webmail-ext.sagemcom.com

- Sagemcom Broadband SAS -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0f:8b:06:1b:b2:65:56:80:a8:72:c6:83:b5:17:77:97 was issued on by DigiCert Inc.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sagemcom Broadband SAS

Organization: Sagemcom Broadband SAS
Organization unit: DSI
Locality: Rueil-Malmaison
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:8b:06:1b:b2:65:56:80:a8:72:c6:83:b5:17:77:97
Serial Number (int): 20660273088938930681901753821826611095
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c2:1e:bd:4d:d8:36:3f:fd:c7:7b:e6:2d:9e:a1:a1:cf:25:e1:47:39
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): dd:a7:a9:93:15:87:c3:a9:e5:d6:4e:60:76:c2:7e:7a:d0:6d:fc:85
Fingerprint (sha256): 0e:20:d1:ba:e1:eb:e3:c9:bc:0e:3e:a1:d2:d3:f5:6f:72:79:18:b0:04:f8:61:84:4a:83:be:a5:7f:8a:12:5e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g4.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g4.crl

Check the revocation status for certificate webmail-ext.sagemcom.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail-ext.sagemcom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail-ext.sagemcom.com
webmail-int.sagemcom.com
autodiscover.sagemcom.com
smtp.sagemcom.com
chevilly.sagemcom.com
rueil.sagemcom.com
sip.sagemcom.com
uc.sagemcom.com
webconf.sagemcom.com
av.sagemcom.com
meet.sagemcom.com
dialin.sagemcom.com
lyncdiscover.sagemcom.com
ucdr.sagemcom.com
webconfdr.sagemcom.com
avdr.sagemcom.com
federation.sagemcom.com
mailphone.sagemcom.com

Other certificates including the domain name sagemcom.com

(limited to 100 certificates)
keys.sagemcom.com
snc.sagemcom.com
mdm.sagemcom.com
transfer.sagemcom.com
shiva.sagemcom.com
webmail-ext.sagemcom.com
webmail-ext.sagemcom.com
snc.sagemcom.com
incident.sagemcom.com
webmail-ext.sagemcom.com
incident.sagemcom.com
cms-demo.sagemcom.com
neoftp.sagemcom.com
www.sagemcom.com
neoftp.sagemcom.com
snc.sagemcom.com
support.sagemcom.com
orion.sagemcom.com
*.sagemcom.com
rdfe2.sagemcom.com
www.sagemcom.com
pegase.sagemcom.com
beam.sagemcom.com
limesurvey.sagemcom.com
reach.sagemcom.com
securemail.sagemcom.com
store.sagemcom.com
share.sagemcom.com
otrs.m2m.sagemcom.com
shiva.sagemcom.com
snc.sagemcom.com
sagemcom.com
gsmr-support.sagemcom.com
reach.sagemcom.com
share.sagemcom.com
reach.sagemcom.com
pegase.sagemcom.com
pegase-partenaire.sagemcom.com
sts.sagemcom.com
incident.sagemcom.com
cas.sagemcom.com
snc.sagemcom.com
sharesc.sagemcom.com
reach.sagemcom.com
documents-sav-b2b.sagemcom.com
mdm.sagemcom.com
esm-support.sagemcom.com
secure.sagemcom.com
shiva.sagemcom.com
cas.sagemcom.com
andromede.sagemcom.com
incident.sagemcom.com
pegase-psi.sagemcom.com
share.sagemcom.com
reach.sagemcom.com
share.sagemcom.com
snc.sagemcom.com
ctac.sagemcom.com
ctac.sagemcom.com
m2m.sagemcom.com
pegase.sagemcom.com
sharesc.sagemcom.com
shiva.sagemcom.com
transfer.sagemcom.com
snc.sagemcom.com
neoftp.sagemcom.com
neoftp.sagemcom.com
ctac.sagemcom.com
orion.sagemcom.com
old.sagemcom.com
rdfe2.sagemcom.com
share.sagemcom.com
mgp.sagemcom.com
ctac.sagemcom.com
pegase.sagemcom.com
shiva.sagemcom.com
sharesc.sagemcom.com
pa.sagemcom.com
pegase.sagemcom.com
webmail-ext.sagemcom.com
smartvillage1.sagemcom.com
sagemcom.com
sagemcom.com
limesurvey.sagemcom.com
rdfe2.sagemcom.com
support-femto.sagemcom.com
gsmr-support.sagemcom.com
transfer.sagemcom.com
pegase-psi.sagemcom.com
oldportal.sagemcom.com
snc.sagemcom.com
ctac.sagemcom.com
reach.sagemcom.com
share.sagemcom.com
share.sagemcom.com
pegase.sagemcom.com
pa.sagemcom.com
webmail-ext.sagemcom.com
keys.sagemcom.com
andromede.sagemcom.com

Certificate

The complete raw certificate details for webmail-ext.sagemcom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T7zccbrXIfn9Dq/YGum
pGPiSS3uWo1NHpJDUFFiGYTOdN71jc6ZJU6QGwG/f+pj2hyYmRV3rG3TfxpIi5jA
FkHi+f/K2xFtM8ZZluUfdphHH2ngGqzKNafBJvNjXJK3LIjW0sZimlz/k/rgiMHU
PLRd3mVwt1JhW5jMgiyi+6nAKvSf+crwWkzc6iHiZPVpCiSyJAQiq7F/jEjxT4Ra
L/qPkBBOt+vg7TYy9yCMfBWfrliNv4hjLHWM5LOv/sQxbPB8Y+Se9e1Z/E04jIta
kYIFNNuUEH1hWybhB3jhy/lDPY2QRd2eA6kPUem5LGLwx4PxCKD1mbsFFX/rnt03
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20660273088938930681901753821826611095
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rueil-Malmaison'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sagemcom Broadband SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DSI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail-ext.sagemcom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26414848010703982055585501739485474206707752567979335168299824334968879579559653427832361550376075252297054346376265305278693905730411669028661577160496832086210017909511230799532733760016469267718689411055283926504330837751332764976285916045299112963957831265315066681238719851984467084855705605009815476060337665589592549707037652989835168318572878336607234953118297104917696158556406288334978036081288558015970106499649879477359496010010891710781515785893243598031322180424720274244662777184231706596052675806859261897638598455152914814100639221336885141308831742771882653331712787270817467498971838660096317798349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c21ebd4dd8363ffdc77be62d9ea1a1cf25e14739
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (397 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail-ext.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail-int.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chevilly.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rueil.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uc.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'av.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucdr.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconfdr.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avdr.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federation.sagemcom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailphone.sagemcom.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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