*.iij-engineering.co.jp

- IIJ Engineering Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0f:26:80:5a:f6:a8:a0:e7:b1:fa:c4:5b:48:ba:97:5f was issued on by DigiCert Inc.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IIJ Engineering Inc.

Organization: IIJ Engineering Inc.
Organization unit: Information Systems
State / Province: Tokyo
Locality: Chiyoda
Country: JP

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:26:80:5a:f6:a8:a0:e7:b1:fa:c4:5b:48:ba:97:5f
Serial Number (int): 20138330572699127047451976994855229279
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 23:96:d2:1c:c4:54:8d:e7:de:73:16:82:c4:96:f5:a3:31:65:36:b6
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): b9:f8:6d:08:f8:f7:09:ed:29:56:d4:e2:a8:da:99:f8:b1:40:92:ad
Fingerprint (sha256): 11:3b:90:cc:33:1d:a9:16:fb:8d:42:b2:2b:9b:5b:a0:a8:f8:a2:8b:9f:9a:ea:0c:33:27:3d:de:b2:55:21:7e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl

Check the revocation status for certificate *.iij-engineering.co.jp

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.iij-engineering.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.iij-engineering.co.jp
iij-engineering.co.jp
api-w01.pf.iij-engineering.co.jp
wsq-w01.pf.iij-engineering.co.jp
doc01.pf.iij-engineering.co.jp
content01.pf.iij-engineering.co.jp
recvgw01.pf.iij-engineering.co.jp
ieds1.ieds.iij-engineering.co.jp
ieds2.ieds.iij-engineering.co.jp
wsq-w02.pf.iij-engineering.co.jp
users.pf.iij-engineering.co.jp
wsterm-w01.pf.iij-engineering.co.jp

Other certificates including the domain name iij-engineering.co.jp

(limited to 100 certificates)
desk.nrroofs.com
*.iij-engineering.co.jp
metropax.doit.dev.br
help.revian.com
help.simplesclique.com.br
support.wisdomtree.com.au
support.valcon.us
atendimento.agenteverde.com.br
help.simplesclique.com.br
*.iij-engineering.co.jp
*.iij-engineering.co.jp
*.iij-engineering.co.jp
helpdesk.apextechres.net
atendimento.agenteverde.com.br
help.metaprisebanking.com
help.simplesclique.com.br
help.simplesclique.com.br
*.iij-engineering.co.jp
help.simplesclique.com.br
gcalshelp.gdc.ga.gov
support.dotmac.ng
support.valcon.us
help.simplesclique.com.br
*.iij-engineering.co.jp
support.itresolve.com.au
www.iij-engineering.co.jp
*.iij-engineering.co.jp
help.metaprisebanking.com
help.revian.com
help.simplesclique.com.br
support.dotmac.ng
*.iij-engineering.co.jp
jumpcloud.sinfopac.com
survey.iij-engineering.co.jp
support.kapspire.com
*.iij-engineering.co.jp
support.tabschool.in
support.dailymenus.com
support.wisdomtree.com.au
help.simplesclique.com.br
help.simplesclique.com.br
support.itresolve.com.au
*.iij-engineering.co.jp
*.iij-engineering.co.jp
atendimento.agenteverde.com.br
surveys.c3-solutions.ca
support.tabschool.in
help.simplesclique.com.br
survey.ivanrakovar.ru
help.simplesclique.com.br
support.tabschool.in
surveys.c3-solutions.ca
metropax.doit.dev.br
help.simplesclique.com.br
help.simplesclique.com.br
desk.digitalbusinessintel.com
support.valcon.us
soporte.bo.cl
*.iij-engineering.co.jp
jumpcloud.sinfopac.com
support.dailymenus.com
support.asylum-serve.com
*.iij-engineering.co.jp
support.wisdomtree.com.au
support.iij-engineering.co.jp
atendimento.agenteverde.com.br
*.iij-engineering.co.jp
gcalshelp.gdc.ga.gov
*.iij-engineering.co.jp
atendimento.agenteverde.com.br
soporte.sanelmann.es
*.iij-engineering.co.jp
*.iij-engineering.co.jp
support.wisdomtree.com.au
support.dotmac.ng
help.revian.com
atendimento.agenteverde.com.br
support.asylum-serve.com
help.simplesclique.com.br
*.iij-engineering.co.jp
tamil.awake.rkmm.org
help.simplesclique.com.br
*.iij-engineering.co.jp
*.iij-engineering.co.jp
rebates.tviewc.com
desk.nrroofs.com
smarthome.ebn.host
support.djip.ca
desk.nrroofs.com
support.cangopal.com
help.simplesclique.com.br
help.simplesclique.com.br
www.iij-engineering.co.jp
support.djip.ca
*.iij-engineering.co.jp
help.simplesclique.com.br
gcalshelp.gdc.ga.gov
helpdesk.apextechres.net
helpdesk.rebelroam.com
*.iij-engineering.co.jp

Certificate

The complete raw certificate details for *.iij-engineering.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3E9tRXfkl6qhAo/p+zE
EC6Ntv1gBNfHCvsr9m7CSD349HHn9BpFhJDsHltTUu8a9IF22FrwVujLQvSXqYrE
Al7VPLrV6jrTKF0vgWOfuYKNijviB0ONO4+TLq8phgA9herci0nv6vn7s+XZMTXp
ImYMAoE9ty/fv0a78rE7f12fb6lN4vS7l6vnVm4vXnJWV9OHW5OWlpc0mpojDZmX
RUagLaN8XkL52C8+PxV9Wj/ZHa2g8qCEYSBG0M24dwjmoS5Os4Xuk4M4TF8FFABf
4PoWLn/rX545XF6SydaFAH0dSUm7JmfTOR3sCQIThv4Xv1pSP05gSCNxZrj2W3ua
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20138330572699127047451976994855229279
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chiyoda'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IIJ Engineering Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Systems'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.iij-engineering.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18612872070233105714804352936151413772452246959571071244386950835756067955887205115115267334443402630663990467740146923638408466295397441341284244911236869907916246557161272382185355684838518765580771797985586890699705031554045686818712313000401171175237056715168647604490778630084019913611790107847922856540528131834420606647013739386208658648172505239500566383112310908875774097107507580570032429683474513640847276413333150296887528690526764608403473883943497746276870955809560109385193003069210276229824903795444293406800276452210494285263000464967974061561324076842694970157432516781987591447121821619779555531387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2396d21cc4548de7de731682c496f5a3316536b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (394 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-w01.pf.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsq-w01.pf.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doc01.pf.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content01.pf.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recvgw01.pf.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieds1.ieds.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieds2.ieds.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsq-w02.pf.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'users.pf.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsterm-w01.pf.iij-engineering.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a4295b743db5458a9be30fa53fa7c8d1047a71479b8723080843e8290837867f69a15a7a1ab637d744893b0aa92c1e304ac84d27bcea083546acc56875c2c29daab26e50d4f0417d92bd3610234832170e91bf4dbeaf4fd3633cdd55ea7f68100bb5ee89e942f062f7bd5ce53fc01f9aa42c4f66f7a1cd79542459bb928116a149a4a13824039c19c46209c1128bf4d9bf996f481c514384d0f571ca673ab1267aae0f236eb349c8a8bf409c664e2b9ee2631818a2a34cbc93c23bea8c3edd6a7e04b542411d903f5422397580c2ccbdd7ef4ae842b1b0953ecfa9a0e5cd5003436352462ca6223f64bdfd390b3d5132ae4e1f61e5d6f88ac3aa3e559521a0ab