mpa-service-test.nets.eu

- Nets A/S -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:90:0c:69:e5:f1:ec:13:aa:c3:ac:fa:82:1d:c2:67 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Nets A/S

Organization: Nets A/S
Locality: Ballerup
Country: DK

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:90:0c:69:e5:f1:ec:13:aa:c3:ac:fa:82:1d:c2:67
Serial Number (int): 20686362463439594302764141869405160039
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9c:f8:be:0b:62:44:e6:06:61:0f:67:7b:73:3b:f8:81:74:df:c4:6d
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 5c:3b:06:db:b7:45:84:d2:fc:9a:71:4e:25:e1:d3:42:b0:7d:ee:d3
Fingerprint (sha256): 0e:00:d3:b6:85:5f:3e:35:41:d4:f9:cc:04:b7:1b:bb:fa:8f:04:fb:9b:7f:eb:c1:00:74:f5:77:e7:9a:a7:b6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate mpa-service-test.nets.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mpa-service-test.nets.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mpa-service-test.nets.eu
www.mpa-service-test.nets.eu

Other certificates including the domain name nets.eu

(limited to 100 certificates)
easy-status.developers.nets.eu
chipcard.ft.test.nets.eu
clearing-test.nets.eu
jamf.nets.eu
merchantapp.stacker-pp.nets.eu
incapsula.com
incapsula.com
incapsula.com
merchantapp.stacker-pp.nets.eu
*.mitid.nets.eu
easy-status.developers.nets.eu
netsmeeting.nets.eu
api-gateway-pp.nets.eu
CardholderMQ.nets.eu
www.ident-preprod1.nets.eu
naa.aws.nets.eu
easy-status.developers.nets.eu
easy-status.developers.nets.eu
wstest.payment.nets.eu
incapsula.com
ps.nets.eu
drift.bnaa.dk
incapsula.com
clara2.nets.eu
easy-status.developers.nets.eu
easy-status.developers.nets.eu
*.sap.nets.eu
easy-status.developers.nets.eu
dev.netaxept.nets.eu
lcmapi.nets.eu
incapsula.com
easy-status.developers.nets.eu
test2.merchantportal.nets.eu
easy-status.developers.nets.eu
api-identity-pp.nets.eu
pp-easyshop.nets.eu
acs.nets.eu
incapsula.com
incapsula.com
sandbox.naas-test1.nets.eu
ft.nets.eu
incapsula.com
incapsula.com
incapsula.com
easy-status.developers.nets.eu
auth.naas-test1.nets.eu
drift.bnaa.dk
easy-status.developers.nets.eu
easy-status.developers.nets.eu
test2online.nets.eu
test2online.nets.eu
acs.nets.eu
unifiedapi.nets.eu
netsdigi-service.nets.eu
dist.nets.eu
api.epayment.nets.eu
*.realtime247.nets.eu
incapsula.com
easyshop.nets.eu
office.nets.eu
easy-status.developers.nets.eu
ws.cards.nets.eu
grafana.naa.nets.eu
mpa-service-test.nets.eu
easy-status.developers.nets.eu
api-identity2.nets.eu
www.nets.eu
merchantportaldemo-preprod.nets.eu
sandbox.ps.nets.eu
easy-status.developers.nets.eu
incapsula.com
merchantreporting.nets.eu
investor.nets.eu
sts.id-test.nets.eu
incapsula.com
no1-bankart-online.realtime247-test.nets.eu
my-pp.nets.eu
incapsula.com
incapsula.com
beta.my.nets.eu
dist.nets.eu
incapsula.com
lcmapi-test.nets.eu
www.nets.eu
incapsula.com
wsgwtest.nets.eu
miscweb.nets.eu
www.nets.eu
easy-status.developers.nets.eu
easy-status.developers.nets.eu
no2-bankart-online.realtime247-test2.nets.eu
www.sign-preprod1.nets.eu
drift.bnaa.dk
easy-status.developers.nets.eu
nets-l2-ra.nets.eu
easy-status.developers.nets.eu
incapsula.com
vm-pwsmtp-1.nets.eu
clara2test.nets.eu
auth.naas-test1.nets.eu

