acquia-sites.com

- Acquia Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 02:2c:40:a3:0b:ce:24:1f:c5:01:bd:c8:31:9f:56:4d was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Acquia Inc

Organization: Acquia Inc
Organization unit: Operations
State / Province: Massachusetts
Locality: Boston
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:2c:40:a3:0b:ce:24:1f:c5:01:bd:c8:31:9f:56:4d
Serial Number (int): 2888228045404032111570811456950589005
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: cf:f3:4b:30:90:a3:02:5a:1f:a9:a4:81:a1:89:f8:42:d4:d6:87:a2
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 33:37:83:69:0f:82:dc:4b:71:30:73:22:a9:4b:de:c3:5b:be:bc:54
Fingerprint (sha256): 16:5f:a1:5f:af:1c:27:9d:38:02:3c:47:35:07:c1:83:ab:76:ae:b8:9b:20:27:0d:08:35:74:cb:e3:18:a1:63

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl

Check the revocation status for certificate acquia-sites.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquia-sites.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acquia-sites.com
www.schweizer-illustrierte.ch
services.schweizer-illustrierte.ch
www.transamerica.com.hk
www.transamerica.com.sg
www.energysaving.com
www.iqe.co.uk
swiftref.swift.com
dashboard.nbcmarketing.com
procuration.bpost.be
prod.shopanddeliver.bpostcapgemini.com
stage.shopanddeliver.bpostcapgemini.com
helanonline.cn
lovematters.co.ke
jnjvisioncare.co.uk
www.jnjvisioncare.co.uk
www.propertynetwork.net
www.propertynetworkapi.net
www.propertynetwork.org.uk
stage.bpack.bpostcapgemini.com
bpostopafspraak.be
bpostsurrendezvous.be
prod.bpack.bpostcapgemini.com
sp-snd.bpost.be
www.bpostsurrendezvous.be
www.bpostopafspraak.be
jnjvisioncare.it
www.jnjvisioncare.it
www.visitengland.com
ac1.bpost.bpostcapgemini.com
ac2.bpost.bpostcapgemini.com
pr.bpost.bpostcapgemini.com
editor-ac1.bpost.bpostcapgemini.com
editor-ac2.bpost.bpostcapgemini.com
editor-pr.bpost.bpostcapgemini.com
stage2.shopanddeliver.bpostcapgemini.com
stage3.shopanddeliver.bpostcapgemini.com
www.designcouncil.org.uk
acuvuepromotion.co.uk
acuvuepromotion.ie
www.acuvuepromotion.co.uk
www.acuvuepromotion.ie
www.nsw.gov.au
e-services-acc.mobistar.be
www.aavid.eu
dev.community.teachfirst.org.uk
livingcircular.veolia.com
www.welcome.dpc.nsw.gov.au
arp.nsw.gov.au
complianceservices.swift.com
mystandards.swift.com
corporates.swift.com
marketinfrastructures.swift.com
dvod.uk
dev.dvod.uk
stage.dvod.uk
staging.triplejunearthed.com
events.jftc.nato.int
www.psr.org.uk
edit.psr.org.uk
preprod.psr.org.uk
preprod-edit.psr.org.uk
www.gosh.nhs.uk
psr.org.uk
www.gosh.org
highernationals.com
aucegypt.edu
www.aucegypt.edu
in.aucegypt.edu
schools.aucegypt.edu
new.aucegypt.edu
janssenpro.com.au
www.janssenpro.com.au
dev.rcni.com
pfconnect.stg.herbertsmithfreehills.com
careers.stg.herbertsmithfreehills.com
source.stg.herbertsmithfreehills.com
contenthub.stg.herbertsmithfreehills.com
cm.stg.herbertsmithfreehills.com
www.stg.herbertsmithfreehills.com
pfconnect-dev.stg.herbertsmithfreehills.com
careers-dev.stg.herbertsmithfreehills.com
source-dev.stg.herbertsmithfreehills.com
contenthub-dev.stg.herbertsmithfreehills.com
cm-dev.stg.herbertsmithfreehills.com
www-dev.stg.herbertsmithfreehills.com
www.hoaresbank.co.uk
hoaresbank.co.uk
choarestg.hoaresbank.co.uk
choaredev.hoaresbank.co.uk
scout.org
janssenpro.co.nz
www.janssenpro.co.nz
www.paymentsforum.uk
paymentsforum.uk
edit.paymentsforum.uk
preprod.paymentsforum.uk
preprod-edit.paymentsforum.uk
www.janssenpro.co.kr

Other certificates including the domain name acquia-sites.com

(limited to 100 certificates)
acquia-sites.com
acquia-sites.com
acquia-sites.com
datamedicaid.prod.acquia-sites.com
acquia-sites.com
staging.ensco.com
www-stage.anzacmemorial.nsw.gov.au
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
