reputationmgmt.nnanet.com

- Nissan North America, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:2d:45:f7:e6:a2:3e:7b:9f:de:e6:1d:68:bf:86:7f was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Nissan North America, Inc.

Organization: Nissan North America, Inc.
State / Province: Tennessee
Locality: Smyrna
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:2d:45:f7:e6:a2:3e:7b:9f:de:e6:1d:68:bf:86:7f
Serial Number (int): 20173492422404291634269908832840812159
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 24:19:f2:b9:7c:e5:65:88:19:68:29:af:9a:98:d6:e9:ba:cd:a8:13
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 7f:ae:2a:0d:a4:07:7b:2f:3a:e2:d4:74:f2:c5:55:46:8f:26:9a:b1
Fingerprint (sha256): 10:dd:db:a2:c0:ce:24:30:bb:a7:18:c7:12:bd:29:f6:aa:89:1b:a2:f3:ee:71:23:76:d7:5a:68:35:4a:e1:28

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate reputationmgmt.nnanet.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reputationmgmt.nnanet.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reputationmgmt.nnanet.com
www.reputationmgmt.nnanet.com

Other certificates including the domain name nnanet.com

(limited to 100 certificates)
stage.reports.nnanet.com
partsnet.stage.nnanet.com
ncido.nnanet.com
classicparts.stage.nnanet.com
straighttalk.stage.nnanet.com
myinfinitipop.nnanet.com
nci.mdm6.nnanet.com
partspronissan.nnanet.com
infiniti-us.financialstatement.nnanet.com
dbsapp.nnanet.com
vpp-canada.nnanet.com
carfax.stage.nnanet.com
businessmgmt.stage.nnanet.com
wictnis.nnanet.com
ncvportal.stage.nnanet.com
ifsportal.stage.nnanet.com
mdm5.nnanet.com
NissanNNAServiceMarketing.nnanet.com
new.nnanet.com
ssmysteryshop.nnanet.com
ownerfirst.nnanet.com
nissanaccessorycatalog.nnanet.com
nissangraphics.nnanet.com
COMV.NNANET.COM
dealertire.nnanet.com
ncioms.dev.nnanet.com
financialproducts.nnanet.com
infinitiamp.nnanet.com
ncioms.stg.nnanet.com
VISAapp.dev.nnanet.com
notor.nnanet.com
aftersalesdigitalinfiniti.stage.nnanet.com
ssmysteryshop.stage.nnanet.com
dealertire.nnanet.com
onmiparts.stage.nnanet.com
mdm5.stage.nnanet.com
www.nnanet.com
ecompanystore.nnanet.com
dealertire.stage.nnanet.com
aftersalesdigital.stage.nnanet.com
ownerfirstinvestinthebest.nnanet.com
partsnet.nnanet.com
vpp-canada.stage.nnanet.com
www.nnanet.com
nrcdealer.nnanet.com
onetoonerewards.nnanet.com
infiniticonnectionca.nnanet.com
dealer360.stage.nnanet.com
dealertire.nnanet.com
bo.stg.na.nissan.biz
infinitispiff.nnanet.com
financialproducts.stage.nnanet.com
ncipassport.stage.nnanet.com
Nissancollection.stage.nnanet.com
WARRANTYNISSAN.NNANET.COM
nci.mdm5.stage.nnanet.com
leads.nnanet.com
oms-b.nnanet.com
dbsdealers.stage.nnanet.com
carfax.nnanet.com
nissanordering.nnanet.com
nissancollection.stage.nnanet.com
documentprocessing.nnanet.com
towingadvantage.nnanet.com
tableau.stg.nnanet.com
reputationmgmt.nnanet.com
lms.nnanet.com
dev.publish.nnanet.com
servicemediacenter.nnanet.com
stage.author.nnanet.com
nissanownerfirst.nnanet.com
wictinf.stage.nnanet.com
sftp.dev.syssim.com
mynissanpop.nnanet.com
mdm.nnanet.com
nissanownerfirst.nnanet.com
nissanagreements.com
Infiniticollection.stage.nnanet.com
nddm.nnanet.com
dealer360.nnanet.com
brochurerequesthandraisers.nnanet.com
stage.nissanps.nnanet.com
comv.nnanet.com
nissanleadreports.nnanet.com
nmac360.nnanet.com
financialproducts.stage.nnanet.com
rpa.nnanet.com
nissancollection.nnanet.com
icv.nnanet.com
infinitipacanada.nnanet.com
ifsportal.nnanet.com
dealertire.nnanet.com
inspiredperformersreward.stage.nnanet.com
wictnis.stage.nnanet.com
redirector.nissan-ix.com
nissanfunding.stage.nnanet.com
infinitiartwork.stage.nnanet.com
documentprocessing.stage.nnanet.com
rpm.nnanet.com
nissan-us.financialstatement.stage.nnanet.com

