api.qa.fitpay.ninja

- Fit Pay Inc -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0c:90:32:c6:74:c6:14:66:5b:f7:a1:4b:4c:da:b5:ae was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fit Pay Inc

Organization: Fit Pay Inc
State / Province: Colorado
Locality: Boulder
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:90:32:c6:74:c6:14:66:5b:f7:a1:4b:4c:da:b5:ae
Serial Number (int): 16699456540844090848298337260466255278
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: de:91:6b:cd:0c:0d:ee:4b:a6:23:a6:5f:3f:09:91:18:4f:88:84:ab
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 23:bb:18:00:0c:4f:53:f3:be:38:9d:6e:d5:6f:e2:fe:f5:5f:96:c6
Fingerprint (sha256): 1a:09:d7:92:99:dc:ae:a7:d8:d1:e9:59:eb:67:e0:d2:04:d6:36:0a:19:0e:c9:2f:03:e3:4b:0f:a0:e3:d1:30

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate api.qa.fitpay.ninja

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.qa.fitpay.ninja

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.qa.fitpay.ninja
admin.qa.fitpay.ninja
ext.qa.fitpay.ninja
auth.qa.fitpay.ninja

Other certificates including the domain name fitpay.ninja

(limited to 100 certificates)
www.thekoskelas.com
fitpay.ninja
crypto.qa.fitpay.ninja
api.qa.fitpay.ninja
*.qa.fitpay.ninja
audiogalaxy.app
fpctrl-explorer.qa.fitpay.ninja
livechat.reecegordon.co.uk
www.macosta.me
*.qa.fitpay.ninja
poker.borderux.com
tronodyssey.com
fitpay.ninja
www.smart-timetable.app
ext.qa.fitpay.ninja
*.prod.fitpay.ninja
events.qa.fitpay.ninja
suzuki-iwatashi-poc.thelabel.tokyo
goto.socialdeal.nl
4s.tapacenter.com
goto.socialdeal.nl
rkyupelyan.com
audiogalaxy.app
*.qa.fitpay.ninja
api.qa.fitpay.ninja
www.productdesign.tips
crypto.qa.fitpay.ninja
www.elemiru.com
www.levelupsoftware.de
fitpay.ninja
sip-sip-hooray.qa.fitpay.ninja
blanchospital.dev.portalcliente.izii.io
admin.witful.rodeo
ssl826194.cloudflaressl.com
fpctrl-explorer.qa.fitpay.ninja
ssl826193.cloudflaressl.com
doc.lojavcpautomacao.com.br
sip-sip-hooray.qa.fitpay.ninja
crypto.qa.fitpay.ninja
ws-fpctrl-explorer.qa.fitpay.ninja
staging.firetime.app
cdn.qa.fitpay.ninja
ojiepermana.com
crypto.qa.fitpay.ninja
ws-fpctrl-explorer.qa.fitpay.ninja
crypto.qa.fitpay.ninja
fitpay.ninja
sip-sip-hooray.prod.fitpay.ninja
*.prod.fitpay.ninja
events.qa.fitpay.ninja
*.qa.fitpay.ninja

