*.sanssl-bsd.bsdtools.com

- Blue State Digital -

Issued by Trustwave Organization Validation SHA256 CA, Level 1

About this certificate

This digital certificate with serial number 06:63:c9:b2:c6:9c:48:b8:b6:1e:c7:36:83:89:57:33:a6:38:4f was issued on by Trustwave Holdings, Inc..

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Blue State Digital

Organization: Blue State Digital
State / Province: MA
Locality: Boston
Country: US

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:63:c9:b2:c6:9c:48:b8:b6:1e:c7:36:83:89:57:33:a6:38:4f
Serial Number (int): 142497221888006957094589801049918417781798991
Serial Number lenght: 147 bits, 19 octets

SubjectKeyId: 6b:af:21:ad:39:fa:97:15:57:b9:db:15:5b:25:31:06:2a:82:17:5b
AuthorityKeyId: ca:ce:1d:18:03:77:1e:1c:f3:7c:58:b2:9a:70:a8:08:80:16:f4:ae

Fingerprint (sha1): cf:31:54:6f:2a:e4:fa:a1:03:a9:fc:ee:70:72:5f:92:a3:e5:b9:11
Fingerprint (sha256): 13:2d:d8:07:9a:9b:c5:f9:3c:33:2b:fb:0a:98:ca:f7:0c:db:42:4c:61:f9:98:d3:4a:77:54:1e:74:9e:79:26

Issuing Certificate URL: http://ssl.trustwave.com/issuers/OVCA2_L1.crt

Revocation information

OCSP Server: http://ocsp.trustwave.com/
CRL Distribution Point: http://crl.trustwave.com/OVCA2_L1.crl

Check the revocation status for certificate *.sanssl-bsd.bsdtools.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sanssl-bsd.bsdtools.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sanssl-bsd.bsdtools.com
*.bluestatedigital.com
bluestatedigital.com
*.bsdtools.com
bsdtools.com
*.bsd.net
*.cp.bsd.net
bsd.net
*.bsdinternal.com
bsdinternal.com
*.dev.bsd.net
*.ts.bsd.net
*.sc.bsd.net
*.sbx.bsd.net
*.wpd.bsd.net
*.ee.bsd.net
*.blue.dev.bsd.net
*.indigo.dev.bsd.net
*.indigo.dev.cp.bsd.net
*.blue.dev.cp.bsd.net
*.swat.dev.bsd.net
*.swat.dev.cp.bsd.net
bsdstatus.com
www.bsdstatus.com
*.3cdn.net
3cdn.net
api.bsd.net
*.api.bsd.net

