sia-ui.vap.rr.com

- Charter Communications Operating, LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:a5:0b:26:37:ff:d9:b4:66:6c:aa:ab:d1:c1:40:35 was issued on by DigiCert Inc.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Charter Communications Operating, LLC

Organization: Charter Communications Operating, LLC
Organization unit: ATG
State / Province: Missouri
Locality: Saint Louis
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:a5:0b:26:37:ff:d9:b4:66:6c:aa:ab:d1:c1:40:35
Serial Number (int): 20795375052938780068181016517393072181
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 17:5d:92:90:cf:64:0e:95:e7:c0:8f:aa:6a:a6:89:e8:9d:bd:f8:c4
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 70:f8:3a:01:fb:0b:6f:f7:19:4e:c1:62:73:5b:28:a2:28:7e:fe:d5
Fingerprint (sha256): 11:f3:e9:e7:14:76:99:33:b4:88:da:6c:16:85:0f:8e:66:4b:db:56:a2:48:55:f2:6f:b6:ff:28:31:58:ba:a6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate sia-ui.vap.rr.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sia-ui.vap.rr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sia-ui.vap.rr.com
sai-ui-nce.vap.rr.com
sai-ui-ncw.vap.rr.com
dnvrco-sia-app-01.vap.rr.com
chrcnc-sia-app-01.vap.rr.com
sia-dev-srv01.lab.mystrotv.com
sia-devtest-srv01.lab.mystrotv.com
sia-qa-srv01.lab.mystrotv.com
sia-int-app01.lab.mystrotv.com

Other certificates including the domain name rr.com

(limited to 100 certificates)
cpe-98-15-211-172.hvc.res.rr.com
spt01aldlmi.aldl.mi.charter.com
quantum.rr.com
cpe-172-101-147-96.rochester.res.rr.com
eis-lb.cdptpa.rr.com
chrcnc-vcenter.hv.rr.com
pt.rr.com
sitesurvey.cdptpa.rr.com
cpe-67-10-167-106.satx.res.rr.com
cpe-107-184-87-120.socal.res.rr.com
tools.tampflrdc.rr.com
hrndva-starapp-orngca-01.hrndva.rr.com
cpe-173-89-35-101.wi.res.rr.com
mail.biz.rr.com
cpe-174-109-144-250.nc.res.rr.com
self-care.portals.spectrum.net
xspdm01.hv.rr.com
webmail.rgv.rr.com
acs-nbi.nelab.rr.com
webmail.stx.rr.com
intelligenthome.ih.voip-eng.rr.com
xspws02.hv.rr.com
cpe-24-166-12-11.cinci.res.rr.com
registration.rr.com
ccs.ims.rr.com
help.rr.com
mobile.splunk.vap.rr.com
ids.rr.com
spt01aldlmi.aldl.mi.charter.com
registration.rr.com
unified.ohiordc.rr.com
cpe-76-88-5-186.san.res.rr.com
spectrumtvchoice.com
tmpfl-starweb-01.tampflrdc.rr.com
webmail.ec.rr.com
cm-cmftp.rr.com
tools.peakview.rr.com
ipmt.rr.com
don.dtdns.net
portal.qa.rr.com
tools.ohiordc.rr.com
cpe-23-240-65-89.socal.res.rr.com
webmail.ne.rr.com
spectrumtvchoice.com
webmail.maine.rr.com
webmail.stx.rr.com
playgames.rr.com
unified.west.rr.com
unified-graph.nyc.rr.com
cpe-172-101-147-96.rochester.res.rr.com
spectrumtvchoice.com
cpe-98-15-211-172.hvc.res.rr.com
twcidp.eng.rr.com
registration.rr.com
as02.hv.rr.com
lerg-cmftp.rr.com
webmail.rochester.rr.com
cpe-72-231-203-72.buffalo.res.rr.com
mail.biz.rr.com
webmail.hvc.rr.com
login.timewarnercable.com
unified.southeast.rr.com
pres.ims.rr.com
xspca02.hv.rr.com
cpe-98-27-160-175.neo.res.rr.com
webmail.dc.rr.com
rrcs-67-79-168-12.se.biz.rr.com
tr-ssl.rr.com
ids.rr.com
webmail.woh.rr.com
ids-stable-01.eng.rr.com
tools.nyroc.rr.com
cpe-76-175-132-186.socal.res.rr.com
xspca02.hv.rr.com
rrcs-74-62-1-18.west.biz.rr.com
cpe-172-251-211-68.socal.res.rr.com
videostore.bhn.rr.com
cpe-69-201-73-35.twcny.res.rr.com
quantumcontrol.rr.com
cpe-67-11-127-171.satx.res.rr.com
mail.twc.com
webmail.nyc.rr.com
ids.rr.com
spectrumtvchoice.com
cpe-23-243-249-149.socal.res.rr.com
ewsutils-uat.eng.rr.com
techmobile-qa05.eng.rr.com
mail.biz.rr.com
spectrumtvchoice.com
sia-ui.vap.rr.com
relay.ih.voip-eng.rr.com
urt.rr.com
help.rr.com
techmobile-sit05.eng.rr.com
xspca08.hv.rr.com
solosyncsit.eng.rr.com
programming.rr.com
xspca02.hv.rr.com
xspws02.hv.rr.com
xspdm01.hv.rr.com

Certificate

The complete raw certificate details for sia-ui.vap.rr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6bM/36B85PECn2khnB3
WMcSKPZHdeHsWeYG7EtSa0eguMI2mCSnSYwEswYif1pFLwgEearZSHiyDUjQwT7E
MmbWaG7C9gTBwst7D/KsTMSmod4kZ4zud+P0nKEqOLyB3sL9lbHqmOWmCoCAF3bn
Aln7FhC5X5IOIrq73dO615TTqeDS/7MlUaGu/ajb3ppz01EDmqkUOlFJpLeRiC/y
bjvOwcEhAwoiOa7YE8W5Ia841BdIseD+b0YzHtv9xg36IALSk20RPzXiI8UC7z78
deKqHp+dQH0EvpiStfJTCJjx93MhqJ2oGVulndR7slyyl+AuZq2oV7pEqdC/MEvv
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20795375052938780068181016517393072181
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charter Communications Operating, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ATG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sia-ui.vap.rr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20659096236489677591437544831617136911592472071570585401365313790507943843962138861523844049617263191832233003553514186841410325854639282952249210245163128389349459355776049285522392756531786661916778035066972051233743524172348413384656645577123697656780344119121741106041959098616267234737957205426635739811260762686641196095216063597812205054910833353277290634110549424052065590850332867458750569043975637854750442358362722385725811632490455867050484018083013059314486738009750389099026784140222108755595036503257156736176021485709069600245297190108610820559606349865053220082116504875210217037838843994005473849329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							175d9290cf640e95e7c08faa6aa689e89dbdf8c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (260 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sia-ui.vap.rr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sai-ui-nce.vap.rr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sai-ui-ncw.vap.rr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnvrco-sia-app-01.vap.rr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrcnc-sia-app-01.vap.rr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sia-dev-srv01.lab.mystrotv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sia-devtest-srv01.lab.mystrotv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sia-qa-srv01.lab.mystrotv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sia-int-app01.lab.mystrotv.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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