achievesdtcgjdnbrbp.devcloud.acquia-sites.com
mbrdev.prod.acquia-sites.com
www.stg.solocal.com
tplwebsitestg.prod.acquia-sites.com
raritanvalstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
batterseadev.prod.acquia-sites.com
aupairworld.prod.acquia-sites.com
www.dev.solocal.com
www.stg.solocal.com
premiereprep.com
acquia-sites.com
ee.dustindev.com
cloudapi.enterprise-g1.acquia-sites.com
batterseadev.prod.acquia-sites.com
stewardcommunity.prod.acquia-sites.com
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
planetpaymentprod.prod.acquia-sites.com
trocairestg.prod.acquia-sites.com
tsysitesdev.prod.acquia-sites.com
tplwebsitestg.prod.acquia-sites.com
acquia-sites.com
milgardstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
rrd8multidev.prod.acquia-sites.com
pnwdsstg.prod.acquia-sites.com
www.dev.solocal.com
acquia-sites.com
useastucc5.acquia.com
www.anzacmemorial.nsw.gov.au
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
newhousedev.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
firstnamesgrouptest.devcloud.acquia-sites.com
acquia-sites.com
jfkldev.prod.acquia-sites.com
acquia-sites.com
cloudapi.trex-prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
quickanddirtytipsdev.prod.acquia-sites.com
acquia-sites.com
stewardcommunity.prod.acquia-sites.com
acquia-sites.com
oitcomms.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
univadisstg.prod.acquia-sites.com
useastucc5.acquia.com
datacms.prod.acquia-sites.com
acquia-sites.com
tplwebsitedev.prod.acquia-sites.com
bmistg.prod.acquia-sites.com

Certificate

The complete raw certificate details for acquia-sites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPQTCCDimgAwIBAgIQAixAowvOJB/FAb3IMZ9WTTANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0xNTEwMDEwMDAwMDBaFw0xNjEwMTgxMjAwMDBa
MHsxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNldHRzMQ8wDQYDVQQH
EwZCb3N0b24xEzARBgNVBAoTCkFjcXVpYSBJbmMxEzARBgNVBAsTCk9wZXJhdGlv
bnMxGTAXBgNVBAMTEGFjcXVpYS1zaXRlcy5jb20wggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCfq90eSvHLpGOi/0H+2gJ+Fa+zI43BK7Uy7teafj9BRfct
ngM042QRTupsL2Z74L320w5MFvaQgti51Qjz1XP5/MqBDnwwFGwBJkbi5I2+lspK
0N+ghwbbcPtfrCC7pwv76EsssJ8hUx/zPANv5LdFz3vSYhmKkx4RMYsjLcDtg9//
MlTL8vusaJNhStOVp7RUf6luSb+5kRUxmqMGdqCsWSQuC/48cBRbiGEZjVmG3b8H
YSne4vTO3zyuScBvqkfirrfVm3O1y5B8Gfvio7D6iSSOQzWr6xvYbrId0FZXyxdy
Kr5p06JT17Yu/ieA60UEWlJZIiy2dUepk3FcYfK1AgMBAAGjggvKMIILxjAfBgNV
HSMEGDAWgBRRaP+QrwIHdTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQUz/NLMJCjAlof
qaSBoYn4QtTWh6Iwggn6BgNVHREEggnxMIIJ7YIQYWNxdWlhLXNpdGVzLmNvbYId
d3d3LnNjaHdlaXplci1pbGx1c3RyaWVydGUuY2iCInNlcnZpY2VzLnNjaHdlaXpl
ci1pbGx1c3RyaWVydGUuY2iCF3d3dy50cmFuc2FtZXJpY2EuY29tLmhrghd3d3cu
dHJhbnNhbWVyaWNhLmNvbS5zZ4IUd3d3LmVuZXJneXNhdmluZy5jb22CDXd3dy5p
cWUuY28udWuCEnN3aWZ0cmVmLnN3aWZ0LmNvbYIaZGFzaGJvYXJkLm5iY21hcmtl
dGluZy5jb22CFHByb2N1cmF0aW9uLmJwb3N0LmJlgiZwcm9kLnNob3BhbmRkZWxp
dmVyLmJwb3N0Y2FwZ2VtaW5pLmNvbYInc3RhZ2Uuc2hvcGFuZGRlbGl2ZXIuYnBv
c3RjYXBnZW1pbmkuY29tgg5oZWxhbm9ubGluZS5jboIRbG92ZW1hdHRlcnMuY28u
a2WCE2puanZpc2lvbmNhcmUuY28udWuCF3d3dy5qbmp2aXNpb25jYXJlLmNvLnVr
ghd3d3cucHJvcGVydHluZXR3b3JrLm5ldIIad3d3LnByb3BlcnR5bmV0d29ya2Fw
aS5uZXSCGnd3dy5wcm9wZXJ0eW5ldHdvcmsub3JnLnVrgh5zdGFnZS5icGFjay5i
cG9zdGNhcGdlbWluaS5jb22CEmJwb3N0b3BhZnNwcmFhay5iZYIVYnBvc3RzdXJy
ZW5kZXp2b3VzLmJlgh1wcm9kLmJwYWNrLmJwb3N0Y2FwZ2VtaW5pLmNvbYIPc3At
c25kLmJwb3N0LmJlghl3d3cuYnBvc3RzdXJyZW5kZXp2b3VzLmJlghZ3d3cuYnBv
c3RvcGFmc3ByYWFrLmJlghBqbmp2aXNpb25jYXJlLml0ghR3d3cuam5qdmlzaW9u
Y2FyZS5pdIIUd3d3LnZpc2l0ZW5nbGFuZC5jb22CHGFjMS5icG9zdC5icG9zdGNh
cGdlbWluaS5jb22CHGFjMi5icG9zdC5icG9zdGNhcGdlbWluaS5jb22CG3ByLmJw
b3N0LmJwb3N0Y2FwZ2VtaW5pLmNvbYIjZWRpdG9yLWFjMS5icG9zdC5icG9zdGNh
cGdlbWluaS5jb22CI2VkaXRvci1hYzIuYnBvc3QuYnBvc3RjYXBnZW1pbmkuY29t
