sharehk.swireproperties.com

- Swire Properties Limited -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 07:c5:1a:a1:d7:d7:0a:e6:60:82:84:6c:05:22:c3:65 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Swire Properties Limited

Organization: Swire Properties Limited
Locality: Admiralty
Country: HK

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:c5:1a:a1:d7:d7:0a:e6:60:82:84:6c:05:22:c3:65
Serial Number (int): 10328018616808879529313099460057940837
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 37:86:00:0d:03:8e:e5:98:bb:c5:27:c8:4e:21:cb:68:ca:c6:d9:d7
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): f6:de:f9:8a:41:da:cf:ce:c6:63:12:9d:71:16:c5:ed:fa:87:c1:40
Fingerprint (sha256): 1e:9e:a1:1c:a3:08:77:f8:f9:50:08:f6:ec:03:65:15:0b:91:70:04:b5:13:a3:4f:71:06:65:93:84:45:48:62

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate sharehk.swireproperties.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sharehk.swireproperties.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sharehk.swireproperties.com
www.sharehk.swireproperties.com

Other certificates including the domain name swireproperties.com

(limited to 100 certificates)
www.soomapp.com.hk
swire-uat.eventxtra.co
mailhk.swireproperties.com
adfs.swireproperties.com
hometownheroes.lb-swireproperties.com
splinks.swireproperties.com
www.swireproperties.com
tenant.swireproperties.com
www.swireproperties.com
www.swireproperties.com
mailhk.swireproperties.com
akamai-san207.exacttarget.com
www.soomapp.com.hk
sharehk.swireproperties.com
mailcn.swireproperties.com
mailhk.swireproperties.com
www.swireproperties.com
www.swireproperties.com
ext.swireproperties.com
www.soomapp.com.hk
sharehk.swireproperties.com
bi.swireproperties.com
akamai-san207.exacttarget.com
www.swireproperties.com
www.swireproperties.com
splsmtpgw02.swireproperties.com
remotehk.swireproperties.com
www.swireproperties.com
dts.swireproperties.com
www.swireproperties.com
sftp03.swireproperties.com
sharehk.swireproperties.com
www.soomapp.com.hk
*.swireproperties.com
sftp03.swireproperties.com
mailhk.swireproperties.com
www.soomapp.com.hk
sharehk.swireproperties.com
adfs.swireproperties.com
www.binarysolutions.com.hk
mailhk.swireproperties.com
irp.swireproperties.com
eclm.swireproperties.com
www.soomapp.com.hk
remotetest.swireproperties.com
hometownheroes.swireproperties.com
www.swireproperties.com
hometownheroes.lb-swireproperties.com
mailhk.swireproperties.com
sharehk.swireproperties.com
www.swireproperties.com
www.swireproperties.com
www.swireproperties.com
www.swireproperties.com
sgedm.swireproperties.com
www.swireproperties.com
etender.swireproperties.com
www.swireproperties.com
shshtmhduetto.hhl.gz.swireproperties.com
ir.swireproperties.com
www.soomapp.com.hk
www.swireproperties.com
splinks.swireproperties.com
www.soomapp.com.hk
remoteslt.swireproperties.com
www.swireproperties.com
splinks.swireproperties.com
mailhk.swireproperties.com
mailhk.swireproperties.com
securelogcn.swireproperties.com
e-Learning.swireproperties.com
mailhk.swireproperties.com
snib8fegl.wpc.edgecastcdn.net
uat-cms.swireproperties.com
sharehk.swireproperties.com
mailhk.swireproperties.com
www.swireproperties.com
www.soomapp.com.hk
hometownheroes.lb-swireproperties.com
www.swireproperties.com
eclm.swireproperties.com
mediaperspectives.swireproperties.com
www.swireproperties.com
mailhk.swireproperties.com
www.swireproperties.com
securelogin.swireproperties.com
www.swireproperties.com
www.swireproperties.com
remotehk.swireproperties.com
click.edm.swireproperties.com
shoppingplus.swireproperties.com
hometownheroes.lb-swireproperties.com
remotehk.swireproperties.com
50a-nft.swireproperties.com
www.swireproperties.com
mdmhk.swireproperties.com
click.edm.swireproperties.com
www.swireproperties.com
remotehk.swireproperties.com
remote.swireproperties.com

