vcaballet.vancleefarpels.com

- Richemont International SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:8b:e6:ea:52:da:eb:a8:fe:d1:b9:3d:8d:12:7d:84 was issued on by DigiCert Inc.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Richemont International SA

Organization: Richemont International SA
State / Province: Genève
Locality: Bellevue
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:8b:e6:ea:52:da:eb:a8:fe:d1:b9:3d:8d:12:7d:84
Serial Number (int): 16677148731996629244828352845330939268
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e9:a4:ad:ca:bc:00:b0:79:ba:b7:6a:ad:d0:5b:16:d7:23:3d:ca:1c
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): b3:05:22:11:d9:d6:32:21:30:5c:0e:76:ab:c2:cd:9b:83:b9:16:33
Fingerprint (sha256): 0e:e6:df:9b:10:7f:9f:aa:35:93:2a:d3:1b:e8:fe:5a:53:c5:bf:f4:6a:2e:52:fb:ca:2a:ee:10:b0:f2:b2:ea

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate vcaballet.vancleefarpels.com

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vcaballet.vancleefarpels.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vcaballet.vancleefarpels.com
www.vcaportal.com
www.vancleefarpels.com
www.vancleefarpels.cn
www.vancleefarpels-event.com
www.lecolevancleefarpels.com
www.lecolevancleefarpels.cn
www.dancereflections.vancleefarpels.cn
www.dancereflections-vancleefarpels.com
www.dancereflections-vancleefarpels.cn
whenelegancemeetsart.vancleefarpels.com
weboutique.vancleefarpels.com
vod-video.vancleefarpels.cn
vancleefarpels.com
us.lecolevancleefarpels.com
tracking.vancleefarpels.com
timenaturelove.vancleefarpels.com
payment.vancleefarpels.com
mediastorage.vancleefarpels.com
media.weboutique.vancleefarpels.com
me.lecolevancleefarpels.com
maisonstory.vancleefarpels.cn
jp.lecolevancleefarpels.com
i-video.vancleefarpels.cn
hk.lecolevancleefarpels.com
fr.lecolevancleefarpels.com
e-video.vancleefarpels.cn
diamondcheck.vancleefarpels.com
demainsenmains.vancleefarpels.com
d-video.vancleefarpels.cn
cn.vancleefarpels.com
careers.vancleefarpels.com
ca-video.vancleefarpels.cn
c-video.vancleefarpels.cn
blob-video.vancleefarpels.cn
bjexpo.vancleefarpels.com
api.weboutique.vancleefarpels.com
360workshopsvisit.vancleefarpels.com

Other certificates including the domain name vancleefarpels.com

(limited to 100 certificates)
secure.cn.vancleefarpels.com
intranet.richemont.com
intranet.richemont.com
weboutique.quality.vancleefarpels.com
intranet.richemont.com
weboutique.quality.vancleefarpels.com
dam.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
presslounge.vancleefarpels.com
linemedia.preprod.richemont.com
media.richemont.com
www.vancleefarpels.com
www.preprod2.vancleefarpels.cn
diamondcheck.vancleefarpels.com
intranet.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
intranet.richemont.com
www.vancleefarpels.com
www.quality.alange-soehne.com
vcaballet.vancleefarpels.com
weboutique.dev.vancleefarpels.com
linemedia.preprod.richemont.com
sihh2014.vancleefarpels.com
intranet.preprod.richemont.com
api.weboutique.quality.iwc.cn
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
vcaballet.vancleefarpels.com
www.quality.alange-soehne.com
media.richemont.com
vcaballet.vancleefarpels.com
weboutique.vancleefarpels.com
vcaballet.vancleefarpels.com
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
vcaballet.vancleefarpels.com
diamondcheck.vancleefarpels.com
www.quality.alange-soehne.com
intranet.staging.richemont.com
www.lecolevancleefarpels.com
intranet.quality.richemont.com
vcaballet.vancleefarpels.com
secure-www.vancleefarpels.com
weboutique.dev.vancleefarpels.com
intranet.dev.richemont.com
www.vancleefarpels.com
intranet.staging.richemont.com
8-seconds-of-luck.vancleefarpels.com
vcs.richemont.com
diamondcheck.vancleefarpels.com
intranet.richemont.com
linemedia.preprod.richemont.com
intranet.dev.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
sihh2014.vancleefarpels.com
media.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
yps.vancleefarpels.com
vcaballet.vancleefarpels.com
sihh2016.vancleefarpels.com
sihh2014.vancleefarpels.com
secure.www.vancleefarpels.com
intranet.richemont.com
vcaballet.vancleefarpels.com
weboutique.quality.vancleefarpels.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
org-timenaturelove.vancleefarpels.com
intranet.staging.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
sihh2014.vancleefarpels.com
sihh2014.vancleefarpels.com
sihh2014.vancleefarpels.com
intranet.richemont.com
www.quality.alange-soehne.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
intranet.richemont.com
www.vancleefarpels.com
linemedia.preprod.richemont.com
whenelegancemeetsart.quality.vancleefarpels.com
sihh2016.vancleefarpels.com
intranet.richemont.com
presslounge.vancleefarpels.com
api.weboutique.quality.iwc.cn
sihh2014.vancleefarpels.com
intranet.richemont.com
wwsip.richemont.com
sihh2016.vancleefarpels.com

