lhr.ocir.io

- Oracle Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 08:29:62:c9:8f:67:75:93:e2:f4:b0:63:b1:92:65:67 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oracle Corporation

Organization: Oracle Corporation
Organization unit: Oracle ODX SEATTLE
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:29:62:c9:8f:67:75:93:e2:f4:b0:63:b1:92:65:67
Serial Number (int): 10848711782862509155610026270249870695
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 01:2d:4d:2e:39:fa:b2:36:2a:f3:18:99:94:dc:76:1d:97:19:57:94
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): e5:9e:cb:64:c7:30:f3:44:6f:55:f5:2c:b2:7a:25:fb:69:f0:7a:30
Fingerprint (sha256): 1c:d2:5c:cd:3f:50:00:db:31:7e:1f:63:d9:19:55:2c:e4:9d:91:2d:6b:01:c7:12:7e:2f:dc:22:56:f5:db:2e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate lhr.ocir.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lhr.ocir.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lhr.ocir.io

Other certificates including the domain name ocir.io

(limited to 100 certificates)
beta.ocir.io
lin.ocir.io
syd.ocir.io
gamma.ocir.io
syd.ocir.io
iad.ocir.io
ocir.me-jeddah-1.oci.oraclecloud.com
mtz.ocir.io
auh.ocir.io
arn.ocir.io
gamma.ocir.io
iad.ocir.io
kix.ocir.io
repository.us-sanjose-1.ocir.io
vcp.ocir.io
phx.ocir.io
nrt.ocir.io
ocir.ca-toronto-1.oci.oraclecloud.com
prime.ocir.io
zrh.ocir.io
lhr.ocir.io
lhr.ocir.io
bom.ocir.io
repository.eu-milan-1.ocir.io
repository.sa-santiago-1.ocir.io
iad.ocir.io
ams.ocir.io
yyz.ocir.io
icn.ocir.io
repository.eu-stockholm-1.ocir.io
cdg.ocir.io
lhr.ocir.io
yny.ocir.io
ocir.il-jerusalem-1.oci.oraclecloud.com
generic.artifacts.ap-chuncheon-1.oci.oraclecloud.com
icn.ocir.io
yul.ocir.io
jnb.ocir.io
hyd.ocir.io
generic.artifacts.ap-hyderabad-1.oci.oraclecloud.com
jed.ocir.io
repository.il-jerusalem-1.ocir.io
generic.artifacts.eu-milan-1.oci.oraclecloud.com
kix.ocir.io
repository.me-dubai-1.ocir.io
fra.ocir.io
icn.ocir.io
gru.ocir.io
wsmidt.ocir.io
iad.ocir.io
fra.ocir.io
sin.ocir.io
syd.ocir.io
sjc.ocir.io
phx.ocir.io
ocir.us-sanjose-1.oci.oraclecloud.com
dev1.ocir.io
scl.ocir.io
ocir.eu-marseille-1.oci.oraclecloud.com
gru.ocir.io
ocir.eu-paris-1.oci.oraclecloud.com
yyz.ocir.io
repository.uk-cardiff-1.ocir.io
generic.artifacts.ap-singapore-1.oci.oraclecloud.com
mrs.ocir.io
dev1.ocir.io
yul.ocir.io
auh.ocir.io
ams.ocir.io
yul.ocir.io
generic.artifacts.me-abudhabi-1.oci.oraclecloud.com
ocir.ap-mumbai-1.oci.oraclecloud.com
vcp.ocir.io
cwl.ocir.io
repository.af-johannesburg-1.ocir.io
hyd.ocir.io
nrt.ocir.io
alpha.ocir.io
alpha.ocir.io
yyz.ocir.io
mel.ocir.io
ocir.sa-vinhedo-1.oci.oraclecloud.com
prime.ocir.io
vap.ocir.io
repository.ap-singapore-1.ocir.io
zrh.ocir.io
ocir.mx-monterrey-1.oci.oraclecloud.com
generic.artifacts.us-sanjose-1.oci.oraclecloud.com
generic.artifacts.sa-santiago-1.oci.oraclecloud.com
generic.artifacts.eu-marseille-1.oci.oraclecloud.com
generic.artifacts.me-dubai-1.oci.oraclecloud.com
ocir.ap-osaka-1.oci.oraclecloud.com
gamma.ocir.io
bom.ocir.io
beta.generic.artifacts.ca-toronto-1.oci.oraclecloud.com
zrh.ocir.io
generic.artifacts.af-johannesburg-1.oci.oraclecloud.com
phx.ocir.io
ocir.ap-singapore-1.oci.oraclecloud.com
nrt.ocir.io