Other certificates including the domain name bsdtools.com

(limited to 100 certificates)
*.sanssl-009.bsdtools.com
*.sanssl-010.bsdtools.com
*.sanssl-001.bsdtools.com
*.sanssl-014.bsdtools.com
*.sanssl-001.bsdtools.com
*.sanssl-014.bsdtools.com
*.sanssl-012.bsdtools.com
*.sanssl-fastly-001.bsdtools.com
*.sanssl-002.bsdtools.com
*.sanssl-002.bsdtools.com
*.sanssl-013.bsdtools.com
*.sanssl-011.bsdtools.com
*.sanssl-fastly-001.bsdtools.com
*.sanssl-003.bsdtools.com
letsencrypt-origin.bsdtools.com
*.sanssl-011.bsdtools.com
*.sanssl-009.bsdtools.com
*.sanssl-006.bsdtools.com
*.sanssl-011.bsdtools.com
*.sanssl-006.bsdtools.com
*.sanssl-003.bsdtools.com
*.sanssl-013.bsdtools.com
*.sanssl-004.bsdtools.com
*.sanssl-014.bsdtools.com
*.sanssl-006.bsdtools.com
*.sanssl-012.bsdtools.com
*.sanssl-fastly-001.bsdtools.com
*.sanssl-007.bsdtools.com
*.sanssl-013.bsdtools.com
*.sanssl-003.bsdtools.com
*.sanssl-fastly-001.bsdtools.com
sanssl-dvle-000.bsdtools.com
*.sanssl-010.bsdtools.com
*.sanssl-bsd.bsdtools.com
abacustest-main.edge.bluestate.digital
abacustest-main.edge.bluestate.digital
*.sanssl-003.bsdtools.com
*.sanssl-005.bsdtools.com
*.sanssl-003.bsdtools.com
*.sanssl-003.bsdtools.com
*.sanssl-bsd.bsdtools.com
*.sanssl-001.bsdtools.com
*.sanssl-008.bsdtools.com
sanssl-dvle-000.bsdtools.com
*.sanssl-009.bsdtools.com
*.sanssl-011.bsdtools.com
abacustest-main.edge.bluestate.digital
*.sanssl-013.bsdtools.com
*.sanssl-002.bsdtools.com
sanssl-dvle-000.bsdtools.com
*.sanssl-013.bsdtools.com
*.sanssl-003.bsdtools.com
*.sanssl-bsd.bsdtools.com
*.sanssl-011.bsdtools.com
*.sanssl-bsd.bsdtools.com
*.sanssl-014.bsdtools.com
*.sanssl-004.bsdtools.com
*.sanssl-004.bsdtools.com
*.sanssl-012.bsdtools.com
*.sanssl-003.bsdtools.com
*.sanssl-012.bsdtools.com
*.sanssl-012.bsdtools.com
abacustest-main.edge.bluestate.digital
*.sanssl-002.bsdtools.com
*.sanssl-011.bsdtools.com
*.sanssl-014.bsdtools.com
*.sanssl-004.bsdtools.com
*.sanssl-bsd.bsdtools.com
*.sanssl-bsd.bsdtools.com
*.sanssl-002.bsdtools.com
ncadp-ohio.edge.bluestate.digital
*.sanssl-007.bsdtools.com
*.sanssl-011.bsdtools.com
*.sanssl-009.bsdtools.com
*.sanssl-008.bsdtools.com
*.sanssl-003.bsdtools.com
*.sanssl-002.bsdtools.com
ncadp-90millionstrong.edge.bluestate.digital
*.sanssl-002.bsdtools.com
*.sanssl-011.bsdtools.com
*.sanssl-013.bsdtools.com
ncadp-virginia.edge.bluestate.digital
*.sanssl-006.bsdtools.com
*.sanssl-012.bsdtools.com
*.sanssl-011.bsdtools.com
*.sanssl-014.bsdtools.com
abacustest-main.edge.bluestate.digital
*.sanssl-011.bsdtools.com
*.sanssl-002.bsdtools.com
*.sanssl-005.bsdtools.com
*.sanssl-011.bsdtools.com
*.sanssl-009.bsdtools.com
*.sanssl-011.bsdtools.com
*.sanssl-bsd.bsdtools.com
*.sanssl-001.bsdtools.com
*.sanssl-010.bsdtools.com
*.sanssl-011.bsdtools.com
*.sanssl-fastly-001.bsdtools.com
*.sanssl-006.bsdtools.com
*.sanssl-009.bsdtools.com

