cloud.eu.connect.kia.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:35:cb:4e:77:22:c1:82:70:5a:84:fc:d7:74:59:ad was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:35:cb:4e:77:22:c1:82:70:5a:84:fc:d7:74:59:ad
Serial Number (int): 2937771270889128481344937510038690221
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ba:82:d6:e9:8b:b7:92:e3:0d:30:1e:f9:ce:6d:ce:78:36:fa:05:86
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 8d:89:a6:f4:ed:d0:95:7f:60:1e:05:21:9d:a5:99:42:15:13:af:55
Fingerprint (sha256): 10:83:ad:f9:fc:d6:f2:a1:91:d2:53:1b:5a:cd:c3:9a:02:28:50:3a:ad:27:5c:75:0a:b4:b4:43:b9:a6:5d:2b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate cloud.eu.connect.kia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cloud.eu.connect.kia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cloud.eu.connect.kia.com

Other certificates including the domain name kia.com

(limited to 100 certificates)
ev9in.worldwide.kia.com
dashportal.hyundai.com
stg.cn-ccapi.hyundai.com
msos.kia.com
web1.prod.kia.us
ev9kr.worldwide.kia.com
adm.kia.com
ssl.ipaper.io
red.kia.com
dsoha2iqis.kia.com
ssl1.ipaper.io
ev9na-stg.worldwide.kia.com
ssl1.ipaper.io
dcmpass.hyundai.com
kevent.kia.com
press.accept.eu.kia.com
kcvg.kia.com
kdp.kia.com
prd.eu-ccapi.hyundai.com
mtalk.hyundai.com
ssl.ipaper.io
flex.kia.com
ksw.kia.co.kr
stg.cn-ccapi.hyundai.com
web.icps.kia.com
*.kia.com
mykia-quz.kia.com
prd.eu-ccapi.hyundai.com
adbsmetrics.kia.com
*.kia.com
*.hyundai.com
ssl1.ipaper.io
adplanner.kia.com
ssl1.ipaper.io
csr.kia.com
ci.kia.com
mobileautoq.kia.com
peardev3-eu.kia.com
ssl1.ipaper.io
ver-bluelinkmobile.hyundai.com
*.hyundai.com
eshop.kia.com
ephoto.kia.com
web1.prod.kia.us
kiaadmin.kia.com
prestudio-europe.kia.com
pr.kia.com
used-uk.kia.com
origin-military.kr.kia.com
san-4-s50.tlsprovisioning.exacttarget.com
www.kia.com
ssl1.ipaper.io
tstkgss.kia.com
eshop.kia.com
org1-www.kia.com
neuwagen.kia.com
org2-www.kia.com
stg.ind.hyundai.com
ev9in-stg.worldwide.kia.com
sip.kia.com
emss.kia.com
ws.eu.kia.com
insider.kia.com
*.kia.com
staging-press.kia.com
gpms.kia.com
career.kia.com
ckd.hmc.co.kr
dealership.kia.com
outlook.hmc.co.kr
pr.kia.com
ssl1.ipaper.io
dev.gbps.kia.com
domain.kia.com
api.kiavr.co
flex.kia.com
api.red.kia.com
eu-www.kia.com
ws.accept.eu.kia.com
ev9eu.worldwide.kia.com
wrms.kia.com
tkdcs.kia.com
ssl1.ipaper.io
csr.kia.com
ssl1.ipaper.io
sni.cloudflaressl.com
ssl.ipaper.io
mcrms.kia.com
api-kr.kia.com
csr.kia.com
*.kia.com
ssl.ipaper.io
preprod-eu-press.kia.com
eu-www.kia.com
cloud.eu.connect.kia.com
*.members.kia.com
view.eu.connect.kia.com
adplanner.kia.com
*.designmagazine.kia.com
api.red.kia.com