Certificate

The complete raw certificate details for api.qa.fitpay.ninja in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG3TCCBcWgAwIBAgIQDJAyxnTGFGZb96FLTNq1rjANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwNDA1MDAwMDAwWhcN
MjEwNjA4MTIwMDAwWjBmMQswCQYDVQQGEwJVUzERMA8GA1UECBMIQ29sb3JhZG8x
EDAOBgNVBAcTB0JvdWxkZXIxFDASBgNVBAoTC0ZpdCBQYXkgSW5jMRwwGgYDVQQD
ExNhcGkucWEuZml0cGF5Lm5pbmphMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAm1qweZlQjbxQLLBIMuBPOVBzatyuQvVF/T9jfD36dn7fWN14mBDBNHr6
fvxFTrGwtlZjA451msQR2X5IScXbm10KWBYI7oE1G2rRnvZGV0KupVBkYAkXwknJ
HZFOuI7Oq9OQm+rDfgwZ2q8HOQMupSPo75CStKFNAZ28/KfFcjIPHpuS5tKjgNul
LGCNTPLcNkXOIrONFgLK44wdWtaYE5CSZ4iFfYv+XILr8dgIGgg8znvQ04Y4IX6J
gV9pG2FE1LMHcuGOilGakWotHCOaWeTm7969JONTVouzoFCaxCwvLOyGv02IZrZ+
WFJSBhLqGsZOuxiW4p9T3itdf0DZwwIDAQABo4IDnjCCA5owHwYDVR0jBBgwFoAU
D4BhHIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFN6Ra80MDe5LpiOmXz8JkRhP
iISrMGAGA1UdEQRZMFeCE2FwaS5xYS5maXRwYXkubmluamGCFWFkbWluLnFhLmZp
dHBheS5uaW5qYYITZXh0LnFhLmZpdHBheS5uaW5qYYIUYXV0aC5xYS5maXRwYXku
bmluamEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20v
c3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29t
L3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggr
BgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIw
fAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2Vy
dC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9E
aWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADCCAX4G
CisGAQQB1nkCBAIEggFuBIIBagFoAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiD
AMR7iXqo/csAAAFp7zrSeAAABAMARzBFAiAaYoB9cB79AQ3/Wj02FNKhc0pPNraD
jEirfyvmhkAp1AIhAKypoN8eJUtQIjIajYsmqqKxRYA+tSgBEYH3Ny+X1kSyAHYA
h3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFp7zrTjgAABAMARzBF
AiEAjZ/G8wuNOkG65S213ieSw+e5SoHX61/Mdr2w9Flk7O0CIB28fxnVTM5B1Uuh
zQr1Gnj7gEYI+D4YMYB7zSoWAhdbAHYARJRlLrDuzq/EQAfYqP4owNrmgr7YyzG1
P9MzlrW2gagAAAFp7zrSGwAABAMARzBFAiEA9a6XE9Vgi3FVYjKNpEgcZ7HVIQej
oeiDywHIK0sWR4wCIDpCUjeEF4mEWi6nbJu8dzOCB0MRWLZuBtqITSTBiQh4MA0G
CSqGSIb3DQEBCwUAA4IBAQAap2eEdiuMZfcPAO/Y/GgEknCQ39C56RNdrcH+mA06
7/FxevqQykuZCPZdfrn2YiOg4v01LPnTizV475RFyHZmf/W6sb/b+SXxAJdDuGOk
JxHN+EJXee9Mw25zEwjb+WuopBErIJ7jNS3Mx49wrCsAHCcNyp/s2l0OFNo3fWU2
QajrJDkzrRX1/7GCul/cahMYF1kHBV5g/3nu9acug2vRr7zVaWXsxU4u7nZwI/Z6
ErScXrpm5Hsn3uO26k3bHNAb9E3B8e+iHuR1GthdvcZpWJlAiBPgGUsb56YVqHpZ
Ic2IiZYGLTprDacOgBJ7uagN4G/Q8QS15kXI3SA43sJ3
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1qweZlQjbxQLLBIMuBP
OVBzatyuQvVF/T9jfD36dn7fWN14mBDBNHr6fvxFTrGwtlZjA451msQR2X5IScXb
m10KWBYI7oE1G2rRnvZGV0KupVBkYAkXwknJHZFOuI7Oq9OQm+rDfgwZ2q8HOQMu
pSPo75CStKFNAZ28/KfFcjIPHpuS5tKjgNulLGCNTPLcNkXOIrONFgLK44wdWtaY
E5CSZ4iFfYv+XILr8dgIGgg8znvQ04Y4IX6JgV9pG2FE1LMHcuGOilGakWotHCOa
WeTm7969JONTVouzoFCaxCwvLOyGv02IZrZ+WFJSBhLqGsZOuxiW4p9T3itdf0DZ
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16699456540844090848298337260466255278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Colorado'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Boulder'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fit Pay Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.qa.fitpay.ninja'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19611657857671478521787731019079848089552332798303953497133509004401643330138712806154527284658824598815342186969474367213327089084430454775856311350403096590119900610053515933353610242905640056743951132560423028388478285782824829335960205756305248824325761315093558971820519403289149037188670837449418539773524375412930998220757543045088676481481913871189669957327887744432115128263644886827356249634609760375571950623534763585514680539567007841879995558721712483832935191025561137124808807459674023878281384779869863445978893103333366999315021364813967241458144798531941286301028101437769976093679275270426905860547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de916bcd0c0dee4ba623a65f3f0991184f8884ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.qa.fitpay.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.qa.fitpay.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext.qa.fitpay.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.qa.fitpay.ninja'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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