xduat.absa.co.za

- Absa Group Limited -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:a8:08:08:c2:49:fa:d6:8d:76:4c:fd:99:5d:0f:db was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Absa Group Limited

Organization: Absa Group Limited
State / Province: Gauteng
Locality: Johannesburg
Country: ZA

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a8:08:08:c2:49:fa:d6:8d:76:4c:fd:99:5d:0f:db
Serial Number (int): 6189380808605171900276623856983936987
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 5d:bc:28:c5:98:c5:33:a4:79:ab:87:65:4f:a1:eb:c7:a7:1b:06:50
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 81:62:65:73:ca:00:d3:60:cd:63:82:b2:54:f6:fb:ed:7b:1f:ab:58
Fingerprint (sha256): 0f:b3:36:96:43:03:b7:f0:6d:a3:e6:b6:cb:d8:40:6e:cc:4b:00:67:63:e7:06:b6:d0:31:b9:7c:27:30:a3:51

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate xduat.absa.co.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xduat.absa.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xduat.absa.co.za

Other certificates including the domain name absa.co.za

(limited to 100 certificates)
pcvdb.absa.co.za
everydaybanking-ivx.absa.co.za
sts.absa.co.za
salesportal.absa.co.za
myabsa.absa.co.za
cdn-ff-dev.absa.co.za
esdtracking1.absa.co.za
choice.invest.absa.co.za
investmentmodels.absa.co.za
degitlab.absa.co.za
adfs.eng.absa.co.za
paymentpebbleuat.absa.co.za
esb.ext.uat.absa.co.za
thumbtranuat.absa.co.za
paymentpebble.absa.co.za
capi-uat.absa.co.za
skybranch.absa.co.za
bionline.absa.co.za
ss.absa.co.za
credit.test.absa.co.za
qeedb.absa.co.za
onlinebanking.help.absa.co.za
workspaceuat.absa.co.za
rewards.absa.co.za
ss.absa.co.za
qaaroapi.absa.co.za
vpn-za.absa.co.za
relationshipbanking.absa.co.za
pfortnerghana1.absa.co.za
bulksms.absa.co.za
ib.absa.co.za
pcvapp3.absa.co.za
paymentpebble.absa.co.za
qfedb.absa.co.za
claimsuat.absa.co.za
marketplace.absa.africa
conso-status.prophix.cloud
absafx.absa.co.za
instantbusiness.absa.co.za
capi-uat.absa.co.za
pfortnertanzprimary.absa.co.za
bionline.absa.co.za
wbiu.absa.co.za
docuploaduat.absa.co.za
dpedb.absa.co.za
seedb.absa.co.za
Mail.Absa.co.za
eu.absa.co.za
author.absa.co.za
esec.absa.co.za
mobility.absa.co.za
myfleet.absa.co.za
Testext.absa.co.za
digitaltoolsuat.intra.absa.co.za
pfortnerghanasecondary.absa.co.za
esb.ext.api.uat.absa.co.za
vsuat.absa.co.za
surepin.absa.co.za
e.absa.co.za
clientca.absa.co.za
pilot.absa.co.za
absafx.absa.co.za
ss.absa.co.za
s3edb.absa.co.za
seo.absa.co.za
postilionssl.absa.co.za
vs1.absa.co.za
api.internal.intra.absa.co.za
onlinebanking.help.absa.co.za
absa-rbbshortterm-test.absa.africa
vraspin.absa.co.za
pfortnerzamsecondary.absa.co.za
secure.workspace.absa.co.za
vsuat.absa.co.za
remote.absa.co.za
embu.absa.co.za
research-trk.absa.co.za
ohss.ABSA.co.za
ss.absa.co.za
qpedb.absa.co.za
vsuat.absa.co.za
developernp.absa.co.za
esd.absa.co.za
esd.cib.absa.co.za
ugpfortnershau1.absa.co.za
esdtracking1.absa.co.za
www.absa.co.za
mail.absa.co.za
xduat.absa.co.za
e.absa.co.za
corpstore.absa.co.za
dv3db.absa.co.za
esb.prd.absa.co.za
developernp.absa.co.za
ecssp.absa.co.za
XZAPBCC1APP0043.absa.co.za
GBSLE-LD-Cluster.absa.co.za
XZAPBCC2APP0063.absa.co.za
vs1.absa.co.za
leedb.absa.co.za