Certificate

The complete raw certificate details for *.sanssl-bsd.bsdtools.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHEjCCBfqgAwIBAgITBmPJssacSLi2Hsc2g4lXM6Y4TzANBgkqhkiG9w0BAQsF
ADCBtTELMAkGA1UEBhMCVVMxETAPBgNVBAgTCElsbGlub2lzMRAwDgYDVQQHEwdD
aGljYWdvMSEwHwYDVQQKExhUcnVzdHdhdmUgSG9sZGluZ3MsIEluYy4xPTA7BgNV
BAMTNFRydXN0d2F2ZSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTSEEyNTYgQ0Es
IExldmVsIDExHzAdBgkqhkiG9w0BCQEWEGNhQHRydXN0d2F2ZS5jb20wHhcNMTUw
MjI2MTEzNjU4WhcNMTcwMzE3MTczNjU4WjBsMSIwIAYDVQQDDBkqLnNhbnNzbC1i
c2QuYnNkdG9vbHMuY29tMRswGQYDVQQKDBJCbHVlIFN0YXRlIERpZ2l0YWwxDzAN
BgNVBAcMBkJvc3RvbjELMAkGA1UECAwCTUExCzAJBgNVBAYTAlVTMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf5SKeF3iKJG9FzAFn1eHithVD5DTUKS
3VhpQoYrx9kYeJB2ez3ZRXsyBHPEFUW/eWk/eN26MHYTGU0dTW05jg2ovynYGPNq
1jm9Sep3TEpSYeHLTzkY9ygFCgHJcoP6tl2ELKIjD7TU9HWzh057m+A8D165KPAz
Z5HQAdqV4+HGx+kvsel3o1s7MfrCg81MsCUAQeeCSSI2gbyIc76EV/GkDBLEG2YD
OtuDP6gCIA7BBc8OHglXIRCXReFeJGePm21dp4tGjPQuqxav8YUNp/9WiNgUgNXJ
8F3c/5tNStnFGxVcytBtkYlWmTYj1OaME+X6HqsQDOu63drie0kI7wIDAQABo4ID
YTCCA10wDAYDVR0TAQH/BAIwADALBgNVHQ8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwIGCCsGAQUFBwMBMB0GA1UdDgQWBBRrryGtOfqXFVe52xVbJTEGKoIXWzAf
BgNVHSMEGDAWgBTKzh0YA3ceHPN8WLKacKgIgBb0rjBIBgNVHSAEQTA/MD0GDysG
AQQBge0YAwMDAwQEAzAqMCgGCCsGAQUFBwIBFhxodHRwczovL3NzbC50cnVzdHdh
dmUuY29tL0NBMIIB6gYDVR0RBIIB4TCCAd2CGSouc2Fuc3NsLWJzZC5ic2R0b29s
cy5jb22CFiouYmx1ZXN0YXRlZGlnaXRhbC5jb22CFGJsdWVzdGF0ZWRpZ2l0YWwu
Y29tgg4qLmJzZHRvb2xzLmNvbYIMYnNkdG9vbHMuY29tggkqLmJzZC5uZXSCDCou
Y3AuYnNkLm5ldIIHYnNkLm5ldIIRKi5ic2RpbnRlcm5hbC5jb22CD2JzZGludGVy
bmFsLmNvbYINKi5kZXYuYnNkLm5ldIIMKi50cy5ic2QubmV0ggwqLnNjLmJzZC5u
ZXSCDSouc2J4LmJzZC5uZXSCDSoud3BkLmJzZC5uZXSCDCouZWUuYnNkLm5ldIIS
Ki5ibHVlLmRldi5ic2QubmV0ghQqLmluZGlnby5kZXYuYnNkLm5ldIIXKi5pbmRp
Z28uZGV2LmNwLmJzZC5uZXSCFSouYmx1ZS5kZXYuY3AuYnNkLm5ldIISKi5zd2F0
LmRldi5ic2QubmV0ghUqLnN3YXQuZGV2LmNwLmJzZC5uZXSCDWJzZHN0YXR1cy5j
b22CEXd3dy5ic2RzdGF0dXMuY29tggoqLjNjZG4ubmV0gggzY2RuLm5ldIILYXBp
LmJzZC5uZXSCDSouYXBpLmJzZC5uZXQwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDov
L2NybC50cnVzdHdhdmUuY29tL09WQ0EyX0wxLmNybDBxBggrBgEFBQcBAQRlMGMw
JgYIKwYBBQUHMAGGGmh0dHA6Ly9vY3NwLnRydXN0d2F2ZS5jb20vMDkGCCsGAQUF
BzAChi1odHRwOi8vc3NsLnRydXN0d2F2ZS5jb20vaXNzdWVycy9PVkNBMl9MMS5j
cnQwDQYJKoZIhvcNAQELBQADggEBAJJDDjWZpLDm3+FQUe/8oh7BrSiZ4HE6knI2
2isuGkbRUEP+Y2euyO06q9xlZk8ZA/GNkucQV0j1b2wU+qlHWbHAOdxws5e2ottz
p+JPf1eF66mezvWjlgJUKMmc+yXG/gvK5ffWYeGkX6OJnE9+FnOUfVgc17uB1CoH
S88ydoYWqQTCNVG3ZBufwRIxGbqMAQ+h8aq+HIRF0SoKehaqmpHsgTHo4q8lYe96
17tGXTmZ5zTBIZCr5bLuO/3YnTSCnMgd1QrmnV5NT1ZOOJW36Bp6bFRzZZ/ZETWG
6nEGYagApKrDbSeBbKBMCiEoY/A74tuDBJzupP28/uNZSBT5rp0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf5SKeF3iKJG9FzAFn1e
HithVD5DTUKS3VhpQoYrx9kYeJB2ez3ZRXsyBHPEFUW/eWk/eN26MHYTGU0dTW05
jg2ovynYGPNq1jm9Sep3TEpSYeHLTzkY9ygFCgHJcoP6tl2ELKIjD7TU9HWzh057
m+A8D165KPAzZ5HQAdqV4+HGx+kvsel3o1s7MfrCg81MsCUAQeeCSSI2gbyIc76E
V/GkDBLEG2YDOtuDP6gCIA7BBc8OHglXIRCXReFeJGePm21dp4tGjPQuqxav8YUN
p/9WiNgUgNXJ8F3c/5tNStnFGxVcytBtkYlWmTYj1OaME+X6HqsQDOu63drie0kI
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 142497221888006957094589801049918417781798991
