www.firstam.com

- FATCO Holdings, LLC -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:92:ad:3a:ba:16:d0:06:c1:48:92:8d:b9:10:3f:c1 was issued on by DigiCert Inc.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

FATCO Holdings, LLC

Organization: FATCO Holdings, LLC
State / Province: California
Locality: Santa Ana
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:92:ad:3a:ba:16:d0:06:c1:48:92:8d:b9:10:3f:c1
Serial Number (int): 11395412817312059954948981184481214401
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 43:db:e7:82:ee:46:c2:87:c6:e5:d8:94:fc:fb:28:a0:b4:82:6e:d1
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 0e:72:fd:63:96:ca:24:a1:6e:9a:d8:02:c0:d6:a4:57:81:02:a9:0b
Fingerprint (sha256): 18:5a:f3:67:70:d4:8e:c9:66:45:9d:52:3f:42:8f:05:43:e5:a1:b8:c8:ee:8f:b3:f8:32:ed:7d:fd:52:6d:1a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate www.firstam.com

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.firstam.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.firstam.com
benefits.firstam.net
beutlerexchangegroup.com
www.beutlerexchangegroup.com
falive.net
www.falive.net
fatrustee.com
www.fatrustee.com
firstam.com
firstam.insurance
firstamericantitle.insurance
www.firstam.insurance
www.firstamericantitle.insurance
firstam.net
www.firstam.net
firstam.co.in
www.firstam.co.in
firstfundingusa.com
www.firstfundingusa.com
firstamtrust.com
firstamtrust.bank
firstamericantrust.bank
www.firstamtrust.com
www.firstamtrust.bank
www.firstamericantrust.bank
pennattorneys.com
www.pennattorneys.com
pclawassociates.com
www.pclawassociates.com
pcnsafeescrow.com
www.pcnsafeescrow.com
safeescrow.com
www.safeescrow.com
safevalidation.com
www.safevalidation.com
smscorp.com
www.smscorp.com
theheritageescrow.com
www.theheritageescrow.com
transactionalrisksolutions.com
www.transactionalrisksolutions.com
trustlinkservices.com
www.trustlinkservices.com
vestify.net
www.vestify.net
iss.firstam.net
office-photos.firstam.net
teachme-admin-iss.firstam.net
myfirstam.com
www.myfirstam.com
austindata.com
firstamerican.insurance
feedback.firstam.com
www.firstamerican.insurance

