my.gm.com

- General Motors LLC -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:27:32:cc:b8:a5:2f:1f:af:f9:85:87:e5:d8:c9:23 was issued on by DigiCert Inc.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

General Motors LLC

Organization: General Motors LLC
State / Province: Michigan
Locality: Detroit
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:27:32:cc:b8:a5:2f:1f:af:f9:85:87:e5:d8:c9:23
Serial Number (int): 9508125888147541984403385886401153315
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 13:92:0c:4d:c8:f6:17:f9:fa:dd:98:6c:88:c5:f6:d7:ef:0f:00:bb
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 83:50:73:c8:04:0f:53:c6:c5:7b:e9:7f:44:80:31:0c:9a:8b:1b:ba
Fingerprint (sha256): 1b:9f:96:4f:1c:81:08:90:e5:75:58:4a:20:f9:88:a4:fd:d3:cb:0b:f3:0a:ee:88:25:46:56:9f:05:2d:27:7d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate my.gm.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for my.gm.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

my.gm.com
meu.chevrolet.com.br
mi.chevrolet.cl
mi.chevrolet.com.ar
mi.chevrolet.com.bo
mi.chevrolet.com.co
mi.chevrolet.com.ec
mi.chevrolet.com.pe
mi.chevrolet.com.py
mi.chevrolet.com.uy
my.buick.com
my.cadillac.com
my.cadillacarabia.com
my.chevrolet.com
my.chevroletarabia.com
my.gm.ca
my.gm.com.mx
my.gmc.com
my.gmcarabia.com

Other certificates including the domain name gm.com

(limited to 100 certificates)
d1mipvmstm002.edc.nam.gm.com
dcmidavmred0599.vra.dev.gm.com
epgidvldcss0016.epga.nam.gm.com
elmpplx.pp.xw.gm.com
dcwipavvdf015.edc.nam.gm.com
richcerttest1234.gm.com
dcmipph02n002.edc.nam.gm.com
www.gmwelcometocanada.ca
ebill.gm.com
my.gm.com
dcmidavadkd0101.vra.dev.gm.com
scsinscsv001-vl1729.scs.lam.gm.com
suricatoz-edc.gm.com
ars.gm.com
mgo-test1-container.gm.com
dcmidavbrd3516.nam.corp.gm.com
matador.gm.com
admin-gig.gm.com
wlsadmins.onstar.gm.com
pbr.gm.com
odnm-uat.gm.com
sduat1.gm.com
tmsii-fast.gm.com
dcmipavvdf014.edc.nam.gm.com
dcmspvmmas002.edc.nam.gm.com
game3-alpha-dev.dev.gm.com
usfwasa0pag01.fwa.mfg.ad.gm.com
manager-br-offers.gm.com
tdcapp30.eur.corp.gm.com
dcwidavbrd2486.nam.corp.gm.com
sabrix.gm.com
dcwitavtold0051.vra.dev.gm.com
dcwipphgrt001.edc.nam.gm.com
dcmidavgpd0690.nam.corp.gm.com
d2mimphxj3001.edc.nam.gm.com
testfinder.gm.com
www.gm.com
*.wpi.gm.com
sapccaip7a01.edc.nam.gm.com
game3-wap.pp.gm.com
epms-utility2.gm.com
ddpco3-staging.marketing.ext.gm.com
dcmidavism0002.epg.nam.gm.com
ptas-test-01.gm.com
gdapsolr-prdw.gm.com
phxsvn.gm.com
dcmitavbrd0100.epga.nam.gm.com
dcwipavemp001.edc.nam.gm.com
USSSHSA0BAU81.SSH.MFG.AD.GM.COM
vdmcorps-na.epg.nam.gm.com
www.cadillac.com
dcwipph14k002.edc.nam.gm.com
alm.gm.com
dcmidph02k002-ci.edc.nam.gm.com
dcwipavsp4001.edc.nam.gm.com
www.autopartners.net
epgidvwbrd1099.epga.nam.gm.com
dcmidavcee010.edc.nam.gm.com
sapupspa01.edc.nam.gm.com
vscms.gm.com
epgidvlcca1165.epga.nam.gm.com
gmeuut1dca.edc.nam.gm.com
testurlpcf.gm.com
wvpptvwpmc011.wvp.nam.gm.com
mobileapp.gm.com
dcmipph05k004.edc.nam.gm.com
pdgipvmgos002.nam.corp.gm.com
vdu-idt2-epgw.onstar.gm.com
dcwipvmdgc003.edc.nam.gm.com
mdpi-test.gm.com
dcmipavcmd009.edc.nam.gm.com
dcwidavtol0599.epg.nam.gm.com
np-idt1-epgw.onstar.gm.com
mgo-test1-container.gm.com
vdu-vval2-epgw.onstar.gm.com
dex.op5wi.gm.com
dcmipavgie004.edca.nam.gm.com
mediaarchiveext.gm.com
dps-portal.pp.gm.com
MPGSTVMTFD001.nam.corp.gm.com
dcwidavgml0201.epg.nam.gm.com
apachelbtestuat.gm.com
arsdevelopment.gm.com
dcmitavcca0189.epg.nam.gm.com
gmnaobitest.pp.gm.com
fwaacisepsn02.fwa.nam.gm.com
g2cars-za-uat.gm.com
epgidvlpsc1097.epga.nam.gm.com
dcwidavdsc0023.epg.nam.gm.com
dcmitavfin0131.epg.nam.gm.com
r5gsi-dit.gm.com
epgidvlpsc1045.epga.nam.gm.com
saiobitest.pp.gm.com
www.gmretiree.com
wpx.gm.com
tonptisepsn02.tny.nam.gm.com
dcwipavtesd0001.vra.dev.gm.com
naowb-devl.gm.com
pub-seg7-prd.gm.com
dcwipvmgif116.edc.nam.gm.com

Certificate

The complete raw certificate details for my.gm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEIXuY3DgSroYDXQmuD9tZZDo8742f
NzYDugoGtM0+0flmP+VzqAh/lxzm+sRwv4BCRppE9ZAU9D14zsN5wYNK3g==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9508125888147541984403385886401153315
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Detroit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'General Motors LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'my.gm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004217b98dc3812ae86035d09ae0fdb59643a3cef8d9f373603ba0a06b4cd3ed1f9663fe573a8087f971ce6fac470bf8042469a44f59014f43d78cec379c1834ade
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13920c4dc8f617f9fadd986c88c5f6d7ef0f00bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (351 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.gm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meu.chevrolet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.chevrolet.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.chevrolet.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.chevrolet.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.chevrolet.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.chevrolet.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.chevrolet.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.chevrolet.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.chevrolet.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.buick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.cadillac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.cadillacarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.chevrolet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.chevroletarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.gm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.gm.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.gmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.gmcarabia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001859d2e36180000040300473045022008e70ac5591301e87cc5d4a538d21db56ae848729524d648d1eb46361927c7ba022100edcdb4e31fa8659dc195eb156271afed3548c03ced9f295ab4858544ea7d0e5b00750073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b5000001859d2e366b000004030046304402207fd7d6c6d8515a2ff73daf91823187eed6a0cc30a2e3ba265053e7b0ccd1d15302200b1d4b3299dfe7833a7ce01a734389a26f5a67b591cead6bf2000eaad1d0f36200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001859d2e36460000040300483046022100c58932c40450ecd92d640614ae494514b2744664e211ef3a3fe14ea33ef56bc3022100d65997065227c61a8d06721d4bb984570db186ce8c23ce4795723bef9d88515c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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