cucmexpe02.amc.edu

- Albany Medical Center -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0c:e9:1d:cd:8b:a7:7c:f5:7f:be:38:54:09:4e:52:63 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Albany Medical Center

Organization: Albany Medical Center
Organization unit: Information Services
State / Province: New York
Locality: Albany
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:e9:1d:cd:8b:a7:7c:f5:7f:be:38:54:09:4e:52:63
Serial Number (int): 17161145592330323714068429656613081699
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 04:3f:3f:bf:5f:71:9b:b2:c2:75:3f:e6:66:c8:a4:b3:d5:3a:f5:01
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 1e:e3:7f:f7:45:b0:82:73:15:29:8b:d5:38:10:99:33:f4:69:b2:f0
Fingerprint (sha256): 15:cd:c3:0b:2e:a7:e9:40:3a:60:45:b3:a2:19:15:3f:a1:f1:75:c0:c5:ed:46:05:ce:4c:78:d6:14:86:d8:8f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate cucmexpe02.amc.edu

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cucmexpe02.amc.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amc.edu
cucmexpe02.amc.edu
cucmexpe01.amc.edu
cucmexpe03.amc.edu
collab-edge.amc.edu

Other certificates including the domain name amc.edu

(limited to 100 certificates)
citrix.amc.edu
misecure.amc.edu
AHSFHIRPROD.AMC.EDU
amcimeuq02.amc.edu
community.amc.edu
pamsupport.amc.edu
mediasite.amc.edu
sft.amc.edu
www.amc.edu
*.amc.edu
cucmexpe02.amc.edu
www.amc.edu
spauth.amc.edu
citrix.ext.amc.edu
wcms.amc.edu
sharepoint.amc.edu
sft.amc.edu
ms35.amcnt.amc.edu
lifeimg01.amc.edu
isite.amc.edu
mivsp.amc.edu
citrix.amc.edu
academic.amc.edu
ms52.amc.edu
CISEPOL5.amc.edu
ad01.amcnt.amc.edu
*.amc.edu
sakai.amc.edu
connectmeeting.amc.edu
ms35.amcnt.amc.edu
mediasite.amc.edu
cucmexpe02.amc.edu
mail1.amc.edu
sts.amc.edu
intranet.amc.edu
www.amc.edu
sft.amc.edu
test-paygw.amc.edu
AHSACDM01A.amcnt.amc.edu
sakai.amc.edu
prenataltest.amc.edu
cucmexpe02.amc.edu
myaccount.amc.edu
sakai.amc.edu
smail.amc.edu
engage.amc.edu
www.amc.edu
citrix.ext.amc.edu
ms35.amcnt.amc.edu
sft.amc.edu
hcweb01.amcnt.amc.edu
wcms.amc.edu
paygw.amc.edu
cucmexpc02.amc.edu
*.elibrary.amc.edu
cucmexpe02.amc.edu
academic.amc.edu
AHSACDM01B.AMCNT.AMC.EDU
analytics-t.amc.edu
ms387t.amc.edu
amcvpn.amc.edu
secure.iamaccurt1.amcnt.amc.edu
mivsp.amc.edu
ad09.amcnt.amc.edu
myaccount.amc.edu
amcsecurelink.amc.edu
sakai.amc.edu
amcvpn.amc.edu
soarianedm.amc.edu
sharepoint.amc.edu
docs.amc.edu
academic.amc.edu
wcms.amc.edu
connect.amc.edu
sts.amc.edu
connect.amc.edu
www.amc.edu
analytics.amc.edu
pay.amc.edu
prenatal.amc.edu
community.amc.edu
amc.edu
citrix.amc.edu
sharepoint.amc.edu
citrix.amc.edu
prenataltest.amc.edu
guest.amc.edu
webadvisor.amc.edu
md-citrix.amc.edu
webadvisor.amc.edu
vslides.amc.edu
sakai.amc.edu
rationalretention.amc.edu
paygw.amc.edu
sasoffice01.amc.edu
AHSFHIRT.AMC.EDU
*.elibrary.amc.edu
amcvpn.amc.edu
www.amc.edu
mail1.amc.edu

