secure04.lithium.com

- Khoros, LLC -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:3c:ee:29:55:ce:24:ae:8a:ac:0b:76:6a:87:69:47 was issued on by DigiCert Inc.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Khoros, LLC

Organization: Khoros, LLC
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:3c:ee:29:55:ce:24:ae:8a:ac:0b:76:6a:87:69:47
Serial Number (int): 18925560240896681839338040265521195335
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3d:c2:61:41:92:8b:10:06:a3:05:7b:95:6a:8c:43:c3:d1:9c:3f:75
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 54:af:97:6b:32:41:67:36:3c:f3:05:d3:97:19:8d:fb:52:75:e8:8f
Fingerprint (sha256): 13:d6:64:0b:2f:96:31:1d:71:2d:85:8b:8e:93:32:ae:ec:1d:b1:b1:e3:e7:26:10:1a:c8:ee:a5:ff:a1:b8:8d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate secure04.lithium.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure04.lithium.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure04.lithium.com
*.lithium.com
community.ee.co.uk
forumbeta.sfr.fr
forum.sfr.fr
community.usa.canon.com
community.southwest.com
telekomhilft.telekom.de
community.telekom-dienste.de
foren.telekom.de
forum.t-online.de
www.foren.t-online.de
foren.t-online.de
www.forum.t-online.de
feedback.telekom-hilft.de
forum.telekom.de
www.southwestaircommunity.com
explore.webe.com.my
community.myob.com
community.carestreamdental.com
community.polarisportal.com
community.instacartshopper.com
community.carbonblack.com
community.comdirect.de
community.isc2.org
community.orange.be
www.datev-community.de
community.atlassian.com
answers.atlassian.com
ficoforums.myfico.com
nation.marketo.com
www.nation.marketo.com
community.macmillanlearning.com
forum.datarobot.com
community.datarobot.com
la-communaute.sfr.fr
community.macmillan.com
classroomcompass.bfwpub.com
communaute.sfr.fr
community.paxata.com
community.esri.com
community.later.com
community.thinkific.com
community.onestreamsoftware.com
forum.bell.ca
forum.virginplus.ca
community.netwitness.com
community.athletawell.com
community.poly.com
community.fivetran.com

Other certificates including the domain name lithium.com

(limited to 100 certificates)
secure06.stage.lithium.com
secure07.stage.lithium.com
secure07.stage.lithium.com
campus.lithium.com
statuspage.io
secure03.stage.lithium.com
secure07.lithium.com
vanity3.lithium.com
ebay01.secure.lithium.com
polycom.stage.lithium.com
secure04.stage.lithium.com
secure06.stage.lithium.com
sane01.secure.lithium.com
secure02.lithium.com
secure06.lithium.com
secure08.lithium.com
amp-forms.lithium.com
secure05.stage.lithium.com
mediasaturn01.secure.stage.lithium.com
secure08.lithium.com
statuspage.io
statuspage.io
vanity4.lithium.com
secure03.lithium.com
secure09.lithium.com
campus.lithium.com
secure01.preprod.lithium.com
statuspage.io
secure08.lithium.com
secure05.lithium.com
sane01.secure.lithium.com
secure06.lithium.com
secure03.stage.lithium.com
secure02.lithium.com
secure08.lithium.com
ak-att01.secure.lithium.com
secure08.lithium.com
statuspage.io
secure01.lithium.com
secure03.stage.lithium.com
secure05.stage.lithium.com
secure01.lithium.com
secure03.lithium.com
secure04.lithium.com
secure02.stage.lithium.com
secure04.stage.lithium.com
secure04.lithium.com
bmw01.secure.stage.lithium.com
sane01.secure.lithium.com
bosch01.secure.stage.lithium.com
secure04.stage.lithium.com
secure02.stage.lithium.com
secure06.stage.lithium.com
kvoqx44227.stage.lithium.com
*.socialweb.stage.lithium.com
duamz84957.lithium.com
ekzqi67577.lithium.com
vodafone01.secure.lithium.com
secure07.lithium.com
secure06.lithium.com
statuspage.io
secure07.stage.lithium.com
statuspage.io
secure06.lithium.com
secure03.stage.lithium.com
secure04.stage.lithium.com
secure03.lithium.com
secure05.stage.lithium.com
secure04.lithium.com
wpxey54623.lithium.com
secure01.lithium.com
bmw01.secure.stage.lithium.com
statuspage.io
pvsmt99345.lithium.com
secure02.stage.lithium.com
secure01.preprod.lithium.com
secure02.lithium.com
secure01.stage.lithium.com
secure04.stage.lithium.com
statuspage.io
secure02.lithium.com
secure05.lithium.com
statuspage.io
vanity3.lithium.com
google01.secure.lithium.com
cdapi.lithium.com
secure06.lithium.com
statuspage.io
secure03.stage.lithium.com
secure07.stage.lithium.com
statuspage.io
statuspage.io
secure07.lithium.com
secure06.stage.lithium.com
secure08.lithium.com
ak-google01.secure.lithium.com
sane01.secure.lithium.com
statuspage.io
statuspage.io
mediasaturn01.secure.stage.lithium.com

Certificate

The complete raw certificate details for secure04.lithium.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk2GKnHFNixIvbBj8sj2
/9q9ropTQzPw1ppQ7D0r3znoPmxLR1vbQmqesWwvpehOzYqx+D7TpDTgC3OKApmU
RNZuD7aPmZnstS94DStf2HzRBYnxH2yWjJ2o0yZLfdDGEXqz/cvFtnaLh8R6mygZ
GXZYjuknD//5cuNIliq1nglVUCo8HHy/30HBxZflzQ7PrJguDM7Yd3+tGgILY/rf
LE/t0OvZlubYhvZJ5mDukmnXD/NSMrffMISm4KqzvhXTWYqibufAdkVRBcC48D0W
ztUjEfELwEZsrvHHOp0dwKegeS0JScRub/TN0rYRCQibrpJs21Uqc2JR+/rLypfk
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18925560240896681839338040265521195335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Khoros, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure04.lithium.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19478927515958296067393290347752188489810882144624321064932077526080402746994388541925368698885752401980348527834776537192326986137525876415674688836060042205685896578184055066724561303780730449351168052233097755201623876857309110241860925922556367544828387655032862771594993795786401428781490268184795020255977848653192632657257247018368473191587780912603708033860195047608745955394768161021602540372648826515762161557042486836713207828700751269494794429414217037817489823853447641576349758209186547862787532042021817239361142492120183760892239125788344008207541359018323741282332729406741837843762435091598897833037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3dc26141928b1006a3057b956a8c43c3d19c3f75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure04.lithium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lithium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.ee.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forumbeta.sfr.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.sfr.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.southwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telekomhilft.telekom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.telekom-dienste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foren.telekom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.t-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foren.t-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foren.t-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forum.t-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.telekom-hilft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.telekom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southwestaircommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.webe.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.myob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.carestreamdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.polarisportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.instacartshopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.carbonblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.comdirect.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.isc2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.orange.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datev-community.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.atlassian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.atlassian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ficoforums.myfico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nation.marketo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nation.marketo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.macmillanlearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.datarobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.datarobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la-communaute.sfr.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.macmillan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classroomcompass.bfwpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communaute.sfr.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.paxata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.esri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.later.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.thinkific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.onestreamsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.bell.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.virginplus.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.netwitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.athletawell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.poly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.fivetran.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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