privacy.umusic.com

- Universal Music Group, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:b8:31:7e:43:16:24:e5:6f:3b:e1:7d:8d:11:78:c1 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universal Music Group, Inc.

Organization: Universal Music Group, Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:b8:31:7e:43:16:24:e5:6f:3b:e1:7d:8d:11:78:c1
Serial Number (int): 10260982434046141386708236472698370241
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a5:6f:f8:be:03:6c:15:59:8a:3c:c8:35:3c:20:ef:79:48:fd:9b:4c
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): d6:68:38:99:0a:f9:da:06:f6:86:79:31:52:4a:58:1f:f0:e2:03:86
Fingerprint (sha256): 15:f4:3f:dd:41:ab:72:dd:90:51:bf:85:e9:a7:ea:e0:71:62:be:02:1f:59:31:ef:8b:da:44:e0:c3:d2:c3:91

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate privacy.umusic.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for privacy.umusic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

privacy.umusic.com
privacy.universalmusic.com

Other certificates including the domain name umusic.com

(limited to 100 certificates)
cache-awssftp.umusic.com
*.umusic.com
incapsula.com
incapsula.com
dev.data.mira.umusic.com
incapsula.com
*.umusic.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.umusic.com
*.umusic.com
incapsula.com
*.umusic.com
*.umusic.com
globalroyaltyportalsupport-dev.umusic.com
*.umusic.com
imperva.com
*.umusic.com
incapsula.com
incapsula.com
thecoronasstore.umusic.com
www.universalonline.com.au
*.umusic.com
support.umgroyalty.com
store.universalmusic.com
*.umusic.com
imperva.com
*.umusic.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.umusic.com
*.umusic.com
incapsula.com
imperva.com
*.umusic.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
dev.data.mira.umusic.com
incapsula.com
imperva.com
imperva.com
*.umusic.com
incapsula.com
COBOGSFBCBMED01.global.umusic.net
saltest.umusic.com
incapsula.com
imperva.com
*.umusic.com
dev.data.mira.umusic.com
incapsula.com
*.umusic.com
cache.umusic.com
api.mdm-uat.umusic.com
imperva.com
incapsula.com
incapsula.com
*.umusic.com
incapsula.com
privacy.umusic.com
incapsula.com
incapsula.com
*.umusic.com
imperva.com
*.umusic.com
imperva.com
store.umusic.ie
consumption-uat.umusic.com
mail.umusic.com
consumption-dev.umusic.com
incapsula.com
incapsula.com
incapsula.com
*.umusic.com
incapsula.com
imperva.com
sip.umusic.com
incapsula.com
incapsula.com
bigmachinelabelgroup.com
incapsula.com
*.umusic.com
imperva.com
umuksoundfoundation.com
JPTKS-SFBCBSIP-01.UMUSIC.COM
incapsula.com
incapsula.com
incapsula.com
imperva.com

