owamail.am.jll.com

- Jones Lang Lasalle Incorporated -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0c:5a:c4:8b:d9:43:de:96:00:06:17:b6:b5:bf:3c:b8 was issued on by DigiCert Inc.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jones Lang Lasalle Incorporated

Organization: Jones Lang Lasalle Incorporated
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:5a:c4:8b:d9:43:de:96:00:06:17:b6:b5:bf:3c:b8
Serial Number (int): 16422029098924326465078031665869044920
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ff:f6:3a:e4:a5:1b:7e:12:5b:b7:45:86:ce:1e:b5:6e:d9:c4:ec:56
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): a9:57:c5:ee:16:32:e3:02:6c:35:23:1e:d4:4c:a2:bc:be:65:ac:7c
Fingerprint (sha256): 1b:ac:47:a2:00:1c:57:84:0b:ae:31:c2:05:ec:01:39:06:4b:38:7c:12:7e:20:63:9e:37:4e:79:24:35:de:15

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate owamail.am.jll.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owamail.am.jll.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owamail.am.jll.com
owamaildr.am.jll.com
webmail.am.jll.com
webmail365.am.jll.com
owa.am.jll.com
webmail.am.joneslanglasalle.com
autodiscover.am.jll.com
uslilvmxch01.am.jllnet.com
uslilvmxch02.am.jllnet.com
usvdcvmxch03.am.jllnet.com
usvdcvmxch04.am.jllnet.com
autodiscover.jll.com

Other certificates including the domain name jll.com

(limited to 100 certificates)
*.ap.jll.com
access.jll.com
www.jllproperty.com
compensationplanning.jll.com
ambitions.jll.com
sansites.jll.com
*.ap.jll.com
investor.jll.com
oneeightyst-dev.jll.com
Projectsapp.jll.com
bpm.jll.com
flexspace.jll.com
proposals.jll.com
immobilier.jll.fr
1441blake.proposals.jll.com
lyncweb-ext-01.am.jll.com
nxtinvest.eu.jll.com
perspectives.jll.com
lyncweb-ext-01.am.jll.com
www.joneslanglasalle.com
tourpointapp.jll.com
ontariosystems.proposals.jll.com
cds2.cvent.com
help.celerity-uk.com
inbom01tsbp002.ap.jll.com
cds2.cvent.com
hybridworks-qa.jll.com
www.joneslanglasalle.com
fr-nxt.eu.jll.com
capitalmarkets.jll.com
charlotteofficemove.resource.jll.com
dev-bpm.jll.com
*.jll.com
fsus-14.freshservice.com
THBKK02TSBP002.ap.jll.com
forum.jllcab.live.jll.com
capitalmarkets.jll.com
webmail.am.joneslanglasalle.com
ask.jll.com
propertytemplate.proposals.jll.com
MapIT.EU.JLL.COM
immobilier.jll.lu
cds2.cvent.com
jllapple.live.jll.com
www.arpm.conference.jll.com
lilexpc02.am.jll.com
*.ap.jll.com
fsus-14.freshservice.com
www.thefoundry.proposals.jll.com
globalsustainability.conference.jll.com
cds2.cvent.com
webmail.am.joneslanglasalle.com
hiddengem.conference.jll.com
rmr.proposals.jll.com
shelbournecleveland.proposals.jll.com
www.joneslanglasalle.com
red-preprod.jll.com
authn.jll.com
brandhub.jll.com
*.ap.jll.com
8995airportroad.resource.jll.com
jll-sbx-okta.jll.com
jvdriver.resource.jll.com
tours.prd.propertycapsule.com
clientview-dev.jll.com
my-world.eu.jll.com
www.openavm.com
oneeightyst-dev.jll.com
bpm.jll.com
extapps.jll.com
slotdemo.proposals.jll.com
ambitions.jll.com
hiddengem.conference.jll.com
fed.jll.com
dev-bpm.jll.com
azdeptestprod.jll.com
*.ap.jll.com
lyncpool01.am.jll.com
jll.com.sg
nxtretail.eu.jll.com
authn.jll.com
fsus-14.freshservice.com
red-preprod.jll.com
nxtretail.eu.jll.com
webmail.eu.joneslanglasalle.com
fed.jll.com
*.ap.jll.com
immobilier.jll.fr
vdcexpe01.am.jll.com
capitalmarket-dev.jll.com
www.jllproperty.com
owamail.am.jll.com
clientview-dev.jll.com
sansites5.jll.com
sts.am.jll.com
multifamilyeastcoast.conference.jll.com
www.openavm.com
fsus-14.freshservice.com
jll.com.sg
medline.proposals.jll.com

