consumerassurance.powersports.honda.com

- American Honda Motor Co., Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:a6:77:c5:74:56:27:c8:69:ae:bb:8d:71:03:e9:c8 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

American Honda Motor Co., Inc.

Organization: American Honda Motor Co., Inc.
State / Province: California
Locality: Torrance
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:a6:77:c5:74:56:27:c8:69:ae:bb:8d:71:03:e9:c8
Serial Number (int): 6181262512351711365826009258097109448
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 60:11:36:78:ae:a5:e3:95:0f:5f:e1:ac:32:a2:0a:7e:e3:fb:7c:75
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): cc:ae:ac:89:8a:22:c8:b6:75:71:32:58:21:67:86:60:80:2e:15:c3
Fingerprint (sha256): 12:17:cd:bd:38:c4:af:70:84:d1:d4:3b:54:db:74:49:0d:b8:e8:f8:01:8c:21:7c:64:a4:b5:d2:d1:30:84:86

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate consumerassurance.powersports.honda.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for consumerassurance.powersports.honda.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

consumerassurance.powersports.honda.com
consumerassurance.acura.com
consumerassurance.honda.com

Other certificates including the domain name honda.com

(limited to 100 certificates)
idmw.t.rd.honda.com
*.sample.location.services.honda.com
Product-hgt-PQ-Ver-101.t.rd.honda.com
www.in.honda.com
hnapxwpkiinf006.am.mds.honda.com
hgt-smartfact-sys.t.rd.honda.com
staging.hondajet.com
secure08.lithium.com
*.inapps.honda.com
webgui.ev3.wsc.dp.ahm-eis.honda.com
csr.honda.com
ahmpxlcewedge01.honda.com
secure05.stage.lithium.com
FTP.honda-eu.com
sts.mds.honda.com
secure08.lithium.com
greendealer.honda.com
staging.myaccount.honda.com
unittest.in.honda.com
m.acura.com
eheinlacs01-02sp.eu.honda.com
secure09.lithium.com
qhdmcwaspapp01.am.mds.honda.com
secure08.lithium.com
gsnuk3.honda.com
gsnsg4.hm.jp.honda.com
www.in.honda.com
staging.techinfo.honda.com
www.honda.com
secure08.lithium.com
secure08.lithium.com
idmw.t.rd.honda.com
www.in.honda.com
staging.hondajet.honda.com
*.services.powerequipment.honda.com
secure05.stage.lithium.com
staging.hondajet.honda.com
*.learntoride.honda.com
hnapxwpkiinf006.am.mds.honda.com
expe.honda.com
evotrack.honda.com
gsnjp3.honda.com
www.in.honda.com
akamai-san15.exacttarget.com
services.honda.com
*.rating.services.honda.com
ahmconfigmgr.honda.com
idmwt.t.rd.honda.com
mygarage.honda.com
*.connected.mygarage.honda.com
*.metrics.honda.com
estore.honda.com
D3AHMDCWSIIAP01.am.mds.honda.com
hgaldapds1.a.rd.honda.com
csr.honda.com
honda.com
portal-admin.buhan-dev.ext.hm.jp.honda.com
qa.cig.cps.honda.com
www.intest.honda.com
consumerassurance.honda.com
www.honda.com
www.in.honda.com
usb.honda.com
hgaldapds2.a.rd.honda.com
whc.honda.com
honda.com
bizver.dv.jp.honda.com
consumerassurance.powersports.honda.com
hamqxwpdlapp01.am.mds.honda.com
akamai-san77.exacttarget.com
staging.estore.honda.com
AHMDXWNMSAPP01.am.mds.honda.com
pat.myaccount.acura.com
*.shop.honda.com
asimo.honda.com
o365.mds.honda.com
myaccount.acura.com
*.dealer-authorize.dreamshop.honda.com
*.dealer-onboarding.dreamshop.honda.com
hm-aras-train.hm.jp.honda.com
ver-bim411.dv.jp.honda.com
haiqburwifs001.am.mds.honda.com
qicsimage.ham.am.honda.com
bizglb.hm.jp.honda.com
*.ca.usb.honda.com
ebizmail01.honda.com
*.honda.com.br
greendealer.honda.com
*.devproxy.services.honda.com
unittest.in.honda.com
checkout.marine.honda.com
*.inapps.honda.com
chm01.dv.jp.honda.com
staging.ca.hpd.honda.com
pete.honda.com
www.homeelectric.honda.com
Product-hgt-PQ-Prc-001.t.rd.honda.com
learntoride.honda.com
staging.pete.honda.com
click.alerts.honda.com

