exchange02.endologix.com

- Endologix Inc. -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 0b:ae:8d:3d:43:df:9c:2c:33:64:99:55:de:c1:72:9c was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • 1 DNS name(s) are bare public suffixes: exchange02 The domain SHOULD NOT have a bare public suffix (awslabs certlint)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

Endologix Inc.

Organization: Endologix Inc.
State / Province: California
Locality: Irvine
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:ae:8d:3d:43:df:9c:2c:33:64:99:55:de:c1:72:9c
Serial Number (int): 15527832280696986485296055999067681436
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 31:ee:6f:37:8d:25:bd:3e:c6:4c:03:d0:d1:65:76:cf:61:2a:81:5c
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): 7a:29:5b:1b:d3:8e:e8:55:77:80:d1:3a:b7:2d:27:5c:b9:b5:46:05
Fingerprint (sha256): 11:e5:42:0c:56:53:df:64:ee:3c:c7:9a:f3:ee:14:0f:fa:a3:b3:45:17:24:3e:78:19:6c:da:58:20:d4:dd:16

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-g20.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g20.crl

Check the revocation status for certificate exchange02.endologix.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exchange02.endologix.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exchange02.endologix.com
fileserver.endologix.com
exchange02
autodiscover.endologix.com
endologix.com
appserver.endologix.com
exchange.endologix.com

Other certificates including the domain name endologix.com

(limited to 100 certificates)
ithelpdesk.endologix.com
5707090131681280-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
wifiguest.endologix.com
leapfrog-ssl-36.gcs-web.com
us2.endologix.com
exchange02.endologix.com
leapfrog-ssl-36.gcs-web.com
endologix.com
eu1.endologix.com
leapfrog-ssl-36.gcs-web.com
ithelpdesk.endologix.com
5688555066097664-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
ithelpdesk.endologix.com
salesforce.endologix.com
5707090131681280-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
us4.endologix.com
5707090131681280-fe3.pantheonsite.io
ithelpdesk.endologix.com
endologix.com
5707090131681280-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
ithelpdesk.endologix.com
us3.endologix.com
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
*.endologix.com
leapfrog-ssl-36.gcs-web.com
5694979263430656-fe3.pantheonsite.io
usirmkexch01.endologix.com
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
endologix.com
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
endologix.com
5707090131681280-fe3.pantheonsite.io
helpdesk.dpsgroupglobal.com
leapfrog-ssl-36.gcs-web.com
ithelpdesk.endologix.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
mail.endologix.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
ithelpdesk.endologix.com
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
*.endologix.com
mail.endologix.com
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
ithelpdesk.endologix.com
ithelpdesk.endologix.com
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
marketing.endologix.com
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
LyncWebExt.endologix.com
endologix.com
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io

Certificate

The complete raw certificate details for exchange02.endologix.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3CqM8tzB+J3DQW4ALck
VHQT7dmnAImxGoFT3Z7QjviSPIVhxxVfAAoWCPnvWdDfuFI4c/B25L8UZZ6IHqsf
v8kouuDdnEa5JlK+03YBVp84B7/WPlg6z73s9hFle1I60frUm8ZdnfxxYY/ULonO
e9+r6eRxmEQCHKivh6cjRUcNOBNIqKDoYthko0Hf4fejbd15y+zi7o9BWIZPjJ/G
3+KmbKJF0BdEFn80oLhv2+6wR/4R25TgcqJfuG+T/7yZPDRjf4eeTjThz1OOglYm
S8aasqkxpyI7tHXxyPsr/LIQEAi+PPkDPSopFur4HQDaHmdRPWFIEadduok223qn
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15527832280696986485296055999067681436
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Irvine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Endologix Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exchange02.endologix.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20632400819037278653280006600353830611860525380127758613781726673380452899509444973155935532116425377719265682869397238176288962941256986842424626132798326007370116721415619944280493448331205320195632189455800450387807138199468353252778751296051890039377062202577254476561867508876157764777099582043113539160290737932243995646624293769427623993587438518351120779864033908197432824555689221204989405332441832538606224531178473325686193695053971070820407370139185940982470902314559549430676984542756362280091774519033422717349813206139066446335307177768865080582135083362816405423515761417145655324796991851512341374963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31ee6f378d25bd3ec64c03d0d16576cf612a815c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange02.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileserver.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange02'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appserver.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.endologix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g20.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g20.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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