giJlZGl0b3ItcHIuYnBvc3QuYnBvc3RjYXBnZW1pbmkuY29tgihzdGFnZTIuc2hv
cGFuZGRlbGl2ZXIuYnBvc3RjYXBnZW1pbmkuY29tgihzdGFnZTMuc2hvcGFuZGRl
bGl2ZXIuYnBvc3RjYXBnZW1pbmkuY29tghh3d3cuZGVzaWduY291bmNpbC5vcmcu
dWuCFWFjdXZ1ZXByb21vdGlvbi5jby51a4ISYWN1dnVlcHJvbW90aW9uLmllghl3
d3cuYWN1dnVlcHJvbW90aW9uLmNvLnVrghZ3d3cuYWN1dnVlcHJvbW90aW9uLmll
gg53d3cubnN3Lmdvdi5hdYIaZS1zZXJ2aWNlcy1hY2MubW9iaXN0YXIuYmWCDHd3
dy5hYXZpZC5ldYIfZGV2LmNvbW11bml0eS50ZWFjaGZpcnN0Lm9yZy51a4IZbGl2
aW5nY2lyY3VsYXIudmVvbGlhLmNvbYIad3d3LndlbGNvbWUuZHBjLm5zdy5nb3Yu
YXWCDmFycC5uc3cuZ292LmF1ghxjb21wbGlhbmNlc2VydmljZXMuc3dpZnQuY29t
ghVteXN0YW5kYXJkcy5zd2lmdC5jb22CFGNvcnBvcmF0ZXMuc3dpZnQuY29tgh9t
YXJrZXRpbmZyYXN0cnVjdHVyZXMuc3dpZnQuY29tggdkdm9kLnVrggtkZXYuZHZv
ZC51a4INc3RhZ2UuZHZvZC51a4Icc3RhZ2luZy50cmlwbGVqdW5lYXJ0aGVkLmNv
bYIUZXZlbnRzLmpmdGMubmF0by5pbnSCDnd3dy5wc3Iub3JnLnVrgg9lZGl0LnBz
ci5vcmcudWuCEnByZXByb2QucHNyLm9yZy51a4IXcHJlcHJvZC1lZGl0LnBzci5v
cmcudWuCD3d3dy5nb3NoLm5ocy51a4IKcHNyLm9yZy51a4IMd3d3Lmdvc2gub3Jn
ghNoaWdoZXJuYXRpb25hbHMuY29tggxhdWNlZ3lwdC5lZHWCEHd3dy5hdWNlZ3lw
dC5lZHWCD2luLmF1Y2VneXB0LmVkdYIUc2Nob29scy5hdWNlZ3lwdC5lZHWCEG5l
dy5hdWNlZ3lwdC5lZHWCEWphbnNzZW5wcm8uY29tLmF1ghV3d3cuamFuc3NlbnBy
by5jb20uYXWCDGRldi5yY25pLmNvbYIncGZjb25uZWN0LnN0Zy5oZXJiZXJ0c21p
dGhmcmVlaGlsbHMuY29tgiVjYXJlZXJzLnN0Zy5oZXJiZXJ0c21pdGhmcmVlaGls
bHMuY29tgiRzb3VyY2Uuc3RnLmhlcmJlcnRzbWl0aGZyZWVoaWxscy5jb22CKGNv
bnRlbnRodWIuc3RnLmhlcmJlcnRzbWl0aGZyZWVoaWxscy5jb22CIGNtLnN0Zy5o
ZXJiZXJ0c21pdGhmcmVlaGlsbHMuY29tgiF3d3cuc3RnLmhlcmJlcnRzbWl0aGZy
ZWVoaWxscy5jb22CK3BmY29ubmVjdC1kZXYuc3RnLmhlcmJlcnRzbWl0aGZyZWVo
aWxscy5jb22CKWNhcmVlcnMtZGV2LnN0Zy5oZXJiZXJ0c21pdGhmcmVlaGlsbHMu
Y29tgihzb3VyY2UtZGV2LnN0Zy5oZXJiZXJ0c21pdGhmcmVlaGlsbHMuY29tgixj
b250ZW50aHViLWRldi5zdGcuaGVyYmVydHNtaXRoZnJlZWhpbGxzLmNvbYIkY20t
ZGV2LnN0Zy5oZXJiZXJ0c21pdGhmcmVlaGlsbHMuY29tgiV3d3ctZGV2LnN0Zy5o
ZXJiZXJ0c21pdGhmcmVlaGlsbHMuY29tghR3d3cuaG9hcmVzYmFuay5jby51a4IQ
aG9hcmVzYmFuay5jby51a4IaY2hvYXJlc3RnLmhvYXJlc2JhbmsuY28udWuCGmNo
b2FyZWRldi5ob2FyZXNiYW5rLmNvLnVrgglzY291dC5vcmeCEGphbnNzZW5wcm8u
Y28ubnqCFHd3dy5qYW5zc2VucHJvLmNvLm56ghR3d3cucGF5bWVudHNmb3J1bS51
a4IQcGF5bWVudHNmb3J1bS51a4IVZWRpdC5wYXltZW50c2ZvcnVtLnVrghhwcmVw
cm9kLnBheW1lbnRzZm9ydW0udWuCHXByZXByb2QtZWRpdC5wYXltZW50c2ZvcnVt
LnVrghR3d3cuamFuc3NlbnByby5jby5rcjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNS5jcmwwNKAyoDCG
Lmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNS5jcmww
TAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93
d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwgYMGCCsGAQUFBwEBBHcwdTAk
BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME0GCCsGAQUFBzAC
hkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEySGlnaEFz
c3VyYW5jZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUA
A4IBAQAnLmgia8zu8yQ35gJdd4U5ncf3WPAKKMBEoTn4BEMSvfqiQO2YjfLf1AMv
IBzqitaxi+yGdYWBZ4eCuoI5arO60u0tmtdP3gWEIG7eFI6iqXcWM/V/3bOXBzrX
pngdVwztvcze95RmPOmHkHF6xzrNvdxHk0AIm0we+QJ2MahvRRydFLmFo54bH3iC
hCBXQ6wlog63a9B06dG79Fqhiqi9gXdp1DBPGFMzjqExxpYhMst+jujZb7u6v6B6
0CDagXo3158Ftgta364P55Dc7C5+zz7VkT4OogO+DKwh5bkc9oYmwkpgqk2yhrFy
prtKsYd5rNVUnfhJ/B4r+c8dY5XU
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6vdHkrxy6Rjov9B/toC
fhWvsyONwSu1Mu7Xmn4/QUX3LZ4DNONkEU7qbC9me+C99tMOTBb2kILYudUI89Vz
+fzKgQ58MBRsASZG4uSNvpbKStDfoIcG23D7X6wgu6cL++hLLLCfIVMf8zwDb+S3
Rc970mIZipMeETGLIy3A7YPf/zJUy/L7rGiTYUrTlae0VH+pbkm/uZEVMZqjBnag
rFkkLgv+PHAUW4hhGY1Zht2/B2Ep3uL0zt88rknAb6pH4q631ZtztcuQfBn74qOw
+okkjkM1q+sb2G6yHdBWV8sXciq+adOiU9e2Lv4ngOtFBFpSWSIstnVHqZNxXGHy
