lync-noram01.asg.com

- Allen Systems Group Inc. -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 08:18:9f:4d:ff:56:b8:05:c2:09:0d:06:ac:83:1f:19 was issued on by DigiCert Inc.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Allen Systems Group Inc.

Organization: Allen Systems Group Inc.
State / Province: Florida
Locality: Naples
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:18:9f:4d:ff:56:b8:05:c2:09:0d:06:ac:83:1f:19
Serial Number (int): 10761670173603171206844730567557324569
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f8:2d:c9:a6:06:5b:5a:98:08:42:bf:13:e3:f8:66:55:12:e2:3f:bd
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): 30:e4:34:f1:f8:6a:a9:bc:b7:77:b0:4f:b4:f9:7d:8f:05:37:51:3b
Fingerprint (sha256): 13:49:af:ec:14:3d:f8:80:ee:82:f9:44:0f:20:d3:e8:cf:c1:4a:73:f1:a7:fb:23:15:3e:c0:30:bb:2f:f2:2d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-g28.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g28.crl

Check the revocation status for certificate lync-noram01.asg.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lync-noram01.asg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lync-noram01.asg.com
sip.asg.com
usnaplyncfe02v.asg.com
usnaplyncedg01v.asg.com
usnaplyncedg02v.asg.com
usnaplyncpc01v.asg.com
usnaplyncwac01v.asg.com
usnaplyncfe01v.asg.com
dialin.asg.com
meet.asg.com
admin.asg.com
LyncdiscoverInternal.asg.com
lync.asg.com
Lyncdiscover.asg.com

Other certificates including the domain name asg.com

(limited to 100 certificates)
cloud.asg.com
sa57gl.wpc.edgecastcdn.net
io.gdi.lenovo.com
sa454gl.wpc.edgecastcdn.net
controlsystems.newcenturyresources.com
*.asg.com
mylanstatus.globalvisioninc.com
sl.asg.com
sa57gl.wpc.edgecastcdn.net
lync-emea02.asg.com
asgmail1.asg.com
tst.asg.com
status.republic.com
voltage-pp-0000.asg.com
ftp.asg.com
status.amanah.com
status.amanah.com
mylanstatus.globalvisioninc.com
sa454gl.wpc.edgecastcdn.net
*.asg.com
status.channelengine.com
sa454gl.wpc.edgecastcdn.net
lawson.asg.com
sa454gl.wpc.edgecastcdn.net
sa454gl.wpc.edgecastcdn.net
mylanstatus.globalvisioninc.com
USAPF-WLC-LAN-2-1.asg.com
sa454gl.wpc.edgecastcdn.net
status.wavity.info
www.viveportstatus.com
www.viveportstatus.com
mail.asg.com
lync-noram01.asg.com
sa454gl.wpc.edgecastcdn.net
mylanstatus.globalvisioninc.com
sa454gl.wpc.edgecastcdn.net
altastatus.us.veritas.com
mi.portal.sagrado.edu
partners.asg.com
status.republic.com
docs.asg.com
status.medpt.com
naples-vpn.asg.com
monitor.mss.brainwalk.net.br
partners.asg.com
status.greenewx.com
riverg.asg.com
asgmail2007.asg.com
ftp.asg.com
ae.asg.com
sa57gl.wpc.edgecastcdn.net
sa454gl.wpc.edgecastcdn.net
asgweb.asg.com
sa528gl.wpc.edgecastcdn.net
sa454gl.wpc.edgecastcdn.net
inhydsfbsbs01v.asg.com
ftp.asg.com
asgsupport.asg.com
sa57gl.wpc.edgecastcdn.net
sa57gl.wpc.edgecastcdn.net
lync-emea01.asg.com
sl.asg.com
sa57gl.wpc.edgecastcdn.net
status.admiresty.co
sapbi.asg.com
citrixweb.asg.com
sa454gl.wpc.edgecastcdn.net
bin-eu.asg.com
sni19635gl.wpc.edgecastcdn.net
mylanstatus.globalvisioninc.com
uern.d5n.is
sa454gl.wpc.edgecastcdn.net
sa57gl.wpc.edgecastcdn.net
sa57gl.wpc.edgecastcdn.net
mylanstatus.globalvisioninc.com
sa454gl.wpc.edgecastcdn.net
www.viveportstatus.com
mylanstatus.globalvisioninc.com
sa454gl.wpc.edgecastcdn.net
sa57gl.wpc.edgecastcdn.net
naples-vpn.asg.com
source-team.asg.com
sa454gl.wpc.edgecastcdn.net
asgu.asg.com
status.alogna.co.ao
sa454gl.wpc.edgecastcdn.net
sa57gl.wpc.edgecastcdn.net
cloudfactorydevrdg.asg.com
*.asg.com
www.viveportstatus.com
www.asg.com
sa454gl.wpc.edgecastcdn.net
lync-noram01-ext.asg.com
asgwebtest.asg.com
asgwebtest.asg.com
www.viveportstatus.com
status.channelengine.com
status.healthera.co.uk
status.conpds.com
status.conpds.com

Certificate

The complete raw certificate details for lync-noram01.asg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiEv+KRgl6EklDwwZQcR
XEflIRN5nGdLDEd2T8SYyMFM7moWrJHDLkl0Sc2P1oJN5jDXvn+43BvCHe8g/I+x
HU7ySa1/Z/8aCKaZgawS42JxutVzQc97uQQ+0eyYmkKq9o6P8P8gi9akd20tMZkz
aZyXRYqHXBK6ptpMUim6zxi20F9Vv65YxgTP/9SJb7LnAYCqtQc6CcqqklxaRwEd
L/iTCf4jqelmHK13JDLRD98yO7Gpp+PZuWHOuQcsWEV37QDUs3h/uscuzJlGaqkh
yzC7sT2lyw06q/HvvvcqwiQc6VYPaL/8REu6JP5ErMsVHHAMP1be8QXYCsTiazVF
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10761670173603171206844730567557324569
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Naples'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Allen Systems Group Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lync-noram01.asg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25516502913975680128362887511916933518675537619777992964042817493012972441345072227597523431352644348910425707858556260230963167692187387599037450502561958117834215273224539923554926754248003173363360687713914427414858503672211865724140178378954824230328680849576570655793952969788823920516851079965198962943001823575632419124156863389397182359531553429647624207967168709796555802617964934134956549963710675302181404903798668465972306403546058281751924302047986659907959964239848127953618521253858623797195771148663695870042752085771014201325207190966633343053206606146444043935507288646813222415897241619420109161913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f82dc9a6065b5a980842bf13e3f8665512e23fbd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (297 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync-noram01.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usnaplyncfe02v.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usnaplyncedg01v.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usnaplyncedg02v.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usnaplyncpc01v.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usnaplyncwac01v.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usnaplyncfe01v.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.asg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g28.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g28.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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