Certificate

The complete raw certificate details for owamail.am.jll.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGjDCCBXSgAwIBAgIQDFrEi9lD3pYABhe2tb88uDANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0xODA1MTMwMDAwMDBaFw0yMDA0MTUxMjAwMDBa
MHkxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhJbGxpbm9pczEQMA4GA1UEBxMHQ2hp
Y2FnbzEoMCYGA1UEChMfSm9uZXMgTGFuZyBMYXNhbGxlIEluY29ycG9yYXRlZDEb
MBkGA1UEAxMSb3dhbWFpbC5hbS5qbGwuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmh2D3VqmfiKsIxyPXzVVdt4LvGZgXQ2i+tBIJhvcpxj5WX+Q
1nnKFbUL1po8vDH5575bX2gc/NktIqWM/oaYhpAOzSCLGUgZbMmEvIdl/Z0nm6LV
ncskL1XPqP8hb7mRr2FSgkbnWeQ2xBLjN1AsUyqGlhNv5b8F2TrvCgkM8Js67lCI
UWbjFDHa9r0BQjJjYfr+nrANEpJP5ghvex6iSOvYPef6Ecl3AP4GyzbnChqoikpD
dGu7o+YAxyyuvKcd1+IKbdsJIZcx7focx6MYbKM3wQLXl8HubeMw6ZJo+/7vKTpk
CC7wyZoKO3yNuW1Q+kR42SL5qh4DLRMpxD/OhwIDAQABo4IDFzCCAxMwHwYDVR0j
BBgwFoAUUWj/kK8CB3U8zNllZGKiErhZcjswHQYDVR0OBBYEFP/2OuSlG34SW7dF
hs4etW7ZxOxWMIIBMgYDVR0RBIIBKTCCASWCEm93YW1haWwuYW0uamxsLmNvbYIU
b3dhbWFpbGRyLmFtLmpsbC5jb22CEndlYm1haWwuYW0uamxsLmNvbYIVd2VibWFp
bDM2NS5hbS5qbGwuY29tgg5vd2EuYW0uamxsLmNvbYIfd2VibWFpbC5hbS5qb25l
c2xhbmdsYXNhbGxlLmNvbYIXYXV0b2Rpc2NvdmVyLmFtLmpsbC5jb22CGnVzbGls
dm14Y2gwMS5hbS5qbGxuZXQuY29tghp1c2xpbHZteGNoMDIuYW0uamxsbmV0LmNv
bYIadXN2ZGN2bXhjaDAzLmFtLmpsbG5ldC5jb22CGnVzdmRjdm14Y2gwNC5hbS5q
bGxuZXQuY29tghRhdXRvZGlzY292ZXIuamxsLmNvbTAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCG
Lmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmww
NKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1n
Ni5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0
cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwgYMGCCsGAQUFBwEB
BHcwdTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME0GCCsG
AQUFBzAChkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEy
SGlnaEFzc3VyYW5jZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB
1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsmQ+eKScl2qPiLVn+ipa5
WgNuEi2tm4y6tQrB0Qiv2HNmGIkArzaKLmI+EwC1jXsSifIUaMqCDznTHZ4X0zqJ
VJUg2/vXbhrV2fHjJuHI+ohEDhF99DH6a8Hm/6+vIstG1FBkok4mOg30xVLAqL6c
/V9MtbWF+0pYjkZbrjFDo2FETgdnQVJvSkEPkpdg/3azlOZZW5Y7padtekPbrB1B
xxhwAgLSBAfdZl86bb2lSGgbsEAKOa0bQczy0wmUa1VUEhv4pGQfoMkZHJwex36u
v788ZEgdo9DjX2+DjK+3MB9GzpnqDoxMqI8lLPqNqCNzHScZrk4U4Wx+7MCrm4Si
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh2D3VqmfiKsIxyPXzVV
dt4LvGZgXQ2i+tBIJhvcpxj5WX+Q1nnKFbUL1po8vDH5575bX2gc/NktIqWM/oaY
hpAOzSCLGUgZbMmEvIdl/Z0nm6LVncskL1XPqP8hb7mRr2FSgkbnWeQ2xBLjN1As
UyqGlhNv5b8F2TrvCgkM8Js67lCIUWbjFDHa9r0BQjJjYfr+nrANEpJP5ghvex6i
SOvYPef6Ecl3AP4GyzbnChqoikpDdGu7o+YAxyyuvKcd1+IKbdsJIZcx7focx6MY
bKM3wQLXl8HubeMw6ZJo+/7vKTpkCC7wyZoKO3yNuW1Q+kR42SL5qh4DLRMpxD/O
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16422029098924326465078031665869044920
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jones Lang Lasalle Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owamail.am.jll.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19455253401232301631952287309443695203646009662004186913781001216881835067616379909673259233474599634866004483839549989936096040020834674848180000789474264884725622932871364797257780064253298211944744098048283445500709386310050353704312413781128726442274280454874125831986866370327941726096883967902989285011822207521995395103099093108189293100729923133628208409840811066919078544740485645895033598671432588338095260569864256556762166922749933644421684560822524991574219268540923242416416812442433483539899174554445878458950743764205995045051126592304904703831799182591794531911699637062595198302478251618989783371399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fff63ae4a51b7e125bb74586ce1eb56ed9c4ec56
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (297 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owamail.am.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owamaildr.am.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.am.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail365.am.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.am.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.am.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.am.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uslilvmxch01.am.jllnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uslilvmxch02.am.jllnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usvdcvmxch03.am.jllnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usvdcvmxch04.am.jllnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.jll.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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