www.costcohealthsolutions.com

- Costco Wholesale Corporation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:f1:e6:83:e5:e3:1b:f0:c0:20:09:e7:43:37:92:88 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Costco Wholesale Corporation

Organization: Costco Wholesale Corporation
State / Province: Washington
Locality: Issaquah
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:f1:e6:83:e5:e3:1b:f0:c0:20:09:e7:43:37:92:88
Serial Number (int): 21194438883925386159956921016353526408
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 38:20:ba:f0:61:95:9b:13:c8:5f:66:b0:2f:fd:d2:29:2a:2f:f7:e6
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 13:ff:2f:64:1a:c3:eb:13:17:60:f3:58:a4:63:eb:3a:b1:bb:06:ea
Fingerprint (sha256): 0e:3a:d6:c7:33:35:dd:06:29:fb:4f:0b:33:04:4d:1c:c9:30:72:1c:90:54:f6:ce:fc:9c:d0:cb:32:d7:5b:d4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.costcohealthsolutions.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.costcohealthsolutions.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.costcohealthsolutions.com
costcohealthsolutions.com

Other certificates including the domain name costcohealthsolutions.com

(limited to 100 certificates)
members.costcohealthsolutions.com
www.costcohealthsolutions.com
members.costcohealthsolutions.com
www.costcohealthsolutions.com
costcohealthsolutions.com
www.CostcoHealthSolutions.com
members.costcohealthsolutions.com
www.CostcoHealthSolutions.com
members.costcohealthsolutions.com
costcohealthsolutions.com
www.CostcoHealthSolutions.com
www.costcohealthsolutions.com
www.costcohealthsolutions.com
members.costcohealthsolutions.com
www.CostcoHealthSolutions.com
costcohealthsolutions.com
costcohealthsolutions.com
members.costcohealthsolutions.com
costcohealthsolutions.com
employees.costcohealthsolutions.com