Other certificates including the domain name firstam.com

(limited to 100 certificates)
DFWVPAPPSVIP001.corp.firstam.com
ep.firstam.com
mydesktop.firstam.com
REGISTRATION.FIRSTAM.COM
staging.interface.eaglestatus.firstam.com
stagingservice.myfirstam.com
dev.infodex.firstam.com
dev.webapi.eaglestatus.firstam.com
uat.app.raptor.firstam.com
SNA9SVLNCFE01.trust.firstam.com
api.redirect.dev.direct.firstam.com
www.agentcostcalc.firstam.com
LyncDirPool.corp.firstam.com
www.pivotalcrmwireless.firstam.com
dev2.secure.firstam.com
agentcp.firstam.com
class.firstam.net
expressway.firstam.com
trd.firstam.com
psuite-appclm-uat.corp.firstam.com
EPRDB.corp.firstam.com
LyncFePool1.corp.firstam.com
services.amp.firstam.com
securefiletransfer.firstam.com
home-warranty.firstam.com
uat.msmanagedservices.firstam.com
amp.firstam.com
stage.secure.firstam.com
Stagingnext.webservices.firstam.com
print.firstam.com
www.investeagle.com
ea.firstam.net
metrix.firstam.com
famisstaging.firstam.com
svc01.fanhd.net
services.amp.firstam.com
dev.cdsfocus.com
*.SO-1-3-DDWS-AE-11.corp.firstam.com
oande.firstamcolorado.com
webim.firstam.com
snavnappebs011.corp.firstam.com
uat.vacationfirst.firstam.com
DFWVDAPPSVIP002.corp.firstam.com
www.firstam.com
mydesktop.firstam.com
dr.mfaesb.corp.firstam.com
sna9svasa2i1.trust.firstam.com
snavnappimdm031.corp.firstam.com
SkypePool.corp.firstam.com
www.agentcostcalc.firstam.com
www.soaprecordings.firstam.com
stage.fabill.firstam.com
USDA.FIRSTAM.COM
fafms.firstam.com
siebeltest.firstam.com
facc.firstam.com
snavpappcexp002.corp.firstam.com
DFWVDWEBFMOS005.corp.firstam.com
CAA.TAMS.FirstAm.com
integrations.facc.firstam.com
cert.faprint.firstam.com
www.firstamedu.com
mail.firstam.com
agencytoday.firstam.com
www.firstam.com
www.agencywireless.firstam.com
ul.firstam.com
snavnappebs012.corp.firstam.com
snavnappebs021.corp.firstam.com
costcalculator.firstam.com
schedule.vc.firstam.com
snavnappebs006.corp.firstam.com
AZUR-N-1-CDSE-AE-1.corp.firstam.com
testvpn.firstam.com
safe.eval.firstam.com
fastfidelity.firstam.com
FPCGSTAGE.FIRSTAM.COM
faslasp.firstam.com
dev.login.firstam.com
fsrepeater.firstam.com
ocivpappobip031.corp.firstam.com
devram.firstam.com
dev.webapi.eaglestatus.firstam.com
www.firstam.com
qa.webservices.firstam.com
skypeedgedrpool.corp.firstam.com
tiswphx01sql02.corp.firstam.com
webmaps.firstam.com
staging.webservices.firstam.com
www.vacationfirst.firstam.com
mfaesb.corp.firstam.com
SkypeExternal.firstam.com
tsg.firstam.com
snavpapparub001.corp.firstam.com
snavnappobie002.corp.firstam.com
homewarranty.firstam.com
SNAVPMGTHPOV002.corp.firstam.com
psuite-extb-uat.corp.firstam.com
DBSM-N-1-TLRD-AE-1.corp.firstam.com
homewarranty.firstam.com

Certificate

The complete raw certificate details for www.firstam.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwHGNmTFypD4tZwq7Jcc
F0X22oyjp6QuO81rPX4QaXjvlz9WPjy7TLuZsm/LLSuRLsl+YsQqFvYW4x21FmMf
sW7TY78FWqjCDyKmE9cFDdt6x5tVGeBgQD/YgbyrsVenJptaSArdxtCv+5O39TeA
prLlJfE0eDHp+LoNTRh4oJxC8dhonBW6CL/qmqyUMo/llagVPdpA2lge47b+JCUc
Tym5oGDUrxpeNnyK9aXSW9IOo/ZUmh6K/8nBLYzBjo62592FZnSg7hXvTQN34TgZ
tXhcVEkR8KivZNs6yrmh+kSZS+EBIjJ+b6/RG72xPzQ1/g9mCffmobK5fLGoqbwU
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11395412817312059954948981184481214401
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Ana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FATCO Holdings, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.firstam.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21082671853235593471925954294466293446404147330265950449284229749301501264084361712354146620716026136696272303666915369254213651411510039275087626280396908260094085002011983356703298972050059166504797877697954750029148482486673632112604078275173201535323718932400935941882582146409149811278037415181269037875708434811276731562592345392110571599435114621415362394854217777260531049348598649765544023405754425311095823507974495454648825210534498301197545596537045535527335757273418634114724970232953839879109523087182351393549652205401111201059901088190324008996890087468196844903731535249988553567340843411729555395773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43dbe782ee46c287c6e5d894fcfb28a0b4826ed1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.firstam.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beutlerexchangegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beutlerexchangegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatrustee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatrustee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstam.insurance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstamericantitle.insurance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstam.insurance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstamericantitle.insurance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstam.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstam.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstam.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstam.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstfundingusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstfundingusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstamtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstamtrust.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstamericantrust.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstamtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstamtrust.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstamericantrust.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pclawassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pclawassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcnsafeescrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcnsafeescrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeescrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safeescrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safevalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safevalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theheritageescrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theheritageescrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transactionalrisksolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transactionalrisksolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustlinkservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trustlinkservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vestify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vestify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iss.firstam.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office-photos.firstam.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teachme-admin-iss.firstam.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfirstam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myfirstam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austindata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstamerican.insurance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.firstam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstamerican.insurance'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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