Certificate

The complete raw certificate details for consumerassurance.powersports.honda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHVTCCBj2gAwIBAgIQBKZ3xXRWJ8hprruNcQPpyDANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE
aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjQw
MTE3MDAwMDAwWhcNMjUwMTE2MjM1OTU5WjCBkDELMAkGA1UEBhMCVVMxEzARBgNV
BAgTCkNhbGlmb3JuaWExETAPBgNVBAcTCFRvcnJhbmNlMScwJQYDVQQKEx5BbWVy
aWNhbiBIb25kYSBNb3RvciBDby4sIEluYy4xMDAuBgNVBAMTJ2NvbnN1bWVyYXNz
dXJhbmNlLnBvd2Vyc3BvcnRzLmhvbmRhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKCDg7hVBbB2UizVwOZcOgHzmMoF5jS5FxNgAs92kYECSKJM
sWUOXcfMuc6qwdp2sXm+0t/K3n3qVkz9DSwRa/8iXCtGnIeki3CRtOLK6a2CAzei
PSSQsUi2wbk192aFSTAqXya8A21ifEZrMJGh01iJ3WRi3pjlQJXzisjJSZ0j/nfZ
mW1EfULaWLOcRZZHcCDrHW5RKcjK837GnJJWzQZ9co+zf+Q0JYw8D5QTpcdixJ8k
egs6ZjI2HZcuoj+vP2XV/fL+ZCoqIWZG8GVn+TbnOGCDZGjnUqO4QyXZPbMVqA/g
UAWoLyExX+cKIkeUHqI3JJvlfK63EDvZ6Z8NPS8CAwEAAaOCA98wggPbMB8GA1Ud
IwQYMBaAFHSFgMBmx9833s+9KTeqAx2+7c0XMB0GA1UdDgQWBBRgETZ4rqXjlQ9f
4awyogp+4/t8dTBsBgNVHREEZTBjgidjb25zdW1lcmFzc3VyYW5jZS5wb3dlcnNw
b3J0cy5ob25kYS5jb22CG2NvbnN1bWVyYXNzdXJhbmNlLmFjdXJhLmNvbYIbY29u
c3VtZXJhc3N1cmFuY2UuaG9uZGEuY29tMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkw
JwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8E
gZcwgZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEds
b2JhbEcyVExTUlNBU0hBMjU2MjAyMENBMS0xLmNybDBIoEagRIZCaHR0cDovL2Ny
bDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzJUTFNSU0FTSEEyNTYyMDIw
Q0ExLTEuY3JsMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v
Y3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGln
aWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzJUTFNSU0FTSEEyNTYyMDIwQ0ExLTEu
Y3J0MAwGA1UdEwEB/wQCMAAwggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB3AE51
oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjRhY1r4AAAQDAEgwRgIh
AL5KWNmgn2fdjnr4GZ0E11XYeAFhd88/GH87jPmpM1c6AiEA2Ev6zeOtZZx87jDW
ytIOhqq4pgw/a7b5X/REU/cmAs8AdwA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvB
vyiF7PhkbgAAAY0YWNbPAAAEAwBIMEYCIQDT10OaoYVoJcOkcDLXVQ/U2qgCN5yE
iNL/tjWhFzBZfwIhAK5MXwq49EARR5Y8HGRqM/+t3HxBN0yXR9dOmjsxSpFvAHYA
fVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowuebgAAAGNGFjWvQAABAMARzBF
AiBWh4+sqf1BjZVuQbhyPIypGIs6PjH+yExSjI/bAw2iJwIhAJrKzzc17y028wq4
HQAfg8wMhKvHRluRNJux/UETIcKjMA0GCSqGSIb3DQEBCwUAA4IBAQCGMYWrSbSD
hGLOBOzP0R1+sRqUAyGkh3+NRvffD1s/b/dnSzt6b+WyEEWCkvkfp68NQSMhMSaQ
cZzl2uWcRqgwChSPyNIsi3xojG3v+5tcsyd+pjzdbjFM3CQwB9Lb9O+GSj5YhG26
l5NsDTJSNVYqP1yd8V6f4/YfkWPWX9FkQmQqrrACJ0ofjsb/4JdsVauXV2LYHEBX
JgPFsdrHmzV3SiNZ/AC6ytHCAJwelNYPwA2MXv7NhVf9mFh01UwpYchcUDhVuN7O
HG+TkM4JvD0shJdTjp30ag1/Ejgov4DqZp1tc19RjrEUCoDaSrxI4IQuheBe7fIv
dJTcVG4Vg7AK
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIODuFUFsHZSLNXA5lw6
AfOYygXmNLkXE2ACz3aRgQJIokyxZQ5dx8y5zqrB2naxeb7S38refepWTP0NLBFr
/yJcK0ach6SLcJG04srprYIDN6I9JJCxSLbBuTX3ZoVJMCpfJrwDbWJ8RmswkaHT
WIndZGLemOVAlfOKyMlJnSP+d9mZbUR9QtpYs5xFlkdwIOsdblEpyMrzfsacklbN
Bn1yj7N/5DQljDwPlBOlx2LEnyR6CzpmMjYdly6iP68/ZdX98v5kKiohZkbwZWf5
Nuc4YINkaOdSo7hDJdk9sxWoD+BQBagvITFf5woiR5Qeojckm+V8rrcQO9npnw09
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6181262512351711365826009258097109448
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Torrance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Honda Motor Co., Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'consumerassurance.powersports.honda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20262981027095739277330033199372597203623978616329872384706193410654092846203578942128162284018424980452501035692147584818620812313249763054584855892124531127635731127682398937144639715629730404208165151877484146420563699951253956552438955178401971844231900413673466580401283420804229815027913296176735995349907834599359518078709608506587293083002204250878420933312015292768213530255899173027964240070230852992095574757033320925506762725500376943562734381986088548622786279078386776192237849357776183796529015181588925317065072902410096334648502095653559024641502589149831171683991357258562213236122201150154087415087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60113678aea5e3950f5fe1ac32a20a7ee3fb7c75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumerassurance.powersports.honda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumerassurance.acura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumerassurance.honda.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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