experience-stage02.basf.com

- BASF Digital Solutions GmbH -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:ca:85:93:0b:a0:6c:1e:8c:a8:4f:7b:cf:1d:59:5a was issued on by DigiCert Inc.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BASF Digital Solutions GmbH

Organization: BASF Digital Solutions GmbH
Locality: Ludwigshafen
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:ca:85:93:0b:a0:6c:1e:8c:a8:4f:7b:cf:1d:59:5a
Serial Number (int): 9026921150748979505701060767033153882
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d6:a5:1f:2a:d1:dd:5e:cd:15:67:91:e3:cc:40:a8:2a:94:eb:98:0a
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): ef:cc:20:24:2e:f4:61:17:32:c4:2d:bc:eb:b0:f5:29:2e:93:a3:36
Fingerprint (sha256): 18:ac:e3:29:a2:e8:09:b6:82:b1:e2:b5:48:dc:7c:69:d6:13:81:f9:57:54:15:e3:35:6b:79:58:73:a3:ef:52

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate experience-stage02.basf.com

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for experience-stage02.basf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

experience-stage02.basf.com
pestcontrol-stage02.basf.us
poultry-stage02.basf.us
poultry-livestock-stage02.basf.us
better-vegetation-management-stage02.basf.ca
betterturf-stage02.basf.us
xarvio-stage02.basf.com
claims-stage02.basf.com
pss-stage02.basf.us
agriculture-stage02.basf.us
agriculture-stage02.basf.ca
stage02.basf-showcaseplots.com
stage02.engeniaherbicide.com
repfinder-stage02.basf.com
better-turf-stage02.basf.ca
betterplants-stage02.basf.us
pestcontrol-stage02.basf.ca
bettervm-stage02.basf.us
retailerfinder-stage02.basf.us
aem65-stage-author.basf.com
planthealth-stage02.basf.us
www.planthealth-stage02.basf.us
stage02.operationweederadication.com
stage02.trelona-calculator.basf.us
stage02.termidorhome.com
stage02.trelonahome.com
stage02.basfretailfirst.com
revxfields-stage02.basf.com
myencircle-stage02.basf.com
stage02.Xitavo-soybeanyields.us
stage02.FiberMax-cottonyields.us
stage02.Stoneville-cottonyields.us
stage02.InVigor-canolayields.us
stage02.cottonseedyields.us
yields-stage02.basf.us

Other certificates including the domain name basf.com

(limited to 100 certificates)
oase-connect.basf.com
brandplace.agro.basf.com
ssl-vpn.basf.com
qa2.human-centric-processes.basf.com
mdm-selfservice.basf.com
*.master-builders-solutions.basf.com
dev.human-centric-processes.basf.com
enrollmentportal.basf.com
5739407210446848-fe1.pantheonsite.io
pact.basf.com
omega-3.nu
solucionesparapinturas.basf.com
ev-insights.basf.com
www.bodyshopmall.com
support9.cdnetworks.net
together.basf.com
www.newtrition.basf.com
pisar-qual.ap.basf.com
image.audi-hirlevel.hu
wsa.basf.com
nutricaohumana.basf.com
app.footwear.basf.com
prod.37.slot.cdn.salesforce-communities.com
demoplot-temp.basf.com
www.promoshop.glasurit.com
*.master-builders-solutions.basf.com
mypharmaregdocservice-test.nutrition-and-health.basf.com
support9.cdnetworks.net
mosys-test.basf.com
secure.basf.com
amflora.basf.com
qa.cdm.intranet.basf.com
mcyclo.com
development.federation.basf.com
5739407210446848-fe1.pantheonsite.io
agserv-qa.agqa.basf.com
5739407210446848-fe1.pantheonsite.io
recreate.basf.com
dashboard.ngba.basf.com
qa-workmanager.global.basf.com
secure0109.hubspot.com
securemail.basf.com
www.cdupdate.brandweb.basf.com
mcyclo.com
api.ebiz-dev.basf.com
zrm.basf.com
www.omacor.org
support9.cdnetworks.net
nutricaohumana.basf.com
maglis-qual.basf.com
public.maglis.basf.com
readz.com
support9.cdnetworks.net
www.proveedores.basf.com
digital-cockpit.basf.com
saturn.basf.com
login.symphony.basf.com
qa.members.basf.com
support9.cdnetworks.net
pharma.basf.com
prod.37.slot.cdn.salesforce-communities.com
orders.basf.com
teamplaces.basf.com
cls.basf.com
basotect-designobjects.com
dispersions-pigments.basf.com
projects.basf.com
akamai-san94.exacttarget.com
agriculture-pakistan.basf.com
voffice-na.basf.com
water-infrastructure-experiences.basf.com
connect.basf.com
clouddemocreator.basf.com
fresh-again.basf.com
crystal4-qa.basf.com
bconnected.basf.com
cds3.cvent.com
www.promoshop.glasurit.com
www.engenia-herbicide.basf.us
gastronomy-app.basf.com
image.comunicacion.diariosur.es
support9.cdnetworks.net
mcyclo.com
cds3.cvent.com
master-builders-solutions.basf.pl
support9.cdnetworks.net
water-infrastructure-experiences.basf.com
securecn.scene7.com
gabi-envision.basf.com
thinghiemvui.basf.com
www.basf.com
oase-connect-prod.basf.com
readz.com
www.basf.com
expertnetworkadmin-qual.basf.com
*.commerce.basf.com
support9.cdnetworks.net
akamai-san94.exacttarget.com
ssl-vpn.basf.com
support9.cdnetworks.net

