brieazycash-api.bri.co.id

- PT. Bank Rakyat Indonesia (Persero) Tbk -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:3c:df:25:10:3e:67:cd:d5:62:f5:23:ee:85:4f:db was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PT. Bank Rakyat Indonesia (Persero) Tbk

Organization: PT. Bank Rakyat Indonesia (Persero) Tbk
State / Province: Daerah Khusus Ibukota Jakarta
Locality: Jakarta Pusat
Country: ID

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:3c:df:25:10:3e:67:cd:d5:62:f5:23:ee:85:4f:db
Serial Number (int): 2974519716892752512468495503290879963
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: eb:65:9d:e0:1b:75:7b:fd:e4:8e:ab:97:2d:20:57:3f:b0:a0:52:55
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 16:5b:9a:d3:3c:10:e5:d0:a2:ef:20:df:ba:0b:66:05:65:46:77:42
Fingerprint (sha256): 18:85:dc:f3:7d:46:6f:86:f9:c3:59:de:42:17:d5:4b:ed:e6:10:f6:c5:48:c7:88:f8:eb:3e:fa:fd:0f:3a:ee

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl

Check the revocation status for certificate brieazycash-api.bri.co.id

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brieazycash-api.bri.co.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brieazycash-api.bri.co.id

Other certificates including the domain name bri.co.id

(limited to 100 certificates)
ibank.bri.co.id
3dsecure2.bri.co.id
brisim.bri.co.id
brimo.bri.co.id
junio-smart.bri.co.id
brimola.bri.co.id
mobilecc.bri.co.id
api.briconnect.bri.co.id
webmail.bri.co.id
content.makna.bri.co.id
commercialcard.bri.co.id
alert.bri.co.id
brilinkmobile.bri.co.id
infolelang.bri.co.id
*.bri.co.id
cabincrew.bri.co.id
britouch.bri.co.id
brismartapi.bri.co.id
briefx.bri.co.id
ib.bri.co.id
prowlth.bri.co.id
webmail1.bri.co.id
apimybri.bri.co.id
br1-ws-is2.corp.bri.co.id
brion.bri.co.id
mobilecc.bri.co.id
*.bigdata.bri.co.id
api.panen.bri.co.id
jadimerchant.bri.co.id
brinvoice.bri.co.id
pos.makna.bri.co.id
ibank.bri.co.id
webmail.bri.co.id
api.bristars.bri.co.id
digital.bri.co.id
ib.bri.co.id
sbn.bri.co.id
brilink.bri.co.id
app.ceria.bri.co.id
ib.bri.co.id
webmail.bri.co.id
eform.bri.co.id
3dsecure2.bri.co.id
agen.bri.co.id
fois.bri.co.id
apidocs.bri.co.id
api.bri.co.id
mobile.bri.co.id
api-staging.brispot.bri.co.id
ibank-tbn.bri.co.id
agen.bri.co.id
apps.bri.co.id
app.ceria.bri.co.id
developers.bri.co.id
bri.co.id
api.bristars.bri.co.id
prioritas.bri.co.id
cdn.wirausahabrilian.bri.co.id
ib.bri.co.id
tmsverifone.bri.co.id
s3.brimo.bri.co.id
br1-ws-is1.corp.bri.co.id
apilpdp.bri.co.id
login.work.bri.co.id
ambilin.bri.co.id
wirausahabrilian.bri.co.id
br1-ws-is2.corp.bri.co.id
apimybri.bri.co.id
mis.bri.co.id
rbaweb.bri.co.id
apps.bri.co.id
portalbgrepo.bri.co.id
sandbox.partner.api.bri.co.id
brieazycash-api.bri.co.id
3dsecure.bri.co.id
webmail1.bri.co.id
incapsula.com
openbsa.bri.co.id
myqrservice.bri.co.id
iumk.bri.co.id
biz.bri.co.id
briefx.bri.co.id
biz.bri.co.id
brieazycash.bri.co.id
brisolutions.bri.co.id
ceria-payment-sandbox.bri.co.id
*.digiporto.bri.co.id
cdn.wirausahabrilian.bri.co.id
*.bri.co.id
eform.bri.co.id
mobilemms.bri.co.id
brv.bri.co.id
mybri.bri.co.id
pasarbrilink.bri.co.id
merchant.ceria.bri.co.id
bri.co.id
brilinkers-admin.bri.co.id
sandbox.partner.api.bri.co.id
merchant.ceria.bri.co.id
qlola.bri.co.id