Certificate

The complete raw certificate details for xduat.absa.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGtjCCBZ6gAwIBAgIQBKgICMJJ+taNdkz9mV0P2zANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjIwNzEzMDAwMDAwWhcN
MjMwODAyMjM1OTU5WjBuMQswCQYDVQQGEwJaQTEQMA4GA1UECBMHR2F1dGVuZzEV
MBMGA1UEBxMMSm9oYW5uZXNidXJnMRswGQYDVQQKExJBYnNhIEdyb3VwIExpbWl0
ZWQxGTAXBgNVBAMTEHhkdWF0LmFic2EuY28uemEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDfcqdtLCfLiC02SMF5a7B1uAAMaHVTCZiXuAjWsASOGRSi
7Ln3MVONiILaf4dcWTd/4eWMhdvSvuN9J7i4z0eaColYkeNj4Tc7NqHsqvAa2RFm
A4K9YV1Ai/sbWKPKoOCygFnc7gGTbzGGzNFDcsnOPKtloovH79ZvrJHe3QfxWpwe
hz/PYdFC6+F3hhrmHkLSF7JQHpCnPoLcZDRb3un5pbT1aqNyYk+mVi4CZ+UvbLpq
FGgbqhin0pErFULDB8Ii0S2dFv9LHayoGwLcJidSsOhjBy4yLUVYCOLKXrkJSH/d
G7dJOqYd9cwXJbcALCyBBhTXh0HiXxSgg5IYebZ/AgMBAAGjggNvMIIDazAfBgNV
HSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUXbwoxZjFM6R5
q4dlT6Hrx6cbBlAwGwYDVR0RBBQwEoIQeGR1YXQuYWJzYS5jby56YTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGNBgNVHR8E
gYUwgYIwP6A9oDuGOWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpY2VydFNI
QTJTZWN1cmVTZXJ2ZXJDQS0xLmNybDA/oD2gO4Y5aHR0cDovL2NybDQuZGlnaWNl
cnQuY29tL0RpZ2ljZXJ0U0hBMlNlY3VyZVNlcnZlckNBLTEuY3JsMD4GA1UdIAQ3
MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQu
Y29tL0NQUzB+BggrBgEFBQcBAQRyMHAwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw
LmRpZ2ljZXJ0LmNvbTBIBggrBgEFBQcwAoY8aHR0cDovL2NhY2VydHMuZGlnaWNl
cnQuY29tL0RpZ2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLTIuY3J0MAkGA1UdEwQC
MAAwggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB3AOg+0No+9QY1MudXKLyJa8kD
08vREWvs62nhd31tBr1uAAABgfbY7qoAAAQDAEgwRgIhAJTv8utUOd2PIhnhFR8U
V2xyUYrB72pubhymvuSHNJG/AiEA5BuLJMxN446iRC6D4d+rF/Asct+FmIOOxOaZ
pM5/LjkAdgA1zxkbv7FsV78PrUxtQsu7ticgJlHqP+Eq76gDwzvWTAAAAYH22O7M
AAAEAwBHMEUCICrj4anzlGqyvKnGmzXPX/5oUNtZIJofYkOgzoYH5xccAiEAskdG
A0yU/7TbUXnZb9DTUX7sLLitpfz2fLOI8lfpw0oAdwCzc3cH4YRQ+GOG1gWp3BEJ
SnktsWcMC4fc8AMOeTalmgAAAYH22O7hAAAEAwBIMEYCIQCGRDYP1V/qz8YOhbJT
QJRZUaBxmILOdkQasrh0XDxoIAIhAOnxnLdDkK3TUuVlvcybwZj2az13OXpHVWoE
ECilEjXlMA0GCSqGSIb3DQEBCwUAA4IBAQAorHbMrbp4QQeHvXW19t6GjNm5KygT
fkU+q9HSDBLVrnwSTDTmGqQooVsEJGlDPh/FOuDeCtjWyN3wTmwunkKs+1O00Txo
kCvpQ+aX2Oy2SHqXU5FptvPOo2pu+cmD4Kse9VgPBFlAAB1ZCKmbqSUktAeXLRou
im5Stp8qJ2cson+lh3CKjcZz+tQYeE1R5B3MMrUEJ5OmckJTfEVHGdB4Zt9eZVMv
lJeH2D6pe+UKcXNzpVXDkejJaQqcsJxG3DQXeBrKrmpLGgi6iHROPUNAZ/ul3HEH
3ZafcisNtI7fjz3gUjmpYvQpIDDjaEz/2vTRIQKL1Xd7mr7TyeT0pbxy
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33KnbSwny4gtNkjBeWuw
dbgADGh1UwmYl7gI1rAEjhkUouy59zFTjYiC2n+HXFk3f+HljIXb0r7jfSe4uM9H
mgqJWJHjY+E3Ozah7KrwGtkRZgOCvWFdQIv7G1ijyqDgsoBZ3O4Bk28xhszRQ3LJ
zjyrZaKLx+/Wb6yR3t0H8VqcHoc/z2HRQuvhd4Ya5h5C0heyUB6Qpz6C3GQ0W97p
+aW09WqjcmJPplYuAmflL2y6ahRoG6oYp9KRKxVCwwfCItEtnRb/Sx2sqBsC3CYn
UrDoYwcuMi1FWAjiyl65CUh/3Ru3STqmHfXMFyW3ACwsgQYU14dB4l8UoIOSGHm2
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6189380808605171900276623856983936987
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gauteng'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johannesburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Absa Group Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xduat.absa.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28207680006759933662580750441630733603116557205451158574368334628570861734634133610140092705044539063075887383569184834135219174236169186460398416290000124272789985619944439610166686543772250786913168925819864092748959606773094288904017078380049993473486933221260549049750566671774522644476593136546500304658933107244470896644270203699334839569850153062843932525639375236978959243439302681680807059520342861352963418404833853168322474491315027922766696185789605055329471128910552389946592101034576282127850069159134722255266208906186480866135058381250570958129658084906184814525259554275331705987633258040367160866431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5dbc28c598c533a479ab87654fa1ebc7a71b0650
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xduat.absa.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000181f6d8eeaa000004030048304602210094eff2eb5439dd8f2219e1151f14576c72518ac1ef6a6e6e1ca6bee4873491bf022100e41b8b24cc4de38ea2442e83e1dfab17f02c72df8598838ec4e699a4ce7f2e3900760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c00000181f6d8eecc000004030047304502202ae3e1a9f3946ab2bca9c69b35cf5ffe6850db59209a1f6243a0ce8607e7171c022100b24746034c94ffb4db5179d96fd0d3517eec2cb8ada5fcf67cb388f257e9c34a007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000181f6d8eee100000403004830460221008644360fd55feacfc60e85b25340945951a0719882ce76441ab2b8745c3c6820022100e9f19cb74390add352e565bdcc9bc198f66b3d77397a47556a041028a51235e5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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