Certificate

The complete raw certificate details for cucmexpe02.amc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHhjCCBm6gAwIBAgIQDOkdzYunfPV/vjhUCU5SYzANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE
aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMjAwMzE4MDAwMDAwWhcNMjEwNDE1MTIw
MDAwWjCBjTELMAkGA1UEBhMCVVMxETAPBgNVBAgTCE5ldyBZb3JrMQ8wDQYDVQQH
EwZBbGJhbnkxHjAcBgNVBAoTFUFsYmFueSBNZWRpY2FsIENlbnRlcjEdMBsGA1UE
CxMUSW5mb3JtYXRpb24gU2VydmljZXMxGzAZBgNVBAMTEmN1Y21leHBlMDIuYW1j
LmVkdTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANe7LZMRPiKx8x26
wKmyjAL3SQmXaKVM1wAxag+Y1EIwI/CYFw4vYkEjQPvrVaPgTDSUexL0UMHoZBvQ
k7a1/i5siU9UMiXAUQE23fWpXNkWbsEULAJVaTkc5zwj/+ba29d0lEJYsb+S05Og
y1+aFaUh8N+2/gvQUXjTqrDRJKBYcbZeBUKg85eF0MhNe7nE3W3G4Dl/GA+7IXKU
irYeBStkZg2qmsXZ1JfekwMPN/2EnRLUm8JpJNIscQF2DijkgvJ2MfeAj3MmbXAF
+tYIFUQEbS23151pE1FWUxC2ZQd0jOyMiZfGqtU0Eors7oDkAaULUAACYLGSyvTd
81rmsS5lRmAFC7R6KzSQAZz7QKiPkELQddeBkC+lMbHCu/VXOlCqNNBXVdiaKTNb
nDS83Ss/9wCUgxsbr11/1ouWZn5vNlaYGTgJakIH3i++6182ugQxd8z2850bUwTk
OzTa+/32vGSZ+9Pvznkz0vuebYTfCB1D+PcRtyuhk0vXSRVrqFeSoUF0FF59F38U
VfByWEVtHJiPKMJrIg1nCsaOkqvlD7FkqaYBb5Ukwz0ea/x/KELbVgAsK1hV9dKf
NxsEN0CPDwK7yGf5sxdxGWB++0JJoqKUR/Dd0LFSJQD+OEHHC5xaTr7BTFD5ag2s
UgcknBYlrqR3w+J7cC5wJQKNfXhnAgMBAAGjggMoMIIDJDAfBgNVHSMEGDAWgBQk
bist0GqSUVElaQGqmkemiedAIDAdBgNVHQ4EFgQUBD8/v19xm7LCdT/mZsiks9U6
9QEwYwYDVR0RBFwwWoIHYW1jLmVkdYISY3VjbWV4cGUwMi5hbWMuZWR1ghJjdWNt
ZXhwZTAxLmFtYy5lZHWCEmN1Y21leHBlMDMuYW1jLmVkdYITY29sbGFiLWVkZ2Uu
YW1jLmVkdTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMHcGA1UdHwRwMG4wNaAzoDGGL2h0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNv
bS9EaWdpQ2VydEdsb2JhbENBRzIuY3JsMDWgM6Axhi9odHRwOi8vY3JsNC5kaWdp
Y2VydC5jb20vRGlnaUNlcnRHbG9iYWxDQUcyLmNybDBMBgNVHSAERTBDMDcGCWCG
SAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20v
Q1BTMAgGBmeBDAECAjB0BggrBgEFBQcBAQRoMGYwJAYIKwYBBQUHMAGGGGh0dHA6
Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA+BggrBgEFBQcwAoYyaHR0cDovL2NhY2VydHMu
ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsQ0FHMi5jcnQwCQYDVR0TBAIwADCC
AQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3APZclC/RdzAiFFQYCDCUVo7jTRMZM7/f
DC8gC8xO8WTjAAABcO6SBRUAAAQDAEgwRgIhAMFzss9gDStIR08mXhjFowUXqssr
Q9+nHEgP7OruexwWAiEAgrn+t1/tc3DVYZv6b4N/A8NLiHg3uRIqEELfN+11UPgA
dQBc3EOS/uarRUSxXprUVuYQN/vV+kfcoXOUsl7m9scOygAAAXDukgVmAAAEAwBG
MEQCIEk9iTemEREYfxaFQLn3RH/ctYGDnx/IRTOLwTkiQQXPAiAGZypz6faq4Olq
uT4c3phREgU+gL12CBCBoGKYaVtwQTANBgkqhkiG9w0BAQsFAAOCAQEATOncyPV7
GnY81Vd4UsSjDaOc1Srk9aV0AwRMT+GawKZZ/YZbQxdlPSZBbrV9it7q7caIEVNT
j9RPRg0d6fBjcuOQjZhZ0ZjHmfRJDygjTtlYHbpsf6CYAO6TV6QpibWbgRx41D5r
qGzvW23VaIZz5AICpMxC5asYXXmPt0ZOnsgyBokUpf8y9giqYVCoRfNZCcmqmsDs
2OtqJeZRvVi3bAgSxtEXDYjL45ON5FYUAYyfY/CKV1Gc0kMJ0KAx8aB5+CBmxNZ3
4T+UpudcHZd+8bx1E84g5i8Py0333/GgtNEp9nRz1K/VJN6oUVf2/t3n8IiH14Cb
w9nuV9xh8rPXWQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17161145592330323714068429656613081699
