s4b.ct950.com

- CallTower, Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 02:33:e8:c3:0c:44:c0:63:95:bd:64:04:70:a7:7c:44 was issued on by DigiCert Inc.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CallTower, Inc

Organization: CallTower, Inc
Organization unit: ASE
State / Province: Utah
Locality: South Jordan
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:33:e8:c3:0c:44:c0:63:95:bd:64:04:70:a7:7c:44
Serial Number (int): 2927984103671781028919056066905865284
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f0:cb:83:37:6f:e8:0d:7c:9e:5d:39:6b:4d:df:b0:e2:12:a1:e2:9b
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 2f:cb:c3:2a:fa:19:46:39:fc:4a:e7:2b:18:a5:ff:10:96:86:ec:7d
Fingerprint (sha256): 15:5d:dd:00:8d:2a:3e:d1:74:2b:75:92:4c:4f:6b:8c:0c:5e:c8:91:67:7b:d2:08:e7:04:9a:39:41:76:2c:d1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate s4b.ct950.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s4b.ct950.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s4b.ct950.com
meet.ct950.com
dialin.ct950.com
lyncdiscover.ct950.com
lyncdiscover.res.us
lyncdiscover.anglerenvironmental.com
lyncdiscover.carmelpartners.net
lyncdiscover.cloverbcm.com
lyncdiscover.dwsteel.com
lyncdiscover.ebaengineering.com
lyncdiscover.empirepetroleum.com
lyncdiscover.ltfoodsamericas.com
lyncdiscover.mmrs.com
lyncdiscover.pointbcap.com
lyncdiscover.pointb.com
lyncdiscover.sucampo.com
lyncdiscover.voaches.org
lyncdiscover.worksoft.com
lyncdiscover.calltower.com
lyncdiscover.mercurymedia.com
lyncdiscover.pucschools.org
lyncdiscover.syska.com
lyncdiscover.hartmanadvisors.com
lyncdiscover.ctdemo12.com
lyncdiscover.boingo.com
lyncdiscover.lhfs.com
lyncdiscover.nms.org
lyncdiscover.ninthdecimal.com
lyncdiscover.zerotothree.org
lyncdiscover.transpogroup.com
lyncdiscover.naocean.com
lyncdiscover.migcorp.net
lyncdiscover.polarisgm.com
lyncdiscover.asisonline.org
lyncdiscover.west-chester.com
lyncdiscover.gogsf.com
lyncdiscover.psgconsults.com
lyncdiscover.naproperties.com
lyncdiscover.blendtec.com
lyncdiscover.wrtdesign.com
lyncdiscover.spoken.com
lyncdiscover.monatglobal.com
lyncdiscover.greystonecommunities.com
lyncdiscover.searchwizards.com
lyncdiscover.plankindustries.com
lyncdiscover.accds.com
lyncdiscover.jmpco.com
lyncdiscover.onenorth.com
lyncdiscover.bmpc-law.com
lyncdiscover.carrprop.com
lyncdiscover.ffnm.org
lyncdiscover.goldenstatelumber.com
lyncdiscover.guentner.com.mx
lyncdiscover.hssi.com
lyncdiscover.macmiller.com
lyncdiscover.shawconstruction.net
lyncdiscover.wm2a.com
lyncdiscover.qual-pro.com
lyncdiscover.knowledgelake.com
lyncdiscover.persante.com
lyncdiscover.purelycloud.com
lyncdiscover.eonreality.com
lyncdiscover.suebausa.com
lyncdiscover.rff.org
lyncdiscover.voloridge.com
s4b3.ct950.com
lyncdiscover.ncqa.org
lyncdiscover.operationsmile.org
lyncdiscover.pepperconstruction.com
lyncdiscover.perkinseastman.com
atls4b.ct950.com
s4b1.ct950.com
lyncdiscover.strategichotels.com
s4b41.ct950.com
s4b02.ct950.com
s4b42.ct950.com
lyncdiscover.pinnaclecampusliving.com
lyncdiscover.cdlf.org
lyncdiscover.westfield-bank.com
lyncdiscover.clarknexsen.com
lyncdiscover.thinkhwi.com
lyncdiscover.migonline.com
lyncdiscover.metropower.com

Other certificates including the domain name ct950.com

(limited to 100 certificates)
sip3.ct950.com
sip51.ct950.com
sip3.ct950.com
s4b.ct950.com
sip11.ct950.com
sip51.ct950.com
s4b.ct950.com
sip3.ct950.com
