*.dla.maf.ae

- Majid Al Futtaim Holding LLC -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:28:77:46:3f:45:e0:20:9f:54:58:89:27:66:c2:83 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Majid Al Futtaim Holding LLC

Organization: Majid Al Futtaim Holding LLC
Locality: Dubai
Country: AE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:28:77:46:3f:45:e0:20:9f:54:58:89:27:66:c2:83
Serial Number (int): 12173163008701876420726585264789963395
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 08:1e:af:32:07:6f:a3:e9:a9:4a:78:bc:67:6a:a4:60:04:ae:e4:b7
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 83:70:a5:34:24:2f:82:05:b8:22:be:69:57:74:92:58:13:e6:01:8a
Fingerprint (sha256): 11:3e:28:46:75:62:e2:3c:de:ab:8e:81:92:ff:57:e0:db:e6:9e:f9:28:b7:f5:d9:21:96:05:c9:f2:15:35:40

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate *.dla.maf.ae

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dla.maf.ae

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dla.maf.ae
dla.maf.ae

Other certificates including the domain name maf.ae

(limited to 100 certificates)
*.dev.grid2.maf.ae
snowabudhabi-aut.maf.ae
api-share-dev.maf.ae
that.majidalfuttaim.com
*.cvm.maf.ae
d4-aut.maf.ae
www.majidalfuttaim.com
mportal-stg.maf.ae
*.grid2.maf.ae
mportal.maf.ae
ssl385337.cloudflaressl.com
*.maf.ae
mdm-api.dev.grid2.maf.ae
that.majidalfuttaim.com
mesa4.aylsoluciones.pw
smbu-api.maf.ae
www.majidalfuttaim.com
maf.ae
*.dev.grid2.maf.ae
api-share-sandbox.maf.ae
snowoman-preprod.maf.ae
that.majidalfuttaim.com
snowoman-preprod.maf.ae
that.majidalfuttaim.com
snowabudhabi-preprod.maf.ae
itsupport.pando.ai
that.majidalfuttaim.com
that.majidalfuttaim.com
snowoman-stg.maf.ae
that.majidalfuttaim.com
uniforms.maf.ae
ssl385338.cloudflaressl.com
that.majidalfuttaim.com
www.majidalfuttaim.com
www.majidalfuttaim.com
*.dla.maf.ae
*.dev.grid2.maf.ae
mafsdp.maf.ae
d4.maf.ae
mportal.maf.ae
that.majidalfuttaim.com
maf.ae
api-holding-dev.maf.ae
servicedesk.oneontacsd.org
www.majidalfuttaim.com
sharecmsheadless-auth.maf.ae
maf.ae
uniforms-auth.maf.ae
api-share-internal-fab-uat.maf.ae
sfsharerewards-stg.maf.ae
sharecmsheadless.maf.ae
maf.ae
*.governance.maf.ae
www.majidalfuttaim.com
www.majidalfuttaim.com
helpdesk.admix.com
*.maf.ae
snowabudhabi.maf.ae
www.validationportal.maf.ae
uniforms-auth.maf.ae
helpdesk.dpsgroupglobal.com
maf.ae
snowabudhabi-preprod.maf.ae
that.majidalfuttaim.com
uniforms-auth.maf.ae
api-share-prod.maf.ae
mportal-auth.maf.ae
*.maf.ae
snowabudhabi.maf.ae
*.grid2.maf.ae
servicedesk.metro-inet.us
snowoman-stg.maf.ae
lecitsupport.maf.ae
that.majidalfuttaim.com
hype.maf.ae
snowoman-aut.maf.ae
that.majidalfuttaim.com
d4-stg.maf.ae
sharecmsheadless-stg.maf.ae
snowabudhabi-preprod.maf.ae
ssl385338.cloudflaressl.com
snowabudhabi-preprod.maf.ae
snowabudhabi-aut.maf.ae
maf.ae
uniforms-auth.maf.ae
maf.ae
api-ventures-prod.maf.ae
*.maf.ae
that.majidalfuttaim.com
d4.maf.ae
snowoman-aut.maf.ae
www.majidalfuttaim.com
destek.coreway.com.tr
receiptworx.maf.ae
that.majidalfuttaim.com
uniforms-stg.maf.ae
that.majidalfuttaim.com
www.majidalfuttaim.com
api-share-internal-fab-dev.maf.ae
www.majidalfuttaim.com