Certificate

The complete raw certificate details for experience-stage02.basf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcRB41FurUP5gJrFGEwu
k1lU5cA3U39c+RXgXATMGfLt/5ro8MlHdQbOGLOxLlt2hA5S+TLhHpjhpSaXjqkR
LLLp6wAs6HUr2mKzDxDLDFDc6f9Rc2cpZ1ICDPo3zvfZPHPcKiGXkhdVEw/WkB+o
wBYzqIAmPBd6Y5MqsSTsV1Eov6jxA3ZQG4uyiovg6i9jgRYKeMooHMhOPYiDTizO
4m1/Cz1jy1roXURGi7rHJ9QNITGqT3v+Q2rrWeAvC/AxSKX6+AJzurrIR4VM0hRd
Qrv48ghyXbkLc4391GMUcIMzWPAleun5938PpnEgAa0Y01K37c3t9xIyTQfAmUd6
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9026921150748979505701060767033153882
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Digital Solutions GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'experience-stage02.basf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22945911317364457392192989176836643160725740817213708037207753805726603338054064050738052640336749071229935742338197084524932444849365369995850614618153366386471485418137771795450999844373938885640989231230358250977626366719404493390820478239618758247287910245756489476548277076821780224387844677436063850130907616214672634187370554984300743164809994373231846695030293518208391225914731754535849935903782803097962881150430538935214640967924682745571910756526128077157627751370085226915788475851148245368485655798967249992808608628797342634123419183966530626244011808995165065616475505727413252647651669378271340362361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6a51f2ad1dd5ecd156791e3cc40a82a94eb980a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1053 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience-stage02.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pestcontrol-stage02.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poultry-stage02.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poultry-livestock-stage02.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'better-vegetation-management-stage02.basf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterturf-stage02.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xarvio-stage02.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims-stage02.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pss-stage02.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculture-stage02.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculture-stage02.basf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.basf-showcaseplots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.engeniaherbicide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repfinder-stage02.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'better-turf-stage02.basf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterplants-stage02.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pestcontrol-stage02.basf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettervm-stage02.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailerfinder-stage02.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aem65-stage-author.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planthealth-stage02.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planthealth-stage02.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.operationweederadication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.trelona-calculator.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.termidorhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.trelonahome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.basfretailfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revxfields-stage02.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myencircle-stage02.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.Xitavo-soybeanyields.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.FiberMax-cottonyields.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.Stoneville-cottonyields.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.InVigor-canolayields.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage02.cottonseedyields.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yields-stage02.basf.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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