sip41.ct950.com
sip3.ct950.com
sip61.ct950.com
sip41.ct950.com
s4b.ct950.com
sip41.ct950.com
sip.ct950.com
sip43.ct950.com
sip51.ct950.com
sip.ct950.com
s4b.ct950.com
sip3.ct950.com
s4b.ct950.com
sip61.ct950.com
s4b.ct950.com
sip3.ct950.com
sip.ct950.com
sip.ct950.com
sip41.ct950.com
sip61.ct950.com
sip41.ct950.com
sip.ct950.com
sip61.ct950.com
sip71.ct950.com
s4b.ct950.com
sip61.ct950.com
sip71.ct950.com
sip61.ct950.com
s4b.ct950.com
s4b.ct950.com
sip41.ct950.com
sip.ct950.com
sip61.ct950.com
sip51.ct950.com
sip71.ct950.com
sip71.ct950.com
s4b41.ct950.com
s4b.ct950.com
sip11.ct950.com
sip51.ct950.com
sip51.ct950.com
sip41.ct950.com
sip71.ct950.com
sip.ct950.com
sip71.ct950.com
sip51.ct950.com
sip51.ct950.com
sip31.ct950.com
sip41.ct950.com
sip.ct950.com
sip3.ct950.com
sip41.ct950.com
sip41.ct950.com
sip.ct950.com
sip51.ct950.com
sip61.ct950.com
sip.ct950.com
sip61.ct950.com
sip41.ct950.com
sip.ct950.com
sip51.ct950.com
sip61.ct950.com
sip.ct950.com
ct950.com
sip61.ct950.com
rp.ct950.com
sip41.ct950.com
sip51.ct950.com
sip3.ct950.com
sip61.ct950.com
sip51.ct950.com
sip71.ct950.com
s4b.ct950.com
sip51.ct950.com
sip43.ct950.com
sip61.ct950.com
sip3.ct950.com
sip51.ct950.com
sip41.ct950.com
s4b.ct950.com
sip61.ct950.com
cfe.ct950.com
sip.ct950.com
sip3.ct950.com
sip71.ct950.com
sip41.ct950.com
sip71.ct950.com
sip51.ct950.com
sip.ct950.com
sip61.ct950.com
sip71.ct950.com
sip41.ct950.com

Certificate

The complete raw certificate details for s4b.ct950.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQITCCDwmgAwIBAgIQAjPowwxEwGOVvWQEcKd8RDANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0xODAzMjIwMDAwMDBaFw0yMDA2MjQwMDAwMDBa
MHIxCzAJBgNVBAYTAlVTMQ0wCwYDVQQIEwRVdGFoMRUwEwYDVQQHEwxTb3V0aCBK
b3JkYW4xFzAVBgNVBAoTDkNhbGxUb3dlciwgSW5jMQwwCgYDVQQLEwNBU0UxFjAU
BgNVBAMTDXM0Yi5jdDk1MC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCOBojlzKzN79cGfYrQhsrhmglwRkOV1DG67UczZFVHNXLySS+md7X0F8i
bIS5oeQCMMK6u+Lh9SpBkfkIPyANeq0CheDNzXc/i1SlTdMQFq8IBDSKT+lE5gWt
i4DJjyyKdJtKqHOmwR1DWg/rvA3E13mp1yTtW21OGd6XWGrKJqbu9VJd0Ks17IMv
qgtpIpfUDSsPUcuwaHNvIAiqyavUsLXKYRn3wW1ZwI2qElJUhrcKBfEZ28ecjp0a
fwuRPdVUGVXfKoV64fhkvrnXCdRAUfWXGPDBTKRjbQa2LSUUUV2MBNxQsNTLfbEd
slKQ4qxVxmFS3wSksWkQt8Le7WSLAgMBAAGjggyzMIIMrzAfBgNVHSMEGDAWgBRR
aP+QrwIHdTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQU8MuDN2/oDXyeXTlrTd+w4hKh
4pswggjqBgNVHREEggjhMIII3YINczRiLmN0OTUwLmNvbYIObWVldC5jdDk1MC5j
b22CEGRpYWxpbi5jdDk1MC5jb22CFmx5bmNkaXNjb3Zlci5jdDk1MC5jb22CE2x5
bmNkaXNjb3Zlci5yZXMudXOCJGx5bmNkaXNjb3Zlci5hbmdsZXJlbnZpcm9ubWVu
dGFsLmNvbYIfbHluY2Rpc2NvdmVyLmNhcm1lbHBhcnRuZXJzLm5ldIIabHluY2Rp
c2NvdmVyLmNsb3ZlcmJjbS5jb22CGGx5bmNkaXNjb3Zlci5kd3N0ZWVsLmNvbYIf
bHluY2Rpc2NvdmVyLmViYWVuZ2luZWVyaW5nLmNvbYIgbHluY2Rpc2NvdmVyLmVt
cGlyZXBldHJvbGV1bS5jb22CIGx5bmNkaXNjb3Zlci5sdGZvb2RzYW1lcmljYXMu
Y29tghVseW5jZGlzY292ZXIubW1ycy5jb22CGmx5bmNkaXNjb3Zlci5wb2ludGJj
YXAuY29tghdseW5jZGlzY292ZXIucG9pbnRiLmNvbYIYbHluY2Rpc2NvdmVyLnN1
Y2FtcG8uY29tghhseW5jZGlzY292ZXIudm9hY2hlcy5vcmeCGWx5bmNkaXNjb3Zl
ci53b3Jrc29mdC5jb22CGmx5bmNkaXNjb3Zlci5jYWxsdG93ZXIuY29tgh1seW5j
ZGlzY292ZXIubWVyY3VyeW1lZGlhLmNvbYIbbHluY2Rpc2NvdmVyLnB1Y3NjaG9v
bHMub3JnghZseW5jZGlzY292ZXIuc3lza2EuY29tgiBseW5jZGlzY292ZXIuaGFy
dG1hbmFkdmlzb3JzLmNvbYIZbHluY2Rpc2NvdmVyLmN0ZGVtbzEyLmNvbYIXbHlu
Y2Rpc2NvdmVyLmJvaW5nby5jb22CFWx5bmNkaXNjb3Zlci5saGZzLmNvbYIUbHlu
Y2Rpc2NvdmVyLm5tcy5vcmeCHWx5bmNkaXNjb3Zlci5uaW50aGRlY2ltYWwuY29t
ghxseW5jZGlzY292ZXIuemVyb3RvdGhyZWUub3Jngh1seW5jZGlzY292ZXIudHJh