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2888228045404032111570811456950589005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Boston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquia-sites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20156639660158503421834451196048509139189678017773956402507347824482608321317707617675643622539820913138068349166469857243916758598587345566972319800975592554409634965936182100261408779882122686693694495910522088773111535803285970252670220070277521224801007499716696171718726401061255134822851736852701547205369234734120183026693530527283629751996897672363004237497822696321026010047986457101486226744270814015050170667740159938503339125666304192826227408047889206907122906567142931487052259364576695539029943987112849741459434641280111878543548770098923300864959469045307125386854269156011096665037011967219937178293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cff34b3090a3025a1fa9a481a189f842d4d687a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2545 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schweizer-illustrierte.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.schweizer-illustrierte.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transamerica.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transamerica.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energysaving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iqe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swiftref.swift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.nbcmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'procuration.bpost.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.shopanddeliver.bpostcapgemini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.shopanddeliver.bpostcapgemini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helanonline.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovematters.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jnjvisioncare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jnjvisioncare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propertynetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propertynetworkapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propertynetwork.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.bpack.bpostcapgemini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpostopafspraak.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpostsurrendezvous.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.bpack.bpostcapgemini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp-snd.bpost.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpostsurrendezvous.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpostopafspraak.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jnjvisioncare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jnjvisioncare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitengland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac1.bpost.bpostcapgemini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac2.bpost.bpostcapgemini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.bpost.bpostcapgemini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editor-ac1.bpost.bpostcapgemini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editor-ac2.bpost.bpostcapgemini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editor-pr.bpost.bpostcapgemini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2.shopanddeliver.bpostcapgemini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage3.shopanddeliver.bpostcapgemini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.designcouncil.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acuvuepromotion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acuvuepromotion.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acuvuepromotion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acuvuepromotion.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-services-acc.mobistar.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aavid.