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albany'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Albany Medical Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cucmexpe02.amc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880106364158153047002504066955091405939563219310176711933856980682148800760947840605788498260814658347669136810278257781717253095798760849551182174441468932488132314376233140072352647616410528812616692681079143067789608629734175559593132909123047818445484237091261535432316763401164865592268248968122939773108404237701471927335912957742358924450308670387694521725548268191968828742827454441840443179387278918256785595288382117513050009385729693991752914111710585491102324696064808441390912380700973728897083242718234935825130283009675960606128717963506464382357238906534486751021132026413823503033727268539149444538243380271479286592204222264450596412547122079738649517059343825842765352998922946819671287922283950360725123388586222503186456918099832961970887303192339094706209677678495008996767602520248413309536188614095108972864096320715560101732166082646252875603323671922190879219974401511137377803987604908659876012407121549229337103022289931318328510202590105207786481132170128821749931259356504796113031095262905404828635502504285316620482458125335262505627089294162722012280719139129353205682592895698339947573290615418357251791049997116042514474485803329643131131067526700783312493984398153208765285996627358784310327736423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							043f3fbf5f719bb2c2753fe666c8a4b3d53af501
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cucmexpe02.amc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cucmexpe01.amc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cucmexpe03.amc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.amc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000170ee9205150000040300483046022100c173b2cf600d2b48474f265e18c5a30517aacb2b43dfa71c480feceaee7b1c1602210082b9feb75fed7370d5619bfa6f837f03c34b887837b9122a1042df37ed7550f80075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000170ee92056600000403004630440220493d8937a61111187f168540b9f7447fdcb581839f1fc845338bc139224105cf022006672a73e9f6aae0e96ab93e1cde985112053e80bd76081081a06298695b7041
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004ce9dcc8f57b1a763cd5577852c4a30da39cd52ae4f5a57403044c4fe19ac0a659fd865b4317653d26416eb57d8adeeaedc6881153538fd44f460d1de9f06372e3908d9859d198c799f4490f28234ed9581dba6c7fa09800ee9357a42989b59b811c78d43e6ba86cef5b6dd5688673e40202a4cc42e5ab185d798fb7464e9ec832068914a5ff32f608aa6150a845f35909c9aa9ac0ecd8eb6a25e651bd58b76c0812c6d1170d88cbe3938de45614018c9f63f08a57519cd24309d0a031f1a079f82066c4d677e13f94a6e75c1d977ef1bc7513ce20e62f0fcb4df7dff1a0b4d129f67473d4afd524dea85157f6fedde7f08887d7809bc3d9ee57dc61f2b3d759