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Organization Validation SHA256 CA, Level 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-26 11:36:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-17 17:36:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sanssl-bsd.bsdtools.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Blue State Digital'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Boston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23479496754036976494302715918427320434274605587982488516850001665629794214772279963308183388482364886368218714312316300223858779960757845280550086156595137001545327273014247512256788315525307243779728239817891606173244518146062401712919818855734974538061704237890297243190419353149656763552640488514769599742857072537596311175258928878919052692851323493594493303461731850212587381458925689871247433335907697874199025861621514907699911439321001126970385687524660889975141601139693969038932119356780204865766431673293868201387229723916870242504746599306884083620486178121667891790087498311114622927870422535593609726191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6baf21ad39fa971557b9db155b2531062a82175b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cace1d1803771e1cf37c58b29a70a8088016f4ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.30360.3.3.3.3.4.4.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://ssl.trustwave.com/CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanssl-bsd.bsdtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluestatedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluestatedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bsdtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsdtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cp.bsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bsdinternal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsdinternal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.bsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ts.bsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sc.bsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbx.bsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wpd.bsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ee.bsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blue.dev.bsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indigo.dev.bsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indigo.dev.cp.bsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blue.dev.cp.bsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swat.dev.bsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swat.dev.cp.bsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsdstatus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsdstatus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3cdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3cdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.bsd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trustwave.com/OVCA2_L1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trustwave.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl.trustwave.com/issuers/OVCA2_L1.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0092430e3599a4b0e6dfe15051effca21ec1ad2899e0713a927236da2b2e1a46d15043fe6367aec8ed3aabdc65664f1903f18d92e7105748f56f6c14faa94759b1c039dc70b397b6a2db73a7e24f7f5785eba99ecef5a396025428c99cfb25c6fe0bcae5f7d661e1a45fa3899c4f7e1673947d581cd7bb81d42a074bcf32768616a904c23551b7641b9fc1123119ba8c010fa1f1aabe1c8445d12a0a7a16aa9a91ec8131e8e2af2561ef7ad7bb465d3999e734c12190abe5b2ee3bfdd89d34829cc81dd50ae69d5e4d4f564e3895b7e81a7a6c5473659fd9113586ea710661a800a4aac36d27816ca04c0a212863f03be2db83049ceea4fdbcfee3594814f9ae9d