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.community.teachfirst.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingcircular.veolia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welcome.dpc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arp.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'complianceservices.swift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystandards.swift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporates.swift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketinfrastructures.swift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvod.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dvod.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dvod.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.triplejunearthed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.jftc.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psr.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.psr.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.psr.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-edit.psr.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gosh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psr.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gosh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highernationals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucegypt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucegypt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.aucegypt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schools.aucegypt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.aucegypt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janssenpro.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janssenpro.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.rcni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfconnect.stg.herbertsmithfreehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.stg.herbertsmithfreehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'source.stg.herbertsmithfreehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contenthub.stg.herbertsmithfreehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cm.stg.herbertsmithfreehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg.herbertsmithfreehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfconnect-dev.stg.herbertsmithfreehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers-dev.stg.herbertsmithfreehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'source-dev.stg.herbertsmithfreehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contenthub-dev.stg.herbertsmithfreehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cm-dev.stg.herbertsmithfreehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.stg.herbertsmithfreehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoaresbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoaresbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choarestg.hoaresbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choaredev.hoaresbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scout.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janssenpro.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janssenpro.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paymentsforum.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paymentsforum.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.paymentsforum.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.paymentsforum.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-edit.paymentsforum.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janssenpro.co.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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