Certificate

The complete raw certificate details for www.costcohealthsolutions.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH+TCCBuGgAwIBAgIQD/Hmg+XjG/DAIAnnQzeSiDANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA1MzEwMDAwMDBa
Fw0yMzA1MzEyMzU5NTlaMIGEMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGlu
Z3RvbjERMA8GA1UEBxMISXNzYXF1YWgxJTAjBgNVBAoTHENvc3RjbyBXaG9sZXNh
bGUgQ29ycG9yYXRpb24xJjAkBgNVBAMTHXd3dy5jb3N0Y29oZWFsdGhzb2x1dGlv
bnMuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmGvCwhxH4OkA
LK7827846b5TPndEUhb4qnj9Em9/jGSJFm/3U3gRg3HMCqFV4rFEE1TLFmBMnlqK
01WDRQICYaCQdFR/3SUJRohW2AymVv/xwJ+hCQ/t8M2xWG9vLT7JuX8r7Fs8iJE7
rP1qHzq5wfiYjRW+hmNZ5g6y1eq3/9CTI7kEVkNqIwGZ/ZVHnFx4/dnBKlv9rAx/
CKbN+UblH9bzpmt/8AP5SbDPnqAEaWrPjCraCal5PIyx13m+bZyoyNMTqYQdpbE7
uoGp4Vc40sFd8ojD0SdrGzycLicr3o93hBb/Pvp5fVcXfJglasFJyDYdw7FZt+uZ
GAxsj41P/eIhYlGM2nV4q21mlWDeyS/e21mJSMmjP6xIeq4kU88lD642j/7QgXe0
2k09MW61M1g3mCw7kd/P83yeK1qn4Ij+Mtzh9c7chskJtsShSdDqtaIribcaXMsu
YK5xUsGNBs7zKUiVz0WYgVlJoOqGlcPjGW38Suei1G3NlSYr5wpzo/royzdgT1Ht
/2uk8LobZv+Hv4vyNvfz9j3VARU2m6nb/btwC75in+9kVD3SHDybuHUVYEO2Fhzy
xoagSmYtsHRSBjS86ZnV05FoaYlxzcR4Zr1kGi4U58EsI97BNbZF1MRwiqp2cWrt
A+ru3N1wMasbKKpOz4J1USjqMWIW0j8CAwEAAaOCA5kwggOVMB8GA1UdIwQYMBaA
FLdrouqoqoSMeeq02g+YssWVdrn0MB0GA1UdDgQWBBQ4ILrwYZWbE8hfZrAv/dIp
Ki/35jBDBgNVHREEPDA6gh13d3cuY29zdGNvaGVhbHRoc29sdXRpb25zLmNvbYIZ
Y29zdGNvaGVhbHRoc29sdXRpb25zLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGPBgNVHR8EgYcwgYQwQKA+oDyGOmh0
dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBD
QTEtNC5jcmwwQKA+oDyGOmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2Vy
dFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIw
KTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMH8GCCsG
AQUFBwEBBHMwcTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t
MEkGCCsGAQUFBzAChj1odHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl
cnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3J0MAkGA1UdEwQCMAAwggF/BgorBgEE
AdZ5AgQCBIIBbwSCAWsBaQB3AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31t
Br1uAAABgRu81i8AAAQDAEgwRgIhAIZQHibLUvq+qPRejO5ROU4kfeAofTPmV+vX
UM+DXNvnAiEAv1aXAusn7JCZrg8PIx6SQcpdf4o7nummJhQu3BhAL1QAdgA1zxkb
v7FsV78PrUxtQsu7ticgJlHqP+Eq76gDwzvWTAAAAYEbvNWJAAAEAwBHMEUCID+F
uC0M+zyvz8EA58V8KoD2D1btvM7J3Whbnhl9WBogAiEA+H5qcGsVijIeviWHuZFD
DoYRhRmaliZFWNg9e3wGdOcAdgCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMO
eTalmgAAAYEbvNXKAAAEAwBHMEUCIQCv2Zof1AzdQjEroOwUWnvv2GsLW2Ea30/m
Aeqm8QzZgAIgeEBlyI3N6v5tLVbcdqOW/Y4RXd9Myx+SfEojwpmRYjcwDQYJKoZI
hvcNAQELBQADggEBAA+HyCStDUGmdUBecCm34aSyICOA67fK5B/TA8tbP2rQ7QDt
KUpYLBgp5OK/v8v+vXKb9Fb9tJ/t7x8lrbgEnuldfdBccY4v6UqTXFMv6blPiCfk
5IJdLoR/d2veag5T4JhuuUDb3Oe70hiC0dK5YcC0ukyGGVb+78uTM2lVJL+PXslS
zmiRUOiEw81mmW5hCrFso+gnNUibKO7/pmX3p0YSZD0g7s4HoRK4XMvEwQN8dBxW
VGDmHWxrCPbE7k/hOC3XBcUpzRPvvZOvXniRpIMHaRQyaT5v2NlGw6x6S4gHW0WZ
Pd8YnDJQiivrYT2rf05nc9VMb+9IM8qbhKNtFBU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21194438883925386159956921016353526408
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Issaquah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Costco Wholesale Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.costcohealthsolutions.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 621823185854717319541336016651906971065503622472893119577218198491788578604293348651970690897843596136522572936462385424886836501312826417321997901283454388321326586396516869313784551720048726161287058760688470924021155317240450333742541724561524225299028834306389563695554374800375460498851196253407404293867110745532249964775629208527649980887138897555023688138527048817741859430142750925512967887086551740660259769181422569189477801402415788715666853234574387953269308413496521554414306370231294195985541368875515664074410653234519496741139504842592968140410802147419407130058450125020743075120394186911396715020232278061619007250956995645293939867832555825804999601281417153675154360488301813389877504029502140219436032581582559821155940184255238088492328421346106684118942191865731814374888507287458906219769797138087407031764391185938694273167370066265437331194689844849210060206698247318177358529808399944585868083862375118391657964095211381705817955641847489309469788726962849898569712069931095556313401224774078562467944785255728755555045105227133751196561104984239806181822979359600857508673429786696860975555142223119431104918366057746326182957740252088652174111109232961615557183624268829390603940863623745972401511780927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3820baf061959b13c85f66b02ffdd2292a2ff7e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.costcohealthsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costcohealthsolutions.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000f87c824ad0d41a675405e7029b7e1a4b2202380ebb7cae41fd303cb5b3f6ad0ed00ed294a582c1829e4e2bfbfcbfebd729bf456fdb49fedef1f25adb8049ee95d7dd05c718e2fe94a935c532fe9b94f8827e4e4825d2e847f776bde6a0e53e0986eb940dbdce7bbd21882d1d2b961c0b4ba4c861956feefcb9333695524bf8f5ec952ce689150e884c3cd66996e610ab16ca3e82735489b28eeffa665f7a74612643d20eece07a112b85ccbc4c1037c741c565460e61d6c6b08f6c4ee4fe1382dd705c529cd13efbd93af5e7891a48307691432693e6fd8d946c3ac7a4b88075b45993ddf189c32508a2beb613dab7f4e6773d54c6fef4833ca9b84a36d1415