx1bWJl
ci5jb22CHGx5bmNkaXNjb3Zlci5ndWVudG5lci5jb20ubXiCFWx5bmNkaXNjb3Zl
ci5oc3NpLmNvbYIabHluY2Rpc2NvdmVyLm1hY21pbGxlci5jb22CIWx5bmNkaXNj
b3Zlci5zaGF3Y29uc3RydWN0aW9uLm5ldIIVbHluY2Rpc2NvdmVyLndtMmEuY29t
ghlseW5jZGlzY292ZXIucXVhbC1wcm8uY29tgh5seW5jZGlzY292ZXIua25vd2xl
ZGdlbGFrZS5jb22CGWx5bmNkaXNjb3Zlci5jdGRlbW8wNy5jb22CGWx5bmNkaXNj
b3Zlci5wZXJzYW50ZS5jb22CHGx5bmNkaXNjb3Zlci5wdXJlbHljbG91ZC5jb22C
G2x5bmNkaXNjb3Zlci5lb25yZWFsaXR5LmNvbYIZbHluY2Rpc2NvdmVyLnN1ZWJh
dXNhLmNvbYIabHluY2Rpc2NvdmVyLm1pZ29ubGluZS5jb22CFGx5bmNkaXNjb3Zl
ci5yZmYub3JnghpseW5jZGlzY292ZXIudm9sb3JpZGdlLmNvbYIOczRiMy5jdDk1
MC5jb22CFWx5bmNkaXNjb3Zlci5uY3FhLm9yZ4IfbHluY2Rpc2NvdmVyLm9wZXJh
dGlvbnNtaWxlLm9yZ4IjbHluY2Rpc2NvdmVyLnBlcHBlcmNvbnN0cnVjdGlvbi5j
b22CH2x5bmNkaXNjb3Zlci5wZXJraW5zZWFzdG1hbi5jb22CEGF0bHM0Yi5jdDk1
MC5jb22CDnM0YjEuY3Q5NTAuY29tgiBseW5jZGlzY292ZXIuc3RyYXRlZ2ljaG90
ZWxzLmNvbYIPczRiNDEuY3Q5NTAuY29tgg9zNGIwMi5jdDk1MC5jb22CD3M0YjQy
LmN0OTUwLmNvbYIlbHluY2Rpc2NvdmVyLnBpbm5hY2xlY2FtcHVzbGl2aW5nLmNv
bYIVbHluY2Rpc2NvdmVyLmNkbGYub3Jngh9seW5jZGlzY292ZXIud2VzdGZpZWxk
LWJhbmsuY29tghxseW5jZGlzY292ZXIuY2xhcmtuZXhzZW4uY29tghlseW5jZGlz
Y292ZXIudGhpbmtod2kuY29tghtseW5jZGlzY292ZXIubWV0cm9wb3dlci5jb22C
D3M0YjUxLmN0OTUwLmNvbYIPczRiNTIuY3Q5NTAuY29tgg9zNGI2MS5jdDk1MC5j
b22CD3M0YjYyLmN0OTUwLmNvbYIQczRiaW50LmN0OTUwLmNvbYIXbHluY2Rpc2Nv
dmVyLndpdGh1bS5jb22CF2x5bmNkaXNjb3Zlci5jb3JnYW4uY29tgh9seW5jZGlz
Y292ZXIuY29yZ2FubWVkaWFsYWIuY29tgg9zNGI3MS5jdDk1MC5jb22CFmx5bmNk
aXNjb3Zlci5wYWJzdC5jb22CFWx5bmNkaXNjb3Zlci5tY3BjLmNvbYIhbHluY2Rp
c2NvdmVyLmNsZXZlbGFuZGZvdW5kcnkub3JnMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0
cDovL2NybDMuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDA0oDKg
MIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNy
bDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczov
L3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjCBgwYIKwYBBQUHAQEEdzB1
MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTQYIKwYBBQUH
MAKGQWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJIaWdo
QXNzdXJhbmNlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIE
AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAAsq2W6s2Vez5NWIljG4JiM9AoVH
HCYUdILdq98QCs0P24cbbd2lNq9W9YuXSp2fO+NVU0pKgjeMxMwUakZ1disOn8dW
psJHgFNDKW6n7hNKgHM7AY/BiiOCuImlVuHLNyz/pxS1nCG1PshqRE5QrZ1Qz5xW
QtRMozLs6Lb7qR3sM6jK5xJdfpnpNkQocIHHSAj3xYJ6s8Bd3eNOvgD39grKRR9e
J/3TUagxhkbX+vguQC/k4yd6ZAWvc/6gAmChCCWnPdMNLz+4D1aVIhMDriKZ9pbt
Sgt1Ui9fF5U0DgxwHT9sdXKqbZR9EZZUgBkQCsKWUonIxA2ooHPSu7OpD+I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqv+PdFXltdKIHnzqGNT
3E/NepWIQ/3aiXtGJV5M1A7dhrYMRZtY8d2Wf6zN4T5SduTTKAivo+ve1wurcKSr
Pe7RVE5F78rvJuQz+L70MEx4lz447QWJWft7bm4+2do7UdT5eQ5VkzTypIftVta5
ddEbMvV/bR7ynCjlgPCGlt65tkuIbHKyT0lww6sHZW6AwMi5lW3QU7xLKPWGXG2F
xutZnhydPE72law0CIR1afRXDt/wrceor8dQtQ6PVNjyUhLL5ZZaptMtS+te1ptv
V3dDgzPT42ixBeFoqxaKS7Bm86W+3g26W+sv2Cv50wi1FSLg+xduQn8PLxxySMKC
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20478797690598218272062417082052625589
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Jordan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CallTower, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ASE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's4b.ct950.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21040371598168231421129809776631155238457952671618060678424369070104004818094881688366045822702746497131373571647183877550417842378309304315531785484147932846850354051641839398566310135229845897596258544242480612248961233007992382587999911259096492923617545872718942892078966795407347469603979097767585361915166491872126622454295111141508718904950871271083614543224330538824601696386665741259545280770369829263641781245598239296095357023031708186253810218584719785849925601367546741898995257993878829126959328645794635774735765577778781727775186935820677509127287229366443484293105144787192002081962046161208186405629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b456ec08634d2b6d76b2961b5bd0a4bbcf10fa7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2460 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.andygump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.res.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.anglerenvironmental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.carmelpartners.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.cloverbcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.dwsteel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ebaengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.empirepetroleum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ltfoodsamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.mmrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.millermilling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pointbcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pointb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sucampo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.voaches.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.worksoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.calltower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pucschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.hartmanadvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ctdemo12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.boingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.lhfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ninthdecimal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.zerotothree.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.transpogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.naocean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.polarisgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.asisonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.west-chester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.gogsf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.psgconsults.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.naproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.blendtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.wrtdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.spoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.greystonecommunities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.searchwizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.accds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.jmpco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.onenorth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmpc-law.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.carrprop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ffnm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.goldenstatelumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.guentner.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.hssi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.macmiller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.shawconstruction.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.wm2a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.qual-pro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.knowledgelake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ctdemo07.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.persante.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.purelycloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.eonreality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.suebausa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.migonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.rff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.voloridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b3.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ncqa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.operationsmile.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pepperconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.perkinseastman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atls4b.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b1.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.strategichotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b41.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b02.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b42.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pinnaclecampusliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.cdlf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.westfield-bank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.clarknexsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.thinkhwi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.metropower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b51.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b52.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b61.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b62.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4bint.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.withum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.corgan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.corganmedialab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b71.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pabst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.mcpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.clevelandfoundry.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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