Certificate

The complete raw certificate details for brieazycash-api.bri.co.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG+TCCBeGgAwIBAgIQAjzfJRA+Z83VYvUj7oVP2zANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMTA4MjcwMDAwMDBa
Fw0yMjA4MjcyMzU5NTlaMIGjMQswCQYDVQQGEwJJRDEmMCQGA1UECBMdRGFlcmFo
IEtodXN1cyBJYnVrb3RhIEpha2FydGExFjAUBgNVBAcTDUpha2FydGEgUHVzYXQx
MDAuBgNVBAoTJ1BULiBCYW5rIFJha3lhdCBJbmRvbmVzaWEgKFBlcnNlcm8pIFRi
azEiMCAGA1UEAxMZYnJpZWF6eWNhc2gtYXBpLmJyaS5jby5pZDCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBALpR7dZ0G2VxoR9EFP4CmutiGaR7arG8+JMv
Glls6ruOcTEuyu0hjzSBT/VULSdSfhQSezQaczuxtQQv/PUON8NpmmwFI69F+mn1
t7CBNi1LauJvY5iuf5HMdl50dM50DNAlOKDi2Gf1h4swjlYHGVvjZRXoG3KPZnb9
tPwU9FabWidrc23fesruKoNq9APe0H3Cvs5GGshDcq9msfhgNvHw8R7nPkY4zWYu
kRaxVB+m5Hd8cTZnWePxWKltpUR7JunGF2DN03+UtkCADTbCv6XOu+k/bWDrj1Eb
uAI0aRujsERioKNc/MhYm3bbM+S32hAi5kthrVkjPm3KY70MTnMCAwEAAaOCA3ow
ggN2MB8GA1UdIwQYMBaAFLdrouqoqoSMeeq02g+YssWVdrn0MB0GA1UdDgQWBBTr
ZZ3gG3V7/eSOq5ctIFc/sKBSVTAkBgNVHREEHTAbghlicmllYXp5Y2FzaC1hcGku
YnJpLmNvLmlkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwgY8GA1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2NybDMuZGlnaWNl
cnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS0zLmNybDBAoD6gPIY6
aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAy
MENBMS0zLmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhto
dHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwfwYIKwYBBQUHAQEEczBxMCQGCCsG
AQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSQYIKwYBBQUHMAKGPWh0
dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIw
MjBDQTEtMS5jcnQwDAYDVR0TAQH/BAIwADCCAXwGCisGAQQB1nkCBAIEggFsBIIB
aAFmAHUAKXm+8J45OSHwVnOfY6V35b5XfZxgCvj5TV0mXCVdx4QAAAF7hzOMUwAA
BAMARjBEAiAQ8xlbV+p9uz8gbw2JlWKcFYq+FVKdt2kt7SFaIuhgLgIgGTkE9SAy
4e249xaoe3R4//gyTT0Uk95VHx/cWCCFdAEAdQBRo7D1/QF5nFZtuDd4jwykeswb
J8v3nohCmg3+1IsF5QAAAXuHM4wwAAAEAwBGMEQCIFeBAMfWRCsuWGoS+dTC39Yn
vfeqVwBAfC4xO2pTFMElAiAzz2Bj2rZnwSfGxGq2JxME35ne+24QIEayxlQk4LSb
ZwB2AEHIyrHfIkZKEMahOglCh15OMYsbA+vrS8do8JBilgb2AAABe4czi74AAAQD
AEcwRQIhAMgXtmr/CMFCP9tWvEOhI7ovXw/fB6DdnRX56ScBkMPiAiBJaeDeS+W/
ejVaqhzbB/+2mitV/8963bQLmhZCFqPK7jANBgkqhkiG9w0BAQsFAAOCAQEAhp3U
3taqoLPdOleg7HbhmIzx/BV/uqjarv8A8iiFZXXMBjsT42zVT/ModneNL+rLwbqV
9bHBYP+n6MhV6MthxVoCcpHRZgSLOh5zOXUPuye2JIy+9OfltQ/UhEcpwilg1R/t
Y2yuquqbSVvXa8JRIWHFvXuy5++3cp+q7+uBBA2JTcvyZ3FsUPlCkHesZnc1I1Ht
i0jC31AZ5tZND0S5l68tn9uzSFjjZHDev1PD5K6/gEOiFkTrUbRpSdBqCg1BbOvB
h6mpKiuaRk5qedpUrPidVKOeJHBTPmSbACyg89jh7z8ZLnQ6oWfnnZtX8ibzEerF
vegYpoeQ8UF615if+g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulHt1nQbZXGhH0QU/gKa
62IZpHtqsbz4ky8aWWzqu45xMS7K7SGPNIFP9VQtJ1J+FBJ7NBpzO7G1BC/89Q43
w2mabAUjr0X6afW3sIE2LUtq4m9jmK5/kcx2XnR0znQM0CU4oOLYZ/WHizCOVgcZ
W+NlFegbco9mdv20/BT0VptaJ2tzbd96yu4qg2r0A97QfcK+zkYayENyr2ax+GA2
8fDxHuc+RjjNZi6RFrFUH6bkd3xxNmdZ4/FYqW2lRHsm6cYXYM3Tf5S2QIANNsK/
pc676T9tYOuPURu4AjRpG6OwRGKgo1z8yFibdtsz5LfaECLmS2GtWSM+bcpjvQxO
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2974519716892752512468495503290879963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Daerah Khusus Ibukota Jakarta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jakarta Pusat'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT. Bank Rakyat Indonesia (Persero) Tbk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brieazycash-api.bri.co.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23520725445748619601848588454871692724270110183502628220823092541536877187792755134455932298729365874803330154059698423492172289482503738092236909417192373700359479542730852550027329233890644479522272545156484672837536953417139722444156087830262377864400680569497561423095272814775652011124431304846210862570747573280072632847155007848608975498635323115478483182392029955272609859817478197617596314019486481760553883872239663735939630790142239927987854270905200269977229039670046084544610352673001407058177934486949141401766159836742795297110772185316129213894446239636973745400281120225355099883980895583740873166451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb659de01b757bfde48eab972d20573fb0a05255
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brieazycash-api.bri.co.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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