Certificate

The complete raw certificate details for vcaballet.vancleefarpels.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu1pjDoT/o5JBCpjYGaD
n+H7+ic041DHSpGTzApXE+ftqyGjbL9854b+AUUge1zZSBlIpkvRbuhLV4aMT++Y
zwSvDTEHluwjX0u6Rn8nERvdGbT7INESXA8vjBFpqqnf+fJfaI8ka4W3AQDZCOkU
BugXpdg6ywNyHU7mIw/aPOQzDO5rMt4Ce+Hhl5zNnYouQ1DHhA8gTIUjBIIjBZyW
f7WQYycLlg9WYXsMgeQOVhIMOe/bTvbrIy5pSBrj9q5+vH2m8Mjm+y0AnBSvLzL8
3bNDS82DYYoFP8u5eHcO7TE6atSLUzD4VXhsoK1p/HH0igismEmC8ILuPkuaZEh2
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16677148731996629244828352845330939268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Richemont International SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vcaballet.vancleefarpels.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24102350310027086583480824335853845799237376672405677712617034238991783628289350610049339557018829961239473873217539589324384237276616452307835519503469489163881625119879402479435077141618669457736089226374086415733911166064457899397576081431075309676038467997986204874057026490498793346407243025683982435860873046765988170855611475820913097479127699184398319748267078341267083834906641816558678228410862120908242433948741611846309660146236685112800358044608457728487693679608336746605819816071009515436181442577383541340789199502921904314412972816096526464453664969597700572747199628108305213528392022278117974898383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9a4adcabc00b079bab76aadd05b16d7233dca1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1154 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcaballet.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vcaportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vancleefarpels-event.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lecolevancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dancereflections.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dancereflections-vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dancereflections-vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whenelegancemeetsart.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vod-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timenaturelove.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediastorage.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maisonstory.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondcheck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demainsenmains.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blob-video.vancleefarpels.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjexpo.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '360workshopsvisit.vancleefarpels.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000183456f7ff300000403004630440220514fc94d9d879c14e5b375bdc32e20e889334b53947a9bd76e00f9065ff7b409022043eb42f65905845c98e13309c86da0e65fe635137b4ef38b96b6adee8b10c78a00770035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c00000183456f803a000004030048304602210098e7a9534ac34d14fd6c812d204ca6bd46c8974c0e1894cc7a64633f03990b7d022100ef65476e55d4166f37c88e31ffa4622e0af7a5ca20137371f1c76ae04d35faff007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183456f80370000040300473045022001bf9d18ce2745e2125669cbf2255b84c5900a9b9f510e1919273c7b3537ee3c022100e8242b3c2d1009eb946e724e2db627ba60888ea9091e6c97187e1c782345e330
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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