bri.co.id

- PT. Bank Rakyat Indonesia (Persero) Tbk -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 04:59:3b:49:bd:00:f0:2e:a7:b2:d1:d9:a8:0a:9c:4d was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PT. Bank Rakyat Indonesia (Persero) Tbk

Company registration number: Government Entity
Organization: PT. Bank Rakyat Indonesia (Persero) Tbk
State / Province: Daerah Khusus Ibukota Jakarta
Locality: Jakarta Pusat
Country: ID

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:59:3b:49:bd:00:f0:2e:a7:b2:d1:d9:a8:0a:9c:4d
Serial Number (int): 5780228907865543225230385208376335437
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 52:22:fa:df:a1:3c:32:ed:c7:f8:f9:d0:29:31:53:43:85:30:d2:26
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): d4:3d:03:b7:1e:d8:2a:01:e9:af:17:6f:5b:0d:85:ec:a6:b6:80:ab
Fingerprint (sha256): 1e:67:68:5a:6a:ad:7e:94:5f:ae:4c:c0:0e:46:b3:75:93:d3:05:ac:a1:32:fb:16:6a:62:d2:9b:97:2f:bf:0c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate bri.co.id

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bri.co.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bri.co.id
www.bri.co.id

Other certificates including the domain name bri.co.id

(limited to 100 certificates)
ibank.bri.co.id
3dsecure2.bri.co.id
brisim.bri.co.id
brimo.bri.co.id
junio-smart.bri.co.id
brimola.bri.co.id
mobilecc.bri.co.id
api.briconnect.bri.co.id
webmail.bri.co.id
content.makna.bri.co.id
commercialcard.bri.co.id
alert.bri.co.id
brilinkmobile.bri.co.id
infolelang.bri.co.id
*.bri.co.id
cabincrew.bri.co.id
britouch.bri.co.id
brismartapi.bri.co.id
briefx.bri.co.id
ib.bri.co.id
prowlth.bri.co.id
webmail1.bri.co.id
apimybri.bri.co.id
br1-ws-is2.corp.bri.co.id
brion.bri.co.id
mobilecc.bri.co.id
*.bigdata.bri.co.id
api.panen.bri.co.id
jadimerchant.bri.co.id
brinvoice.bri.co.id
pos.makna.bri.co.id
ibank.bri.co.id
webmail.bri.co.id
api.bristars.bri.co.id
digital.bri.co.id
ib.bri.co.id
sbn.bri.co.id
brilink.bri.co.id
app.ceria.bri.co.id
ib.bri.co.id
webmail.bri.co.id
eform.bri.co.id
3dsecure2.bri.co.id
agen.bri.co.id
fois.bri.co.id
apidocs.bri.co.id
api.bri.co.id
mobile.bri.co.id
api-staging.brispot.bri.co.id
ibank-tbn.bri.co.id
agen.bri.co.id
apps.bri.co.id
app.ceria.bri.co.id
developers.bri.co.id
bri.co.id
api.bristars.bri.co.id
prioritas.bri.co.id
cdn.wirausahabrilian.bri.co.id
ib.bri.co.id
tmsverifone.bri.co.id
s3.brimo.bri.co.id
br1-ws-is1.corp.bri.co.id
apilpdp.bri.co.id
login.work.bri.co.id
ambilin.bri.co.id
wirausahabrilian.bri.co.id
br1-ws-is2.corp.bri.co.id
apimybri.bri.co.id
mis.bri.co.id
rbaweb.bri.co.id
apps.bri.co.id
portalbgrepo.bri.co.id
sandbox.partner.api.bri.co.id
brieazycash-api.bri.co.id
3dsecure.bri.co.id
webmail1.bri.co.id
incapsula.com
openbsa.bri.co.id
myqrservice.bri.co.id
iumk.bri.co.id
biz.bri.co.id
briefx.bri.co.id
biz.bri.co.id
brieazycash.bri.co.id
brisolutions.bri.co.id
ceria-payment-sandbox.bri.co.id
*.digiporto.bri.co.id
cdn.wirausahabrilian.bri.co.id
*.bri.co.id
eform.bri.co.id
mobilemms.bri.co.id
brv.bri.co.id
mybri.bri.co.id
pasarbrilink.bri.co.id
merchant.ceria.bri.co.id
bri.co.id
brilinkers-admin.bri.co.id
sandbox.partner.api.bri.co.id
merchant.ceria.bri.co.id
qlola.bri.co.id