bnNwb2dyb3VwLmNvbYIYbHluY2Rpc2NvdmVyLm5hb2NlYW4uY29tghhseW5jZGlz
Y292ZXIubWlnY29ycC5uZXSCGmx5bmNkaXNjb3Zlci5wb2xhcmlzZ20uY29tghts
eW5jZGlzY292ZXIuYXNpc29ubGluZS5vcmeCHWx5bmNkaXNjb3Zlci53ZXN0LWNo
ZXN0ZXIuY29tghZseW5jZGlzY292ZXIuZ29nc2YuY29tghxseW5jZGlzY292ZXIu
cHNnY29uc3VsdHMuY29tgh1seW5jZGlzY292ZXIubmFwcm9wZXJ0aWVzLmNvbYIZ
bHluY2Rpc2NvdmVyLmJsZW5kdGVjLmNvbYIabHluY2Rpc2NvdmVyLndydGRlc2ln
bi5jb22CF2x5bmNkaXNjb3Zlci5zcG9rZW4uY29tghxseW5jZGlzY292ZXIubW9u
YXRnbG9iYWwuY29tgiVseW5jZGlzY292ZXIuZ3JleXN0b25lY29tbXVuaXRpZXMu
Y29tgh5seW5jZGlzY292ZXIuc2VhcmNod2l6YXJkcy5jb22CIGx5bmNkaXNjb3Zl
ci5wbGFua2luZHVzdHJpZXMuY29tghZseW5jZGlzY292ZXIuYWNjZHMuY29tghZs
eW5jZGlzY292ZXIuam1wY28uY29tghlseW5jZGlzY292ZXIub25lbm9ydGguY29t
ghlseW5jZGlzY292ZXIuYm1wYy1sYXcuY29tghlseW5jZGlzY292ZXIuY2FycnBy
b3AuY29tghVseW5jZGlzY292ZXIuZmZubS5vcmeCImx5bmNkaXNjb3Zlci5nb2xk
ZW5zdGF0ZWx1bWJlci5jb22CHGx5bmNkaXNjb3Zlci5ndWVudG5lci5jb20ubXiC
FWx5bmNkaXNjb3Zlci5oc3NpLmNvbYIabHluY2Rpc2NvdmVyLm1hY21pbGxlci5j
b22CIWx5bmNkaXNjb3Zlci5zaGF3Y29uc3RydWN0aW9uLm5ldIIVbHluY2Rpc2Nv
dmVyLndtMmEuY29tghlseW5jZGlzY292ZXIucXVhbC1wcm8uY29tgh5seW5jZGlz
Y292ZXIua25vd2xlZGdlbGFrZS5jb22CGWx5bmNkaXNjb3Zlci5wZXJzYW50ZS5j
b22CHGx5bmNkaXNjb3Zlci5wdXJlbHljbG91ZC5jb22CG2x5bmNkaXNjb3Zlci5l
b25yZWFsaXR5LmNvbYIZbHluY2Rpc2NvdmVyLnN1ZWJhdXNhLmNvbYIUbHluY2Rp
c2NvdmVyLnJmZi5vcmeCGmx5bmNkaXNjb3Zlci52b2xvcmlkZ2UuY29tgg5zNGIz
LmN0OTUwLmNvbYIVbHluY2Rpc2NvdmVyLm5jcWEub3Jngh9seW5jZGlzY292ZXIu
b3BlcmF0aW9uc21pbGUub3JngiNseW5jZGlzY292ZXIucGVwcGVyY29uc3RydWN0
aW9uLmNvbYIfbHluY2Rpc2NvdmVyLnBlcmtpbnNlYXN0bWFuLmNvbYIQYXRsczRi
LmN0OTUwLmNvbYIOczRiMS5jdDk1MC5jb22CIGx5bmNkaXNjb3Zlci5zdHJhdGVn
aWNob3RlbHMuY29tgg9zNGI0MS5jdDk1MC5jb22CD3M0YjAyLmN0OTUwLmNvbYIP
czRiNDIuY3Q5NTAuY29tgiVseW5jZGlzY292ZXIucGlubmFjbGVjYW1wdXNsaXZp
bmcuY29tghVseW5jZGlzY292ZXIuY2RsZi5vcmeCH2x5bmNkaXNjb3Zlci53ZXN0
ZmllbGQtYmFuay5jb22CHGx5bmNkaXNjb3Zlci5jbGFya25leHNlbi5jb22CGWx5
bmNkaXNjb3Zlci50aGlua2h3aS5jb22CGmx5bmNkaXNjb3Zlci5taWdvbmxpbmUu
Y29tghtseW5jZGlzY292ZXIubWV0cm9wb3dlci5jb20wDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAw
hi5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYuY3Js
MDSgMqAwhi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXIt
ZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0
dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMIGDBggrBgEFBQcB
AQR3MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBNBggr
BgEFBQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hB
MkhpZ2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADCCAfUGCisG
AQQB1nkCBAIEggHlBIIB4QHfAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fN
DsgN3BAAAAFiTjoJNQAABAMARzBFAiBGk09MkWA8Ud2p5TWtVAhT/54O1Pqgn82X
MZcbG2VBcAIhAPM2+K5BOGVfJaqs6hdXzCs/Jz8ewDQjoZDo8ZDFWRfMAHYAb1N2
rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFiTjoKwAAABAMARzBFAiBk
mZ4XbeHtWxmn1KaPqQC4XeqkgAez8MDYUx6XkuzAWwIhAM6fRMckknXqciUhSFuK
CMmQyafLJk/okyPQLNqkcpQsAHUAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZk
No4e0YUAAAFiTjoJYAAABAMARjBEAiACLiT0DDifOs21+/hLy4cWvcAhDNmbaJug
Kx13RuWu2wIgFUohSgfLj8jJ4I3edXObbYQY2R6XUMCq/ayapzmU01AAdgBVgdTC
FpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWJOOgvgAAAEAwBHMEUCIQD8
otva62sEMjEZqgT+elDmmxhvz+l8uSJwZ9H321t+UgIgHlVHV2RcrJ1X+FxddDuQ
bQw2+jZ6MauhBMEtMOmjqp8wDQYJKoZIhvcNAQELBQADggEBAHC3nnOcVDS2Zz9l
3L5g4sozjGoLGZV+P+P4NJUVxe20lunr3kRcALKmvKfh51/Q4Q3jUFNhcW6Eed0f
vt2B3uTc8/Xfw5VdadYOchHod8QsXdZMy/+UDsDDshPAgDEHyIpizgpJLR8HozJB
