www.aspenrms.com

- Aspen Marketing Services, LLC -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 06:56:24:e5:99:ef:e8:42:56:86:7a:9c:90:42:79:d3 was issued on by DigiCert Inc.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

Aspen Marketing Services, LLC

Organization: Aspen Marketing Services, LLC
Organization unit: Aspen Marketing Services
State / Province: Illinois
Locality: West Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:56:24:e5:99:ef:e8:42:56:86:7a:9c:90:42:79:d3
Serial Number (int): 8422653862179674226442668125766973907
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f5:9b:9b:9b:48:46:7d:34:33:88:8b:97:a8:4a:6f:4c:e8:a6:94:5e
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): 9c:2b:95:94:c9:c6:0a:ac:20:a9:97:bb:83:aa:3f:2c:6b:cd:88:62
Fingerprint (sha256): 11:39:0f:e6:ac:f1:7b:ad:1e:2e:53:10:12:d5:d9:87:b8:f2:7f:93:41:cf:2c:f8:6c:bb:89:b1:4e:6a:d0:0f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-g24.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g24.crl

Check the revocation status for certificate www.aspenrms.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aspenrms.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aspenrms.com
ally.aspenrms.com
aspenconnect.ca
aspenrms.com
autonation.aspenrms.com
chrysler.aspenrms.com
chryslerreports.aspenrms.com
gmcssrreports.com
gmrms.aspenmsportal.com
gmrms.com
hyundaica.aspenrms.com
jaguar.aspenrms.com
landrover.aspenrms.com
ng.gm.aspenrms.com
nxdmzappstg1.aspenrms.com
nxgen.aspenrms.com
subaruca.aspenrms.com
toyota.aspenps.com
toyota.aspenrms.com
volvo.aspenrms.com
volvoatmca.aspenrms.com
volvoca.aspenrms.com
www.aspenconnect.ca
www.gmcssrreports.com
www.gmrms.com
jaguaronpoint.jlrext.com
landroveronpoint.jlrext.com
hyundaismartconnect.ca
www.hyundaismartconnect.ca
www.aspenps.com
www.mitsubishirms.com
www.mbdealerdirect.com
volvoatm.aspenrms.com
unsubscribe.aspenrms.com
ford.aspenrms.com
fr.hyundaismartconnect.ca
training.nissan.aspenrms.com
dnn.aspenrms.com
epsilonrms.com
www.epsilonrms.com
cssrtc.epsilonrms.com
qatest.cssrtc.epsilonrms.com

Other certificates including the domain name aspenrms.com

(limited to 100 certificates)
www.amssupport.net
www.aspenrms.com
ng.aspenrms.com
prd.cp.epsilonrms.com
ng.aspenrms.com
dmc.aspenrms.com
www.amssupport.net
ng.aspenrms.com
www.aspenrms.com
automotivecrm.epsilonrms.com
www.amssupport.net
ng.aspenrms.com
prd.cp.epsilonrms.com
www.aspenrms.com
www.aspenrms.com
www.aspenrms.com
er.epsilonrms.com
www.aspenrms.com
ng.aspenrms.com
ng.aspenrms.com
ng.aspenrms.com
ng.aspenrms.com
www.amssupport.net
www.amssupport.net
prd.cp.epsilonrms.com
www.amssupport.net
ng.aspenrms.com
ng.aspenrms.com
customerpreferences.aspenrms.com
ng.aspenrms.com
ng.aspenrms.com
er.epsilonrms.com
www.amssupport.net
www.aspenrms.com
ng.aspenrms.com
ng.aspenrms.com
www.amssupport.net
www.amssupport.net
prd.cp.epsilonrms.com
ng.aspenrms.com
gmcssrreports.com
www.aspenrms.com
ng.aspenrms.com
www.amssupport.net
dmc.aspenrms.com
ng.aspenrms.com
www.amssupport.net
www.gmcssrreports.com
ng.aspenrms.com
automotivecrm.epsilonrms.com
ng.aspenrms.com
subprod.epsilonrms.com
www.olca.aspenrms.com
www.aspenrms.com
www.amssupport.net
www.amssupport.net
www.amssupport.net
dmc.aspenrms.com
subprod.epsilonrms.com
ng.aspenrms.com
ng.aspenrms.com
www.aspenrms.com
www.amssupport.net
ng.aspenrms.com
ng.aspenrms.com
prd.cp.epsilonrms.com
www.aspenrms.com
subprod.epsilonrms.com
www.amssupport.net
customerpreferences.aspenrms.com
www.gmcssrreports.com
www.gmcssrreports.com
ng.aspenrms.com
ng.aspenrms.com
www.gmcssrreports.com
www.amssupport.net
ng.aspenrms.com
www.aspenrms.com
prd.cp.epsilonrms.com
customerpreferences.aspenrms.com
gmcssrreports.com
www.aspenrms.com
customerpreferences.aspenrms.com
ng.aspenrms.com
automotivecrm.epsilonrms.com
automotivecrm.epsilonrms.com
ng.aspenrms.com
ng.aspenrms.com
ng.aspenrms.com
automotivecrm.epsilonrms.com
ng.aspenrms.com
www.amssupport.net
www.amssupport.net
www.aspenrms.com
www.aspenrms.com
www.amssupport.net
automotivecrm.epsilonrms.com
ng.aspenrms.com
www.aspenrms.com
www.amssupport.net