Certificate

The complete raw certificate details for privacy.umusic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG3DCCBcSgAwIBAgIQB7gxfkMWJOVvO+F9jRF4wTANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjAyMTEwMDAwMDBa
Fw0yMzAyMTcyMzU5NTlaMHYxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9y
azERMA8GA1UEBxMITmV3IFlvcmsxJDAiBgNVBAoTG1VuaXZlcnNhbCBNdXNpYyBH
cm91cCwgSW5jLjEbMBkGA1UEAxMScHJpdmFjeS51bXVzaWMuY29tMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fbJCJ+DR9gvTSlrRhnn0fZPoQ4u1Bgm
7E5XQnHLkFrsELMH04Z8rep2pw4XIbNuJyi7Bbv09CggOYtZyvWavNw0BCnF1RKa
r6iUNa5yz3N+aHbVw3SdNLgsFJMwCtgOtieTtQOLNHjIrG7RSXAL8agcoFjZEh9w
8D/QvzU6uwcNr6/1FwIxnqfHgAbM3KxmrKsvpTXazplJZjo7CrXu/1lFvYq1v5aB
m2nbkMycYyI0UkBmXLKzIXxukxwm8RfEsWhJIckH+lX2c8OblyNUwtlC0q972vBl
a+eV9BR8dKH+saGWyj8k4VM1sVwZneb1Tz5mw8uU7U6m8BEMJ/tyvQIDAQABo4ID
izCCA4cwHwYDVR0jBBgwFoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0OBBYE
FKVv+L4DbBVZijzINTwg73lI/ZtMMDkGA1UdEQQyMDCCEnByaXZhY3kudW11c2lj
LmNvbYIacHJpdmFjeS51bml2ZXJzYWxtdXNpYy5jb20wDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBjwYDVR0fBIGHMIGEMECg
PqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEy
NTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20v
RGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMD4GA1UdIAQ3MDUwMwYG
Z4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQ
UzB/BggrBgEFBQcBAQRzMHEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2lj
ZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29t
L0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS0xLmNydDAJBgNVHRMEAjAAMIIB
ewYKKwYBBAHWeQIEAgSCAWsEggFnAWUAdQDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr
7Otp4Xd9bQa9bgAAAX7qIFAQAAAEAwBGMEQCIGAxfx5fe5mmZ4SyFoyOxfSyC2OO
0hUIA79BnAwy78roAiAhhHDtWWSE0oCn+OeFd5SQA6BqNYMQmixJyEiQVwLoSwB1
ADXPGRu/sWxXvw+tTG1Cy7u2JyAmUeo/4SrvqAPDO9ZMAAABfuogUEwAAAQDAEYw
RAIgPMi73H6obJSXT0d0Ap4Q09SqKHX44PU4UA86XZ/eHNUCIFCQtrMfBGYs6sw3
HC4nT2/HsBdIWNAYdcb3BcLp3wk+AHUAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH
3PADDnk2pZoAAAF+6iBQZwAABAMARjBEAiApGCrSRZEWMsZJOBrSdqCRBwD32eur
6Fi0ykX0skqG9wIgd3CaQ1PGe5exjHxhi/xlTiEd+ytvaQo6fs/COk2+dqYwDQYJ
KoZIhvcNAQELBQADggEBAGOAyWWR7JMKwpGlycdyrKFBm2gK9hxgjuwl8hKJFotI
byfGpPl9gGs1/5lxbukHRmoLZLB8pwmpo51cvg3mZ7FG0R5NSW9fxELE/TCpSWqC
DDdRukxrIDfE3yjEZcd7V/TLo1PFyu0ftuj5b/dJemk2yCqbjxwm2BVxj4LDWUpp
4vgbl6v2NBydSx0yTURgjIZDWmdbWC2boD+OnToxvRGo9eiQQ7PGhT9npqzMVmi5
bCBtMvnUmjZuUeOVeKi40VQJdNbTxbnwdEEM+24EfxykJAUs3oOCOBbLen0kD8ZV
qC++lRc2+sH2o6++4ae8OLOL6V5v4EowkYXjoT/pmmI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fbJCJ+DR9gvTSlrRhnn
0fZPoQ4u1Bgm7E5XQnHLkFrsELMH04Z8rep2pw4XIbNuJyi7Bbv09CggOYtZyvWa
vNw0BCnF1RKar6iUNa5yz3N+aHbVw3SdNLgsFJMwCtgOtieTtQOLNHjIrG7RSXAL
8agcoFjZEh9w8D/QvzU6uwcNr6/1FwIxnqfHgAbM3KxmrKsvpTXazplJZjo7CrXu
/1lFvYq1v5aBm2nbkMycYyI0UkBmXLKzIXxukxwm8RfEsWhJIckH+lX2c8OblyNU
wtlC0q972vBla+eV9BR8dKH+saGWyj8k4VM1sVwZneb1Tz5mw8uU7U6m8BEMJ/ty
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10260982434046141386708236472698370241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Universal Music Group, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'privacy.umusic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28525312978402134491282996131725039611359879217475552364843014231461024210040632324376075753015222108888083031615936793442053963803678566399224267614485805556630008325718596131723156303603622238223661370527895054458235913823900418787243126763215573399981454279438831127191296398753542598330180769708943604077782220021529035571614841166928847154297238584039111188388685336296094321416284193688569849381557253205528466670942605698808034484179227373604435156484772420070887884899435898549358931456839537432621782758437685234545946753908106742370641148572971411303184561480654786502871225483704050866532263288234063917757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a56ff8be036c15598a3cc8353c20ef7948fd9b4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.umusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.universalmusic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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