api.stage.onereporting.vidible.tv

- Oath Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 05:75:66:ff:79:4b:49:f0:ab:8c:e9:4d:5a:38:33:1a was issued on by DigiCert Inc.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oath Inc

Organization: Oath Inc
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:75:66:ff:79:4b:49:f0:ab:8c:e9:4d:5a:38:33:1a
Serial Number (int): 7255727757872872602033621619113997082
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ff:dd:ef:47:a5:ae:7d:e8:72:b8:9c:82:bf:ae:04:25:5b:80:a2:e9
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 0c:1e:32:4a:d2:c9:df:42:4b:14:60:51:49:72:ad:f0:0f:00:3b:38
Fingerprint (sha256): 0f:4b:6c:2e:3c:3c:af:3e:f4:b6:15:65:be:ef:dc:f0:99:d4:86:03:bf:90:02:f4:fa:c5:cb:18:b0:5a:98:be

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate api.stage.onereporting.vidible.tv

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.stage.onereporting.vidible.tv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.stage.onereporting.vidible.tv
api.stage.onereporting.aol.com
cns.stage.vidible.tv
extauth.stage.vidible.tv
maxstream.stage.vidible.tv
nuditydetector.stage.vidible.tv
polls.stage.vidible.tv
vcdelivery.stage.vidible.tv
omsdk.stage.vidible.tv
roku.stage.vidible.tv
captions.stage.vidible.tv
video-seo.stage.vidible.tv
app.stage.vidible.tv
intention.stage.vidible.tv
sub.stage.vidible.tv
deals.stage.vidible.tv

Other certificates including the domain name vidible.tv

(limited to 100 certificates)
portal.dev.vidible.tv
ads.vidible.tv
hlsrv.vidible.tv
ads.vidible.tv
consent.oath.com
portal.vidible.tv
s6dl.vidible.tv
ads.stage.vidible.tv
meta.bsf.prod.vidible.tv
ads.vidible.tv
api.stage.onereporting.vidible.tv
ads.vidible.tv
*.vidible.tv
ads.vidible.tv
social.vidible.tv
meta.bsf.prod.vidible.tv
stage.consent.oath.com
stage.guce2.oath.com
docker.vidible.tv
on.aol.com
api.o2-k8s-central-use1.int.vidible.tv
svc.k8s-stage.int.vidible.tv
svc.k8s-prod.int.vidible.tv
stage.consent.oath.com
ads.vidible.tv
strips-origin.stage.vidible.tv
stage.consent.oath.com
cdn-ycs.vidible.tv
ads.stage.vidible.tv
stage.guce2.oath.com
trk.vidible.tv
trk.vidible.tv
img-origin.vidible.tv
stage.consent.oath.com
api.vidible.tv
api.onereporting.aol.com
api.vidible.tv
ads.vidible.tv
*.prod.us-east-1.int.vidible.tv
ads.stage.vidible.tv
api.stage.onereporting.vidible.tv
social.vidible.tv
social.vidible.tv
api.k8s-central-02-use1.int.vidible.tv
bsf.vidible.tv
api.vidible.tv
api.mm2-k8s-euw1.int.vidible.tv
guce2.oath.com
delivery.stage.vidible.tv
galleries.appstudio.vidible.tv
bsf.vidible.tv
meta.bsf.prod.vidible.tv
*.int.vidible.tv
stage.guce2.oath.com
api.onereporting.aol.com
trunk.consent.oath.com
*.prod.us-east-1.int.vidible.tv
portal.vidible.tv
ads.vidible.tv
api.onereporting.vidible.tv
trk.vidible.tv
bai.o2.oath.com
strips-origin.stage.vidible.tv
stage.guce.huffpost.com
*.k8s-stage1-use1.int.vidible.tv
api.stage.onereporting.vidible.tv
svc.k8s-prod.int.vidible.tv
consent.oath.com
consent.oath.com
on.aol.com
cdn-ycs.vidible.tv
svc.k8s-stage.int.vidible.tv
portal.vidible.tv
cdn-ycs.vidible.tv
consent.oath.com
portal.vidible.tv
portal.dev.vidible.tv
*.vidible.tv
portal.vidible.tv
api.onereporting.vidible.tv
api.mm2-k8s-euw1.int.vidible.tv
*.prod.eu-west-1.int.vidible.tv
api.stage.onereporting.vidible.tv
stage.consent.oath.com
guce2.oath.com
trunk.consent.oath.com
*.int.vidible.tv
portal.dev.vidible.tv
ads.stage.vidible.tv
ads.vidible.tv
reportingapi.vidible.tv
cdn-ycs.vidible.tv
svc.k8s-stage.int.vidible.tv
trunk.consent.oath.com
stage.consent.oath.com
api.onereporting.vidible.tv
portal.dev.vidible.tv
ads.vidible.tv
api.onereporting.aol.com
anp.stage.vidible.tv