Certificate

The complete raw certificate details for mpa-service-test.nets.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIQD5AMaeXx7BOqw6z6gh3CZzANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjEyMDUwMDAwMDBa
Fw0yNDAxMDUyMzU5NTlaMFYxCzAJBgNVBAYTAkRLMREwDwYDVQQHEwhCYWxsZXJ1
cDERMA8GA1UEChMITmV0cyBBL1MxITAfBgNVBAMTGG1wYS1zZXJ2aWNlLXRlc3Qu
bmV0cy5ldTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/jItydEmg5
QwDyv+m7pUBTCsrfEGdpYCvqPMkKqS7A7bbNCtyy1LSU2Is3SOYXAevq2QBJvQre
GEmOAgWzkc386FP0yEp9UGl0sy3P0jrRhJpuyNnvRgdQBiSof+03I32yq/Y5QTjm
jlIcV7IjqUBb4aTDrJSuIhwd2r7QFXvvkZJ2U4GhWh0GK3XsPfp5gZMTeAMFhdIN
+ZM6H3Cq2b9VtefKQBlfv7r3L1vcgfIEv3D8WJUp+oKMajx+S3oZDaw1l6++uo5l
vVaf262QcNlGozC4J0c0wKiKgd/nQWtJtfle0Z9K4od2414tlEMOFazHzI7y0m/I
JQ9Qvmbg2GMCAwEAAaOCAikwggIlMB8GA1UdIwQYMBaAFLdrouqoqoSMeeq02g+Y
ssWVdrn0MB0GA1UdDgQWBBSc+L4LYkTmBmEPZ3tzO/iBdN/EbTBBBgNVHREEOjA4
ghhtcGEtc2VydmljZS10ZXN0Lm5ldHMuZXWCHHd3dy5tcGEtc2VydmljZS10ZXN0
Lm5ldHMuZXUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2Vy
dC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpo
dHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIw
Q0ExLTQuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0
dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB/BggrBgEFBQcBAQRzMHEwJAYIKwYB
BQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0
cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAy
MENBMS0xLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQAeuajSCCh6rReLpv2khcjZ9zpH24UKLXDceE8KynMKg1Ni
KkYsofuDv/56M2akCDzroHGk9ea2WavbfpPE5LQ18eBN12CedREig3FRPODuz3gj
BxB6HrlLBXCAv6uV08vPj/C9H0rZRcxFHsPyqt04Ho5EIlJJckzggOrfVzsfHElW
rGW8YXG/pc+qgcjGUUWqFyOISqfkBAP+m41mwe5H4xgDfCoTzsz55+Z79RgHfarl
HPpvhF1w005XphwupCYDECkQCC8jEZ9qp/yeGkyQ1xKAjkpYJzhe1Wr+daYjBafJ
/JypM+IYWre4Rbj24/EvVzzL3MkEhxrfCx0FWUVM
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+Mi3J0SaDlDAPK/6bul
QFMKyt8QZ2lgK+o8yQqpLsDtts0K3LLUtJTYizdI5hcB6+rZAEm9Ct4YSY4CBbOR
zfzoU/TISn1QaXSzLc/SOtGEmm7I2e9GB1AGJKh/7TcjfbKr9jlBOOaOUhxXsiOp
QFvhpMOslK4iHB3avtAVe++RknZTgaFaHQYrdew9+nmBkxN4AwWF0g35kzofcKrZ
v1W158pAGV+/uvcvW9yB8gS/cPxYlSn6goxqPH5LehkNrDWXr766jmW9Vp/brZBw
2UajMLgnRzTAqIqB3+dBa0m1+V7Rn0rih3bjXi2UQw4VrMfMjvLSb8glD1C+ZuDY
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20686362463439594302764141869405160039
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ballerup'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nets A/S'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mpa-service-test.nets.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24223521272765831694496010187353225729340629661529047731720398429215881985461338676944809993895983162796682234931563586751637273161106928121830905668526136648342628404425216994637432874527818084617889787125214818046982819667030163336610883615809106978182934021367532144090227464799962837389268572363446960764370435722479719111149555676927190548986761218128644800254086664756179310155383909571108355999130449874768903761057112135323680751804706491631913500275800328555808103861538849458037859533701804129266821133598858086693931990660173475834037675998470150390163517175263034042356411596787831826410036161074117531747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9cf8be0b6244e606610f677b733bf88174dfc46d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpa-service-test.nets.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpa-service-test.nets.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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