*.shepherdsfriendly.co.uk

- The Shepherds Friendly Society Ltd -

Issued by DigiCert Secure Server CA

About this certificate

This digital certificate with serial number 0f:83:4f:c2:43:4a:5d:8b:11:32:ba:9b:aa:bc:8f:27 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Shepherds Friendly Society Ltd

Organization: The Shepherds Friendly Society Ltd
State / Province: Cheshire
Locality: Cheadle
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:83:4f:c2:43:4a:5d:8b:11:32:ba:9b:aa:bc:8f:27
Serial Number (int): 20620228526689414676240779215059586855
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cc:b3:e9:85:78:1d:3d:b0:5e:ba:e4:05:91:52:90:29:be:c7:14:42
AuthorityKeyId: 90:71:db:37:eb:73:c8:ef:dc:d5:1e:12:b6:34:ba:2b:5a:a0:a6:92

Fingerprint (sha1): db:71:31:a0:1a:1d:b5:b4:97:ab:c9:ec:af:20:b1:8e:9b:80:1c:be
Fingerprint (sha256): 13:c9:14:7a:92:b2:df:1a:a8:81:f2:66:c8:2f:c5:49:f5:de:83:dd:ff:67:d0:24:a8:91:7b:57:fd:5a:77:42

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-g6.crl

Check the revocation status for certificate *.shepherdsfriendly.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.shepherdsfriendly.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.shepherdsfriendly.co.uk
shepherdsfriendly.co.uk

Other certificates including the domain name shepherdsfriendly.co.uk

(limited to 100 certificates)
ssl389932.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389931.cloudflaressl.com
ssl389930.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
ssl389932.cloudflaressl.com
ssl389932.cloudflaressl.com
*.shepherdsfriendly.co.uk
ssl389931.cloudflaressl.com
ssl389930.cloudflaressl.com
www.shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
www.shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
*.shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
*.shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
*.shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
*.shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389930.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389930.cloudflaressl.com
ssl389932.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389932.cloudflaressl.com
sni.cloudflaressl.com
ssl389930.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
*.shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
ssl389932.cloudflaressl.com
ssl389931.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389930.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389932.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389931.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389931.cloudflaressl.com
ssl389930.cloudflaressl.com
sni111518.cloudflaressl.com
shepherdsfriendly.co.uk
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389931.cloudflaressl.com
ssl389930.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389932.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
www.shepherdsfriendly.co.uk
ssl389932.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389930.cloudflaressl.com
*.shepherdsfriendly.co.uk
ssl389932.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389930.cloudflaressl.com
ssl389931.cloudflaressl.com
ssl389931.cloudflaressl.com
*.shepherdsfriendly.co.uk
ssl389932.cloudflaressl.com
sni111518.cloudflaressl.com
sni111518.cloudflaressl.com
ssl389932.cloudflaressl.com
ssl389931.cloudflaressl.com
ssl389932.cloudflaressl.com
sni.cloudflaressl.com
ssl389931.cloudflaressl.com
ssl389930.cloudflaressl.com
ssl389932.cloudflaressl.com