DNdQHhkDALgqxbQzgGiQ8j1WXIjwryJF1O2fGBeGkWMXvYeFY/w6p/yRTKHsSApS
nYY6viNV0CGDaZv5PQqeeNaZt5EotpUsoyoApslPaZMBEszFE1T+DkFGEU/ws3my
3iJBNUUUhnJjJco3yfdZlQiRhohjgIVm7yWAs6fZc9/t4zWUhYNjjnxRy/UdJzW9
sy5IGI4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjgaI5cysze/XBn2K0Ib
K4ZoJcEZDldQxuu1HM2RVRzVy8kkvpne19BfImyEuaHkAjDCurvi4fUqQZH5CD8g
DXqtAoXgzc13P4tUpU3TEBavCAQ0ik/pROYFrYuAyY8sinSbSqhzpsEdQ1oP67wN
xNd5qdck7VttThnel1hqyiam7vVSXdCrNeyDL6oLaSKX1A0rD1HLsGhzbyAIqsmr
1LC1ymEZ98FtWcCNqhJSVIa3CgXxGdvHnI6dGn8LkT3VVBlV3yqFeuH4ZL651wnU
QFH1lxjwwUykY20Gti0lFFFdjATcULDUy32xHbJSkOKsVcZhUt8EpLFpELfC3u1k
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2927984103671781028919056066905865284
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-24 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Jordan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CallTower, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ASE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's4b.ct950.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24517896142759703649668834533719552582107567742000199174716242220136503907795522780282490953690131936886013428808736707715987646874249345770042201486230354704730592094688870504440568989178502824696811316835305445275335565904361285169935684667806006914088154726134552630175952356744679784636290311795079392359608404407058558993678133736423193961845329297569323325325352622885423024587345321780756424907383403809617176037998229193544055313447791445646125996474217738109911661244458817877789147293463066362715808492659046802263175022720162062812524148955233040857449357396927357570851552758028737373454490633678929880203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0cb83376fe80d7c9e5d396b4ddfb0e212a1e29b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2273 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.res.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.anglerenvironmental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.carmelpartners.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.cloverbcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.dwsteel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ebaengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.empirepetroleum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ltfoodsamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.mmrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pointbcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pointb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sucampo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.voaches.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.worksoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.calltower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.mercurymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pucschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.syska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.hartmanadvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ctdemo12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.boingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.lhfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.nms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ninthdecimal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.zerotothree.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.transpogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.naocean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.migcorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.polarisgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.asisonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.west-chester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.gogsf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.psgconsults.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.naproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.blendtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.wrtdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.spoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.monatglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.greystonecommunities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.searchwizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.plankindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.accds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.jmpco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.onenorth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmpc-law.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.carrprop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ffnm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.goldenstatelumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.guentner.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.hssi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.macmiller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.shawconstruction.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.wm2a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.qual-pro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.knowledgelake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.persante.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.purelycloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.eonreality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.suebausa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.rff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.voloridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b3.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ncqa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.operationsmile.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pepperconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.perkinseastman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atls4b.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b1.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.strategichotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b41.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b02.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b42.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pinnaclecampusliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.cdlf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.westfield-bank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.clarknexsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.thinkhwi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.migonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.metropower.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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