Certificate

The complete raw certificate details for api.stage.onereporting.vidible.tv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2H4q/j80J5QNlZgBPwW
Y842QbzSpt9lwVky130XIH6lD/9NGvsEUSRW2mN6SaE6QCfLR0EVsc34ZugFunw8
Ujhm7Q4Rz8q4lZ4FF3PWOjs2aSCKhCGY4rk5CoxA9ELlwn/suGgG0xlX+Tz/THBV
Ugw1bHJvJbDGYlhrNYXpZXTQKJXsTMLmhxEj6Y9/L67jLFQJdm60jFPGxxbksxG2
skv/UoDN28zoU2kQnlqNALlpnu7k1bxcF5t3vHZROsJRxEFN22BhlGCi0ZlIIV/3
cM9iu6empLXMVPJmPBk7qiZfj2LcwHZRqbnjipHrPX2hA9xArGJImCs7vIoZuwiJ
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7255727757872872602033621619113997082
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.stage.onereporting.vidible.tv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20625155194626891181598418290784628785876388289248571279992549826473720385577034178104825258057439281028022889828356253459336392951255585101219016069565742576281879270522344031087187372578450683912704751183504803263533858972006804188730767170637873956897136354513065601199009480690955611464078377541189821602961655681396568421834287317441499537735007124733546145482614936339013338213256296174028878431753986313957296474904255350775599552453376374556557535249760546732729887762295187312709819173652826796061782608204978655019903849814785226020184126765335777853290504268605989446857597756821538975343032354685208529213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffddef47a5ae7de872b89c82bfae04255b80a2e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (431 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.onereporting.vidible.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stage.onereporting.aol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cns.stage.vidible.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extauth.stage.vidible.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxstream.stage.vidible.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuditydetector.stage.vidible.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polls.stage.vidible.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcdelivery.stage.vidible.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omsdk.stage.vidible.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roku.stage.vidible.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captions.stage.vidible.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-seo.stage.vidible.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.stage.vidible.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intention.stage.vidible.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub.stage.vidible.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deals.stage.vidible.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00994123288678f0d5fa31c03afe9e4f84ba31cbc9852e051c64fe79352119442659a9254fbc19e189611631dd49f06c78057287169300bb84de5af3b17c2685725afa9919d9d7be5329d84c08c50841ce1919cf09896d622304c15985ee2eba4538490499c813ed920b5e1f6f45f334f2d151ecf37d60193477b02c2be27ecf643f35456abc7bc07753729eb9932b3d6580863d9d3eda6a41ae47bdf9ecdc33beb235508a5d4682309715d6b9dbd1661170d43d1d34c56c03ea66904a04e47a72251b5dcb4d8340ebffc34abb3fe6c6217baf21b1c7b7c3dd83f30b880dd85632e2c737b2997ccac550cd477903a8124a94da1268199bb4bcc4e01b804dc376e7