Certificate

The complete raw certificate details for bri.co.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHVTCCBj2gAwIBAgIQBFk7Sb0A8C6nstHZqAqcTTANBgkqhkiG9w0BAQsFADB1
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk
IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTIzMDIyODAwMDAwMFoXDTI0MDMyOTIz
NTk1OVowgeAxEzARBgsrBgEEAYI3PAIBAxMCSUQxGjAYBgNVBA8MEUdvdmVybm1l
bnQgRW50aXR5MRowGAYDVQQFExFHb3Zlcm5tZW50IEVudGl0eTELMAkGA1UEBhMC
SUQxJjAkBgNVBAgTHURhZXJhaCBLaHVzdXMgSWJ1a290YSBKYWthcnRhMRYwFAYD
VQQHEw1KYWthcnRhIFB1c2F0MTAwLgYDVQQKEydQVC4gQmFuayBSYWt5YXQgSW5k
b25lc2lhIChQZXJzZXJvKSBUYmsxEjAQBgNVBAMTCWJyaS5jby5pZDCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMSe5weTAx3+1/QI6je6L35YojAPFtqM
jQIRBbEXkXE46DNE5h/JrXPlW+l/lmLB0DIpyDAPL3kj4mdiIZaDrUAZZjypy3db
1aASHsBrhGjYuknYWn6HgIlcwkF+7x1qeHU2ljK9HVVTfLeZs8Fu+OMA37JVNNm1
q2Vz/nPy6BcEBigpBCV+k9q2v8acHH5plEpJfsLau4ISVErE9U9jnplNUKev+u8Z
N1zOx65geR2u2qVEVeFlJT7xk75Fx2H9tiLbdAqrrUa1pNQvnnUO+LyRywSTEhHm
9lhO6vDm16edIMZdCH9M7HeFCKXgPMiRCAwgrhVSakww0L0dI2DoqpkCAwEAAaOC
A3MwggNvMB8GA1UdIwQYMBaAFD3TUKXWoK3u80pgCmXTIdT4+NYPMB0GA1UdDgQW
BBRSIvrfoTwy7cf4+dApMVNDhTDSJjAjBgNVHREEHDAagglicmkuY28uaWSCDXd3
dy5icmkuY28uaWQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5odHRwOi8vY3JsMy5kaWdpY2Vy
dC5jb20vc2hhMi1ldi1zZXJ2ZXItZzMuY3JsMDSgMqAwhi5odHRwOi8vY3JsNC5k
aWdpY2VydC5jb20vc2hhMi1ldi1zZXJ2ZXItZzMuY3JsMEoGA1UdIARDMEEwCwYJ
YIZIAYb9bAIBMDIGBWeBDAEBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGln
aWNlcnQuY29tL0NQUzCBiAYIKwYBBQUHAQEEfDB6MCQGCCsGAQUFBzABhhhodHRw
Oi8vb2NzcC5kaWdpY2VydC5jb20wUgYIKwYBBQUHMAKGRmh0dHA6Ly9jYWNlcnRz
LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJFeHRlbmRlZFZhbGlkYXRpb25TZXJ2
ZXJDQS5jcnQwCQYDVR0TBAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA
7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGGlhqdhQAABAMARzBF
AiByr0LCyjOaXXk+2vMBOv/Yhn/w1f9oolLQ29RfNHWSDwIhAKRMA5efVJ0zbXE7
xTt4OQBBvevVCbZcpBKkC04Nzu9wAHYAc9meiRtMlnigIH1HneayxhzQUV5xGSqM
a4AQesF3crUAAAGGlhqd3wAABAMARzBFAiA78b1ZLu1yPeQ92MSt2VTyQrFXjkGk
ZcBpBx52FHE8igIhAOUbpesP188pNyCaEuUy/IZMDLeN1Pfvktx0O+9q/9i0AHYA
SLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGGlhqdpAAABAMARzBF
AiEA6yNsdyt8DoLhNtDC0Rlf9ZFEYHjC+RBfRLh0DVBM4pQCIDSStHe/1GFjw4Pn
fLSaKNAAG/SGM+RzHWAps9ro0oqvMA0GCSqGSIb3DQEBCwUAA4IBAQArvlE5wMOA
0AIZ9AGr3JNZiJ1LSmudPWdCuJQP3cisGK7WGmz7cfnew4DY9wAtxnFKmYXwIsnA
xKzE6jn9A4O2dlVicSc08j/yYRCQ52892xaz+2hLs/bxsMrmD+VbDqnWuXCMxQoM
vQirjFnk+iQEsJ7AdEFWbZL10n5nNRDtjjtCt2s5jTGNBYicK5t1pRhdq2aeRTiO
pI9T/sHG1KJb271lBTgFAFSSV1n3wBdEY4uV3CpzSeTI+RwLKKO/2dl1SbCQ/XjL
uNRbuXL5VBhZWhdV0i1vdaw7XEm4uDGLBi3YjNL47zj+m1VNOWwwsR32gtPbYw4K
LQ5ITora90sy
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ7nB5MDHf7X9AjqN7ov
fliiMA8W2oyNAhEFsReRcTjoM0TmH8mtc+Vb6X+WYsHQMinIMA8veSPiZ2IhloOt
QBlmPKnLd1vVoBIewGuEaNi6SdhafoeAiVzCQX7vHWp4dTaWMr0dVVN8t5mzwW74
4wDfslU02bWrZXP+c/LoFwQGKCkEJX6T2ra/xpwcfmmUSkl+wtq7ghJUSsT1T2Oe
mU1Qp6/67xk3XM7HrmB5Ha7apURV4WUlPvGTvkXHYf22Itt0CqutRrWk1C+edQ74
vJHLBJMSEeb2WE7q8ObXp50gxl0If0zsd4UIpeA8yJEIDCCuFVJqTDDQvR0jYOiq
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5780228907865543225230385208376335437
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Daerah Khusus Ibukota Jakarta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jakarta Pusat'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT. Bank Rakyat Indonesia (Persero) Tbk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bri.co.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24821065496472554417306631655258155071011354369832772275893303259921798486610674375173390265293725788973933386950048686977318609566921739468159181490268370989362562097418396382715433682500757093653686620509849386218802680649463740751112139039565385663356166556061344769405728129540791159165228587931567147576134286971402167906770362847837531767049912321593119533042689526553388963171615323567080140946141879923803929606366227577179539757659254119650377562355088906855101938564877912423364264087201866053339350470931756675234779467362893791884556714714993375624430159430976442352945911714595500469781182052611345918617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5222fadfa13c32edc7f8f9d0293153438530d226
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bri.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bri.co.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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