Certificate

The complete raw certificate details for reputationmgmt.nnanet.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHEzCCBfugAwIBAgIQDy1F9+aiPnuf3uYdaL+GfzANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE
aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjMx
MDEzMDAwMDAwWhcNMjQxMTA1MjM1OTU5WjB7MQswCQYDVQQGEwJVUzESMBAGA1UE
CBMJVGVubmVzc2VlMQ8wDQYDVQQHEwZTbXlybmExIzAhBgNVBAoTGk5pc3NhbiBO
b3J0aCBBbWVyaWNhLCBJbmMuMSIwIAYDVQQDExlyZXB1dGF0aW9ubWdtdC5ubmFu
ZXQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk5cHdDoGAID
b5PhHU3utzRWzyg6vXh+Xx8HLvZW/RkbecYTceh11tVqCUxCR9QQXUnFDAy4kqBv
HeijbZbvlGf+rWa3YaMEZrBgmTlKfG1GqBSpXo43jswQHOfD8l0nBBBUedHMf7PY
dwlbGvpMrAfmxU89l5FKU/L6q8JB8G4pTOMrRKFpAnKOUmGMVczctxnzaToWqmoz
mwcwNV4LW68ZLQwr5jiSZRBcUU7zu7vOKm/AtUTpgJ/9Oyn0e1MzpW8wfIp90uEk
BSUjeh2JXmmH4sv3S4W8og1a8MHDSUyfS0ev1b/ZCzluPzGmDvQgQ9R9cEPTpOcM
8WD20aigewIDAQABo4IDszCCA68wHwYDVR0jBBgwFoAUdIWAwGbH3zfez70pN6oD
Hb7tzRcwHQYDVR0OBBYEFCQZ8rl85WWIGWgpr5qY1um6zagTMEMGA1UdEQQ8MDqC
GXJlcHV0YXRpb25tZ210Lm5uYW5ldC5jb22CHXd3dy5yZXB1dGF0aW9ubWdtdC5u
bmFuZXQuY29tMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0
dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQwSKBGoESGQmh0
dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcyVExTUlNBU0hB
MjU2MjAyMENBMS0xLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGlnaWNlcnQuY29t
L0RpZ2lDZXJ0R2xvYmFsRzJUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3JsMIGHBggr
BgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNv
bTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lD
ZXJ0R2xvYmFsRzJUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3J0MAwGA1UdEwEB/wQC
MAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AO7N0GTV2xrOxVy3nbTNE6Iy
h0Z8vOzew1FIWUZxH7WbAAABiyii70EAAAQDAEcwRQIgcVG6rvILd7J3+yrhgLzh
faRKUtvIF9wbSc4OuN9gIYQCIQDDAPYIrUtc6Rl6eNPrZInXWIUacn80702S5xxT
1qMcsQB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiyii70AA
AAQDAEcwRQIhALAtfxGO38tzsVn3O7Jx5w04ig7/duMfkuBCpx0k62EMAiAgX0MR
FWHoBEHZIPXFsbm/DC33eRk7mOUb3loexLOibgB1ANq2v2s/tbYin5vCu1xr6HCR
cWy7UYSFNL2kPTBI1/urAAABiyii7zMAAAQDAEYwRAIgL6GzdpbH3wCeWrQc9DnG
POJVUNCLFl9ZpWjJ0pYfRU8CICvH9bC50jd/mnZXr0uF9w/plvshtC9oIaqS4tsB
E211MA0GCSqGSIb3DQEBCwUAA4IBAQDHbjUSrkI6FXHB1DqXZ/U4c343u3yQLQdr
QSVbilHlo3qghkyuQigyuP441Yo0cuYAfdOx0BDZmgqHxQPBJj/otTLKIjHyHhY7
quJNxXoi7NYhw9327teemX401pX71WeP+uVI4jjxLCWgRNeaj/iG1R383zdX9kJu
kSCUcBGL7IdoVC2pADiJiUlr4ubvJXGkLDXst9s9mpvwU9CjO3E03vhyKxdvlfAA
/RJNZ2170qmk4wSj0iR7ZkmLUzWHpH5CrVnHamNjcbdsiET39uqe7mUAoIK/ze9B
0CmAP3dfoQUkhbDktNWeo0d8urJxbUQ0FYqjhYbfh3O2wd/qcW6V
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk5cHdDoGAIDb5PhHU3u
tzRWzyg6vXh+Xx8HLvZW/RkbecYTceh11tVqCUxCR9QQXUnFDAy4kqBvHeijbZbv
lGf+rWa3YaMEZrBgmTlKfG1GqBSpXo43jswQHOfD8l0nBBBUedHMf7PYdwlbGvpM
rAfmxU89l5FKU/L6q8JB8G4pTOMrRKFpAnKOUmGMVczctxnzaToWqmozmwcwNV4L
W68ZLQwr5jiSZRBcUU7zu7vOKm/AtUTpgJ/9Oyn0e1MzpW8wfIp90uEkBSUjeh2J
XmmH4sv3S4W8og1a8MHDSUyfS0ev1b/ZCzluPzGmDvQgQ9R9cEPTpOcM8WD20aig
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20173492422404291634269908832840812159
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tennessee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Smyrna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nissan North America, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reputationmgmt.nnanet.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22509058956267656674157317972044306005300805540806325547476385366903407344803745079927479906123205493088014475367610745909118714061592209214144357549717945210779771738048846116810805540803041109106244989315905880907916841951603670432335118301938318763096571727201963712482141854571245405562925502230020173787130822643801758073609449966567149513819740662891645609223124840328870664164996356898381369484665224256230283151567625733351708953926010752754107657856815112823805823022833205540686223854604030114477991987514218705449279285477080150753064405285399963215486272652502130174740014203872488955498660763984395280507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2419f2b97ce56588196829af9a98d6e9bacda813
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reputationmgmt.nnanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reputationmgmt.nnanet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c76e3512ae423a1571c1d43a9767f538737e37bb7c902d076b41255b8a51e5a37aa0864cae422832b8fe38d58a3472e6007dd3b1d010d99a0a87c503c1263fe8b532ca2231f21e163baae24dc57a22ecd621c3ddf6eed79e997e34d695fbd5678ffae548e238f12c25a044d79a8ff886d51dfcdf3757f6426e91209470118bec8768542da900388989496be2e6ef2571a42c35ecb7db3d9a9bf053d0a33b7134def8722b176f95f000fd124d676d7bd2a9a4e304a3d2247b66498b533587a47e42ad59c76a636371b76c8844f7f6ea9eee6500a082bfcdef41d029803f775fa1052485b0e4b4d59ea3477cbab2716d4434158aa38586df8773b6c1dfea716e95