Certificate

The complete raw certificate details for *.dla.maf.ae in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIQCSh3Rj9F4CCfVFiJJ2bCgzANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMTEwMTMwMDAwMDBa
Fw0yMjEwMTIyMzU5NTlaMFsxCzAJBgNVBAYTAkFFMQ4wDAYDVQQHEwVEdWJhaTEl
MCMGA1UEChMcTWFqaWQgQWwgRnV0dGFpbSBIb2xkaW5nIExMQzEVMBMGA1UEAwwM
Ki5kbGEubWFmLmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb/P
JrcVRj6k4E5xUnFq+Ogpm7S9UMjXC8mj/FeJzIboAAxCpEe3okIzwr8NPwJwL2m7
FXkLSvK3Eme0l6F6isSLSpx1FASQzTMfwp98Shm9GAc4NjXiG4+qwOW0u75lgbsQ
nEXoI9zjTDlDOWhq7udAoBPZSM9AyXpxaKHVmVWTi8Wg+4WcV8jEJIMT3uu+3S4w
3wBreeUFyrRHHkC4TekoMriEzQTNqtJZ0QRYBqxLjMlPYSXVMbMj61LOdb94mcka
Ag+Gnl7Wu+w9NgnEiAaIyRdU2Rtl0uxNf/ow00SLY3RwGlYRcwl6e/nybGKm53n1
jZQM6A+URb7LldX6HwIDAQABo4ICDjCCAgowHwYDVR0jBBgwFoAUt2ui6qiqhIx5
6rTaD5iyxZV2ufQwHQYDVR0OBBYEFAgerzIHb6PpqUp4vGdqpGAEruS3MCMGA1Ud
EQQcMBqCDCouZGxhLm1hZi5hZYIKZGxhLm1hZi5hZTAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGPBgNVHR8EgYcwgYQwQKA+
oDyGOmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1
NjIwMjBDQTEtNC5jcmwwQKA+oDyGOmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9E
aWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwPgYDVR0gBDcwNTAzBgZn
gQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BT
MH8GCCsGAQUFBwEBBHMwcTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNl
cnQuY29tMEkGCCsGAQUFBzAChj1odHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20v
RGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3J0MAwGA1UdEwEB/wQCMAAw
EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAIHR+fydT49/
G76I48sQUykKpPCKpAz9RqXlPcg8ofLgvIB/dJw5wiFEhqYMO/1yxfGYQqwnwQBp
PzyRRoLj15C9TmBGhJmC2YF7J8kC2JzqD11ilW2ttiC37Ox/jazTbYnu70ghbcAH
w7bXUPOntrfxh8m3ezNuE+EYmcWUnKkQQnSPF1iGvgHc+MDz6836FWmsVRl+DY1s
hGB2iU3tOyjwsymqArR3BhfEn0LHZPy2iMNJW365DpeMPUOe424XX8zbxNhZdd2H
PdrhF1D9x1Y6oYJ0BCaHyCkzQQNcrJdAn/k6OwVme/hsWfFmgWh92gkCs0CuRDPi
YGazf4b7b8g=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb/PJrcVRj6k4E5xUnFq
+Ogpm7S9UMjXC8mj/FeJzIboAAxCpEe3okIzwr8NPwJwL2m7FXkLSvK3Eme0l6F6
isSLSpx1FASQzTMfwp98Shm9GAc4NjXiG4+qwOW0u75lgbsQnEXoI9zjTDlDOWhq
7udAoBPZSM9AyXpxaKHVmVWTi8Wg+4WcV8jEJIMT3uu+3S4w3wBreeUFyrRHHkC4
TekoMriEzQTNqtJZ0QRYBqxLjMlPYSXVMbMj61LOdb94mckaAg+Gnl7Wu+w9NgnE
iAaIyRdU2Rtl0uxNf/ow00SLY3RwGlYRcwl6e/nybGKm53n1jZQM6A+URb7LldX6
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12173163008701876420726585264789963395
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dubai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Majid Al Futtaim Holding LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dla.maf.ae'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22943717832949467042684362730828301488350208048299365491122092448575148356379607146453491754985496694835367431076418857489465049581420690916958897275524012848856449312752760434662872058180924062947693553076850835430607489288190089273436771029499274252308724820225307207926421586101505661228674425816144514700144717037320827951186297721191631799074403456634240684846904187902570670494677946704502140181110474571184259016140810088728423747146777510792452394594189389599628201949747003939349315611824898677929489243418899924367026273942412745271538567277805610304653022648049879734526236664094259238009225464826410957343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							081eaf32076fa3e9a94a78bc676aa46004aee4b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dla.maf.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dla.maf.ae'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0081d1f9fc9d4f8f7f1bbe88e3cb1053290aa4f08aa40cfd46a5e53dc83ca1f2e0bc807f749c39c2214486a60c3bfd72c5f19842ac27c100693f3c914682e3d790bd4e6046849982d9817b27c902d89cea0f5d62956dadb620b7ecec7f8dacd36d89eeef48216dc007c3b6d750f3a7b6b7f187c9b77b336e13e11899c5949ca91042748f175886be01dcf8c0f3ebcdfa1569ac55197e0d8d6c846076894ded3b28f0b329aa02b4770617c49f42c764fcb688c3495b7eb90e978c3d439ee36e175fccdbc4d85975dd873ddae11750fdc7563aa18274042687c8293341035cac97409ff93a3b05667bf86c59f16681687dda0902b340ae4433e26066b37f86fb6fc8