Certificate

The complete raw certificate details for *.shepherdsfriendly.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgIQD4NPwkNKXYsRMrqbqryPJzANBgkqhkiG9w0BAQUFADBI
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSIwIAYDVQQDExlE
aWdpQ2VydCBTZWN1cmUgU2VydmVyIENBMB4XDTE0MDYwNjAwMDAwMFoXDTE1MDgx
MDEyMDAwMFowgYMxCzAJBgNVBAYTAkdCMREwDwYDVQQIEwhDaGVzaGlyZTEQMA4G
A1UEBxMHQ2hlYWRsZTErMCkGA1UEChMiVGhlIFNoZXBoZXJkcyBGcmllbmRseSBT
b2NpZXR5IEx0ZDEiMCAGA1UEAwwZKi5zaGVwaGVyZHNmcmllbmRseS5jby51azCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANJW06Xo/zH4iGgTuuXNrRmV
273V9I1JD7SNjsnCqeivn1wR4zv9uJsZaSvg2Ql49QddmEEJ3M4ehrBFgd4eLs4p
LWrqGpN+fy8ORlrxnNrJCHA9cqHAahMkHOinsV8SoMwnvrcXB4TJmkYBSgAdwF6U
XaraAlF2hHXlzmuaYwxUmdgmh5yKzMU1ldvB/P+y0GrAbayaGE//+pzbWt3L34M7
hfBVfMnJR2p64zHfvjVubK3UDL5va0xxugsQbALUN/Hl73lJNeNEeGkJ9J6l/hKY
l/gybdY5ED0H8UkomLMSBl278l+Vsbzeh/5w58Saq99nBPGPs3BSEyBhGTsmUq8C
AwEAAaOCAeEwggHdMB8GA1UdIwQYMBaAFJBx2zfrc8jv3NUeErY0uitaoKaSMB0G
A1UdDgQWBBTMs+mFeB09sF665AWRUpApvscUQjA9BgNVHREENjA0ghkqLnNoZXBo
ZXJkc2ZyaWVuZGx5LmNvLnVrghdzaGVwaGVyZHNmcmllbmRseS5jby51azAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGEGA1Ud
HwRaMFgwKqAooCaGJGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLWc2LmNy
bDAqoCigJoYkaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2EtZzYuY3JsMEIG
A1UdIAQ7MDkwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3
LmRpZ2ljZXJ0LmNvbS9DUFMweAYIKwYBBQUHAQEEbDBqMCQGCCsGAQUFBzABhhho
dHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQgYIKwYBBQUHMAKGNmh0dHA6Ly9jYWNl
cnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNlY3VyZVNlcnZlckNBLmNydDAMBgNV
HRMBAf8EAjAAMA0GCSqGSIb3DQEBBQUAA4IBAQBXGOtrL5WQhVCiuV6tAtehlk1y
Ht+LXWYq8uNVJkstX2ihQ/iw/MbJyAXeDC1Wg+wFKO+6tTuB+I07pXqsezets6wy
FxuPiUeNaC+7cxbx50l95ubgtfWH4MZQ55HnaxIi+WdE50su63SuJqMBBLK+uHQj
8AI1kmdKyWCVgp9YmXoyt/uR4zQkaXiVHJVxJS0+1YaVDjGnhXilDEZK1DymQQvY
YhcdU+dHQNEz7yolpZ8CwbFe7jHIeB3vdvScnsrsf+HH1DfAXfnKrcvdBsxH46w7
tko5hD5vvvrW6B3kxRMf905yOfqpiQpUYsqprWLgmfxCgnbpohXW8qCIuRV+
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lbTpej/MfiIaBO65c2t
GZXbvdX0jUkPtI2OycKp6K+fXBHjO/24mxlpK+DZCXj1B12YQQnczh6GsEWB3h4u
ziktauoak35/Lw5GWvGc2skIcD1yocBqEyQc6KexXxKgzCe+txcHhMmaRgFKAB3A
XpRdqtoCUXaEdeXOa5pjDFSZ2CaHnIrMxTWV28H8/7LQasBtrJoYT//6nNta3cvf
gzuF8FV8yclHanrjMd++NW5srdQMvm9rTHG6CxBsAtQ38eXveUk140R4aQn0nqX+
EpiX+DJt1jkQPQfxSSiYsxIGXbvyX5WxvN6H/nDnxJqr32cE8Y+zcFITIGEZOyZS
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20620228526689414676240779215059586855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cheshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cheadle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Shepherds Friendly Society Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.shepherdsfriendly.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26552859909233116972807629190014035082325626938070299324320927159931416847764141341807998617851283216287153381319657006877347050652312771544922562257010760583860226827444229707915688361433534464433736292783120088254666281676924067864531212183862859591052646644739169569410797787398715432609093048295486229451276628395054637526709561448742099680059084036502340783306633689513165582991776351857375097830787660875699588581048039267103069089725039152154725742686291822433157442384826159266861518472934647735809580870237975593298129782604205737284337590649950098097516916735398451528857799667328800781977152539732476318383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9071db37eb73c8efdcd51e12b634ba2b5aa0a692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccb3e985781d3db05ebae40591529029bec71442
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shepherdsfriendly.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shepherdsfriendly.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005718eb6b2f95908550a2b95ead02d7a1964d721edf8b5d662af2e355264b2d5f68a143f8b0fcc6c9c805de0c2d5683ec0528efbab53b81f88d3ba57aac7b37adb3ac32171b8f89478d682fbb7316f1e7497de6e6e0b5f587e0c650e791e76b1222f96744e74b2eeb74ae26a30104b2beb87423f0023592674ac96095829f58997a32b7fb91e334246978951c9571252d3ed586950e31a78578a50c464ad43ca6410bd862171d53e74740d133ef2a25a59f02c1b15eee31c8781def76f49c9ecaec7fe1c7d437c05df9caadcbdd06cc47e3ac3bb64a39843e6fbefad6e81de4c5131ff74e7239faa9890a5462caa9ad62e099fc428276e9a215d6f2a088b9157e