Certificate

The complete raw certificate details for sharehk.swireproperties.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGhDCCBWygAwIBAgIQB8UaodfXCuZggoRsBSLDZTANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0yMDAxMjEwMDAwMDBaFw0yMTAxMjUxMjAwMDBa
MGoxCzAJBgNVBAYTAkhLMRIwEAYDVQQHEwlBZG1pcmFsdHkxITAfBgNVBAoTGFN3
aXJlIFByb3BlcnRpZXMgTGltaXRlZDEkMCIGA1UEAxMbc2hhcmVoay5zd2lyZXBy
b3BlcnRpZXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vty
MqEkcQXnPvgy2YEWYOralK1wzRbvos9eDZ3yFtksS5TVAKGnMpn51ax8wp1BS8pd
rX8IWBBS4qC7lEZmUpn6pZ/4tLlcMNtzSljnd31xmsYBVbU08H+m9sT4t4NXLqAN
eKQX79hUuEmBzU7RTGPuSNhLVAMHyir5FGk0MNqpWXxpTZWAF4oDXSItPzIuFW1a
SDY294js2sgV54m/8AdS4IJqO/VWafbPNXcv81dCqxsLHsMndaPcVhNYdk07LvJh
Dil+QMhn50LAmi53hwXsv5ESzjpkyoiSrtdfJjLdCq+e1kobhVT5+HeaI2q99fHr
7ML1LIaE+FA3tl5CxwIDAQABo4IDHjCCAxowHwYDVR0jBBgwFoAUUWj/kK8CB3U8
zNllZGKiErhZcjswHQYDVR0OBBYEFDeGAA0DjuWYu8UnyE4hy2jKxtnXMEcGA1Ud
EQRAMD6CG3NoYXJlaGsuc3dpcmVwcm9wZXJ0aWVzLmNvbYIfd3d3LnNoYXJlaGsu
c3dpcmVwcm9wZXJ0aWVzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwz
LmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwNKAyoDCGLmh0dHA6
Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwTAYDVR0g
BEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGln
aWNlcnQuY29tL0NQUzAIBgZngQwBAgIwgYMGCCsGAQUFBwEBBHcwdTAkBggrBgEF
BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME0GCCsGAQUFBzAChkFodHRw
Oi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEySGlnaEFzc3VyYW5j
ZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMIIBBQYKKwYBBAHWeQIEAgSB9gSB
8wDxAHcApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFvyJpvaQAA
BAMASDBGAiEA+5RLjWkNxm/zP4M6n6G+e+oNM1X2Z7gVtnRimGDqAqcCIQCTp+nL
iIUy0gFjZc6gTCXnRhcKJDquwaQTf1qThufgUAB2AESUZS6w7s6vxEAH2Kj+KMDa
5oK+2MsxtT/TM5a1toGoAAABb8iabxAAAAQDAEcwRQIgNJK8VderQhfE2pYLHyFe
xzqLJhfCKBW36yotiUZZ4wMCIQDQntqDh8365J27ypHluLH64Ie896/RdEE+oqvQ
uT3eqTANBgkqhkiG9w0BAQsFAAOCAQEAJ/y335TpuUzeL45oK35BidI5NvNwywLu
ETPC+3/s5aimKCHOKb3zkCm8AvjY/mBcv44GO3i18gZC6ZzUQkIONl9mzTDh2Rhg
6yso4OMQIjrfystkYz7/5ZZUuCSrooFrIlZhpifYLOdemo3rmbjLevecGZORvVcQ
pVH7+Q90qJhhUCRQME+MPoHVKsBXag6pI85jaBU/Fv+bvg6S2K8vU38wdq0mVCSs
LffF1Jjr9L1+CITn6/a2zlKQbOBZaZjkDWk5P1br9z7AmfpNti4bjtX90IfK9E4P
3QpoD0sml3+L87SVi8Pz4UnjMPJy5IqBkhVTaUUL+ubvtz+0LI3opA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vtyMqEkcQXnPvgy2YEW
YOralK1wzRbvos9eDZ3yFtksS5TVAKGnMpn51ax8wp1BS8pdrX8IWBBS4qC7lEZm
Upn6pZ/4tLlcMNtzSljnd31xmsYBVbU08H+m9sT4t4NXLqANeKQX79hUuEmBzU7R
TGPuSNhLVAMHyir5FGk0MNqpWXxpTZWAF4oDXSItPzIuFW1aSDY294js2sgV54m/
8AdS4IJqO/VWafbPNXcv81dCqxsLHsMndaPcVhNYdk07LvJhDil+QMhn50LAmi53
hwXsv5ESzjpkyoiSrtdfJjLdCq+e1kobhVT5+HeaI2q99fHr7ML1LIaE+FA3tl5C
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10328018616808879529313099460057940837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Admiralty'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swire Properties Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sharehk.swireproperties.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27138989948542568764765446155939513449937735006091811542867810329843130820809406005500944123836032966967451148385654362403297425746464785980727461227002085810010222423399276895667638502943705987820160221632505573535368809288784409522907980513304234885267764240351811722760817767257457219106969753096773693203558246917765469422898228130255278311359808968962893265206620279666467664559279517208705641328042862769816429088502920900907185031688451932695520442246577006535082296694844736496101176829659435313332450991571233482945292739413872543199129223811121517852816596560394468827946790882014125795410223509936894001863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3786000d038ee598bbc527c84e21cb68cac6d9d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharehk.swireproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharehk.swireproperties.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016fc89a6f690000040300483046022100fb944b8d690dc66ff33f833a9fa1be7bea0d3355f667b815b674629860ea02a702210093a7e9cb888532d2016365cea04c25e746170a243aaec1a4137f5a9386e7e0500076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016fc89a6f10000004030047304502203492bc55d7ab4217c4da960b1f215ec73a8b2617c22815b7eb2a2d894659e303022100d09eda8387cdfae49dbbca91e5b8b1fae087bcf7afd174413ea2abd0b93ddea9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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