Certificate

The complete raw certificate details for www.aspenrms.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45cx8BOcStBCK2PsSyOF
Qqog0NSNTRlaKmaV2LhKSgG0WxldKDj7opftdvk2RKp1E3TUBjPvrmDsQqMmyrV0
UwYjbAFlV/p/lETOgdYGwU0Upzea5Uy51uIztWENjlvUREgFWWVFfdRpbJT2P0dn
GOi2KSePAFwBSnzTIv13VcKsRm44fInSTRKc8CwhvMG71q8hkj3vKqrjLjOYi9qr
2MS2tfA2uVCH/LFMHvIF4fTK6ryVLCIVvOpohphjut8FAFa4bJMO21FMMBupsIWl
sRGajRPIPdaah9SEKStSW5mOrG858XHirFxgGJoZE/5OXeStvb5vWsn299GPwcmu
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8422653862179674226442668125766973907
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aspen Marketing Services, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aspen Marketing Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aspenrms.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28730652294859651096387054421434666732129294803943895031025564622348719232335339431013248381814029395163419647927206495037319145823189367286877240701801142467568909815256315862188825843165499278012014022846875604317455167331979907163341464569814238024807074500730215752808607446836035203648073676547887110830973727363484701978910075894152019381778215891572758382132477594112381962229110298854682581938843556336552725681917957806538119075226924323868655439683942579141137479397637122932767069174831522230328747101050222335794901663982873488457890846126896312677716792259010741531245875523136269566923570087694499950181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f59b9b9b48467d3433888b97a84a6f4ce8a6945e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (934 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ally.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspenconnect.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autonation.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrysler.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chryslerreports.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmcssrreports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmrms.aspenmsportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyundaica.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaguar.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landrover.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ng.gm.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nxdmzappstg1.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nxgen.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subaruca.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyota.aspenps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyota.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volvo.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volvoatmca.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volvoca.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspenconnect.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcssrreports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaguaronpoint.jlrext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landroveronpoint.jlrext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyundaismartconnect.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hyundaismartconnect.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspenps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitsubishirms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbdealerdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volvoatm.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unsubscribe.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ford.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.hyundaismartconnect.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.nissan.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnn.aspenrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epsilonrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epsilonrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cssrtc.epsilonrms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qatest.cssrtc.epsilonrms.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g24.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g24.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00405f100d066c5c40d64c85acb85361558a1a7dfac4184f8178b486a2e7f92ed0fcedc3fe2ee1eeb7ce1a141224062d0a4ab85f199c773e19733f1394558edafae705c66d805f9accea4c8d55c08ebf165005336ea381bee8e39b704db92564088b8a876f606059302b4c72b70d1543a49bcc88291ad599b8ef01a835b9404bb7ced9bd9f1d6d51d1dc2d359907efd7252064c531b3cbb276f35c285248f75ab591c2a2d8a4e3d80a7c9ab5a0c8133cd768a4fc13289dc1c0f932abf2d1cd1d07f364c0dcb9be3d36adcee304c02b8aded4fb63bf7d279522b44e96b8c8bd52d13525a1afe7ee61184edd06228daf56088301cc066d1d2fe0a750d8984b6c49a5