Certificate

The complete raw certificate details for cloud.eu.connect.kia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG8TCCBdmgAwIBAgIQAjXLTnciwYJwWoT813RZrTANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE
aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjMw
NzE4MDAwMDAwWhcNMjQwODE3MjM1OTU5WjB8MQswCQYDVQQGEwJVUzETMBEGA1UE
CBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEdMBsGA1UEChMU
U2FsZXNmb3JjZS5jb20sIEluYy4xITAfBgNVBAMTGGNsb3VkLmV1LmNvbm5lY3Qu
a2lhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANz+Fki0cZwA
Pe6dyLGIn4tGBXzn3nA/jiSoBM1bsW6LcI4khZsbiOq9Kt6/sv7CDKoK5LnkM7if
cZbJIQf9+a9hPFe0kD8+92YTaHZ10ftFY7xRDthKdQkTbj0hbhXoEteDIMa+5RPa
N3a/rCoVS1QMsV2w+W8wgXaS6tXEocGN2ND8Z3Ggkm9OFoTYeVT6mhIftphp6hGV
zWxyyKxTlJ3PyDGUTQzKDPXK4vx0K0LMMgWDiw8DbARkdsxOp5aPoIIVyq5nziad
vWnz9v1rhJsQXM+7JmYNUoXrGHcJZsv7m5LYxsqCP9qs3hmkPuGILbnt5n0++pBB
dyOrG+XdP9ECAwEAAaOCA5AwggOMMB8GA1UdIwQYMBaAFHSFgMBmx9833s+9KTeq
Ax2+7c0XMB0GA1UdDgQWBBS6gtbpi7eS4w0wHvnObc54NvoFhjAjBgNVHREEHDAa
ghhjbG91ZC5ldS5jb25uZWN0LmtpYS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBEhkJo
dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNI
QTI1NjIwMjBDQTEtMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNv
bS9EaWdpQ2VydEdsb2JhbEcyVExTUlNBU0hBMjU2MjAyMENBMS0xLmNybDA+BgNV
HSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2lj
ZXJ0LmNvbS9DUFMwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0cDov
L29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0cy5k
aWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEt
MS5jcnQwCQYDVR0TBAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHUA7s3Q
ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJaQL38QAABAMARjBEAiAL
MILgnhtXM1yD4TgU6jDO6cc6Y6xzHLeaViJ6/XU7vAIgVmxMXBAhWEflbDpbC9rq
2nDWoW1unBynVVavpK2Cz9wAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+r
OdiEcwAAAYlpAvexAAAEAwBHMEUCIQC/vTKXn2MOCL06immlpx28/2Bo77yQQNw5
yyspC0TB7gIgOHGkCG+ErfEDkg1XWou1X0rsevmXpexvV3twFtQZfpYAdgDatr9r
P7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYlpAvecAAAEAwBHMEUCIH3f
PR+J9okerOKM7e+r6Q37dkTlhgESnZsL7wX53BDQAiEAg5CJmxYTON/492bECnXD
Ec1td16Q5I6tisSyLhEAuKMwDQYJKoZIhvcNAQELBQADggEBAJF47PhYksITKcu6
1nSYF1ji/5aRCmTZKvbQubKTjP3lWsw++0tMK4n/P7dqqBPKaaEnityuy9NKijVM
pZC6rGa9RZG4DBqTwd/zFJqkkUyER7bz9aiQY/awez8cnlBNfeZkBPc+ZVnZnQju
YJIDV8VI/MhEq2016c/W4cBnOfQD/NWrj6VwcE42Z0QqbF/FBXqgB3+aqXqq530O
QbxWrx/sv1riAtdd0f9VXXYwPCpyablxurpM9XU1EhcglWIWmpsOF0P2+SSohf5Q
VQ6DO+jE2qkt8r9NXUBl5WQId2MZfcwCHMHKBfEwohhtskJzkymfK8oeesY3NKXA
kHZyD0U=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P4WSLRxnAA97p3IsYif
i0YFfOfecD+OJKgEzVuxbotwjiSFmxuI6r0q3r+y/sIMqgrkueQzuJ9xlskhB/35
r2E8V7SQPz73ZhNodnXR+0VjvFEO2Ep1CRNuPSFuFegS14Mgxr7lE9o3dr+sKhVL
VAyxXbD5bzCBdpLq1cShwY3Y0PxncaCSb04WhNh5VPqaEh+2mGnqEZXNbHLIrFOU
nc/IMZRNDMoM9cri/HQrQswyBYOLDwNsBGR2zE6nlo+gghXKrmfOJp29afP2/WuE
mxBcz7smZg1ShesYdwlmy/ubktjGyoI/2qzeGaQ+4Ygtue3mfT76kEF3I6sb5d0/
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2937771270889128481344937510038690221
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cloud.eu.connect.kia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27897722085161745503170008316597794007672176595334034223485690433493077607380567437597383999310660152564006907538276643592952725946297705392089471362037584374788608063705601194265448854126287956547313747534702948060832604054194087429728072097447745134351564408409657496378657675093314668831642910858714361179652073987926351147572924162307687558529869777049070062799667578259448092299545076282959453406267206664616266023479058879832309253033532068406978311174553010660072455488724331484570247984533015392763811836485530771714811765131233250286520464698104576023246647366834618093300340731724849861345417976878896857041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba82d6e98bb792e30d301ef9ce6dce7836fa0586
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.eu.connect.kia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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