Certificate

The complete raw certificate details for lhr.ocir.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIQCCliyY9ndZPi9LBjsZJlZzANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwMzI3MDAwMDAwWhcN
MTkwMzI3MTIwMDAwWjCBiTELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3Ju
aWExFTATBgNVBAcTDFJlZHdvb2QgQ2l0eTEbMBkGA1UEChMST3JhY2xlIENvcnBv
cmF0aW9uMRswGQYDVQQLExJPcmFjbGUgT0RYIFNFQVRUTEUxFDASBgNVBAMTC2xo
ci5vY2lyLmlvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkiv+Tpw
hGbIzsCszqIEpy914O1Zaa8E4RrhIMQbW1L1RReDrxN6XSfYOMTEbqKACROxTQjT
5DiQoOWQYHehkzK1uW0VY7WjC2oEzaQs2zx2B/tn4h3u/JY++FJTNQH5vhHQc3Rs
MY6nz6+UvObeNdXyisEnOAIcgJVOX2KdSlkIJs7mZ1aTZ2DrmROATh1vu7od0GXl
ShKH9OKNs3qep0nPoHI7ApX5C4ADGa/ppcsQIFFCV4HI/0IDhDjvXXUe/HGc2i64
SMmin3pZXVv/yCuZ69UOUeTV5MsjcD38HXauBM86YTxv68POK/kxHSJMJWrwEPRP
+hqtjCWi9OufnQIDAQABo4IB5DCCAeAwHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeN
Rji0LOHG2eIwHQYDVR0OBBYEFAEtTS45+rI2KvMYmZTcdh2XGVeUMBYGA1UdEQQP
MA2CC2xoci5vY2lyLmlvMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMuZGln
aWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRp
Z2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9
bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMw
CAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDovL29j
c3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdp
Y2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAkGA1UdEwQC
MAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAKpUOlEI
LQygrUURR7vGhr36W7D7xXVgkkQ3+1HXoGQPKmJcPNVzhVLypylCfjsgQZkSY8AQ
Ty33n7+z9IPdFlLg4gq8IhDS9ZmO630xsQOwMNEILs7cm/YzQ5TfV+2lTMDoRPMC
80oJzMwFhVUnre9mb+SWxQR0f7HMSKkY42+UxanWgB+Ces/A4b0EGJ+11dLNK5vk
qmJ8Qk16hYgVhuo5mJo4XAivbV/g3gajTePaQRtnp0M116UjSjOJCxVCI1oCTn+5
mE2qXPZ44nAg5TYC5+icEI1Jf23YdgKwOlS6oKgytw5l3D4y9vLVA4jp9zrOCWNM
G7AE0eSb2NXXsqA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkiv+TpwhGbIzsCszqIE
py914O1Zaa8E4RrhIMQbW1L1RReDrxN6XSfYOMTEbqKACROxTQjT5DiQoOWQYHeh
kzK1uW0VY7WjC2oEzaQs2zx2B/tn4h3u/JY++FJTNQH5vhHQc3RsMY6nz6+UvObe
NdXyisEnOAIcgJVOX2KdSlkIJs7mZ1aTZ2DrmROATh1vu7od0GXlShKH9OKNs3qe
p0nPoHI7ApX5C4ADGa/ppcsQIFFCV4HI/0IDhDjvXXUe/HGc2i64SMmin3pZXVv/
yCuZ69UOUeTV5MsjcD38HXauBM86YTxv68POK/kxHSJMJWrwEPRP+hqtjCWi9Ouf
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10848711782862509155610026270249870695
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle ODX SEATTLE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lhr.ocir.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23011214995026717764921716644404600469701419833218517895191676448387020248289458426373320105096277339467856631751108915622675570164049493935125577251211487463096714538569376163196408411428388139972003117667385954770829376099863577073307340927394002656998478680541086642709668853849708933114484472762586659175996950740027882274162577673245808880825519548410741136327433394826699909792761820262393854443636918972706006657645529841350259244250855343735614945375941811988619696514720349396174272451253939577086754796116904362333256196020941795579530644416891186195219611955093652160351326570374427620516256491570320875421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							012d4d2e39fab2362af3189994dc761d97195794
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhr.ocir.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00aa543a51082d0ca0ad451147bbc686bdfa5bb0fbc57560924437fb51d7a0640f2a625c3cd5738552f2a729427e3b2041991263c0104f2df79fbfb3f483dd1652e0e20abc2210d2f5998eeb7d31b103b030d1082ecedc9bf6334394df57eda54cc0e844f302f34a09cccc05855527adef666fe496c504747fb1cc48a918e36f94c5a9d6801f827acfc0e1bd04189fb5d5d2cd2b9be4aa627c424d7a85881586ea39989a385c08af6d5fe0de06a34de3da411b67a74335d7a5234a33890b1542235a024e7fb9984daa5cf678e27020e53602e7e89c108d497f6dd87602b03a54baa0a832b70e65dc3e32f6f2d50388e9f73ace09634c1bb004d1e49bd8d5d7b2a0