sandbox.partner.api.bri.co.id

- PT. Bank Rakyat Indonesia (Persero) Tbk -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:d5:bd:cb:19:50:72:1d:8a:d0:b9:ed:31:7c:37:91 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PT. Bank Rakyat Indonesia (Persero) Tbk

Organization: PT. Bank Rakyat Indonesia (Persero) Tbk
State / Province: Daerah Khusus Ibukota Jakarta
Locality: Jakarta Pusat
Country: ID

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:d5:bd:cb:19:50:72:1d:8a:d0:b9:ed:31:7c:37:91
Serial Number (int): 7755948676358956416606810069446440849
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 53:b3:d8:04:b5:1e:b2:9c:f3:c1:1a:a8:f8:7b:3f:b7:1c:bc:00:91
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 88:61:68:ba:f4:a6:0f:f9:44:e8:30:03:6a:35:95:1e:6f:4b:67:e5
Fingerprint (sha256): 1f:67:cb:f4:41:76:7b:38:a7:60:49:27:5a:1e:d3:aa:5f:fa:8d:b3:45:17:78:08:c2:91:a9:0b:ce:85:b4:e2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate sandbox.partner.api.bri.co.id

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sandbox.partner.api.bri.co.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sandbox.partner.api.bri.co.id

Other certificates including the domain name bri.co.id

(limited to 100 certificates)
ibank.bri.co.id
3dsecure2.bri.co.id
brisim.bri.co.id
brimo.bri.co.id
junio-smart.bri.co.id
brimola.bri.co.id
mobilecc.bri.co.id
api.briconnect.bri.co.id
webmail.bri.co.id
content.makna.bri.co.id
commercialcard.bri.co.id
alert.bri.co.id
brilinkmobile.bri.co.id
infolelang.bri.co.id
*.bri.co.id
cabincrew.bri.co.id
britouch.bri.co.id
brismartapi.bri.co.id
briefx.bri.co.id
ib.bri.co.id
prowlth.bri.co.id
webmail1.bri.co.id
apimybri.bri.co.id
br1-ws-is2.corp.bri.co.id
brion.bri.co.id
mobilecc.bri.co.id
*.bigdata.bri.co.id
api.panen.bri.co.id
jadimerchant.bri.co.id
brinvoice.bri.co.id
pos.makna.bri.co.id
ibank.bri.co.id
webmail.bri.co.id
api.bristars.bri.co.id
digital.bri.co.id
ib.bri.co.id
sbn.bri.co.id
brilink.bri.co.id
app.ceria.bri.co.id
ib.bri.co.id
webmail.bri.co.id
eform.bri.co.id
3dsecure2.bri.co.id
agen.bri.co.id
fois.bri.co.id
apidocs.bri.co.id
api.bri.co.id
mobile.bri.co.id
api-staging.brispot.bri.co.id
ibank-tbn.bri.co.id
agen.bri.co.id
apps.bri.co.id
app.ceria.bri.co.id
developers.bri.co.id
bri.co.id
api.bristars.bri.co.id
prioritas.bri.co.id
cdn.wirausahabrilian.bri.co.id
ib.bri.co.id
tmsverifone.bri.co.id
s3.brimo.bri.co.id
br1-ws-is1.corp.bri.co.id
apilpdp.bri.co.id
login.work.bri.co.id
ambilin.bri.co.id
wirausahabrilian.bri.co.id
br1-ws-is2.corp.bri.co.id
apimybri.bri.co.id
mis.bri.co.id
rbaweb.bri.co.id
apps.bri.co.id
portalbgrepo.bri.co.id
sandbox.partner.api.bri.co.id
brieazycash-api.bri.co.id
3dsecure.bri.co.id
webmail1.bri.co.id
incapsula.com
openbsa.bri.co.id
myqrservice.bri.co.id
iumk.bri.co.id
biz.bri.co.id
briefx.bri.co.id
biz.bri.co.id
brieazycash.bri.co.id
brisolutions.bri.co.id
ceria-payment-sandbox.bri.co.id
*.digiporto.bri.co.id
cdn.wirausahabrilian.bri.co.id
*.bri.co.id
eform.bri.co.id
mobilemms.bri.co.id
brv.bri.co.id
mybri.bri.co.id
pasarbrilink.bri.co.id
merchant.ceria.bri.co.id
bri.co.id
brilinkers-admin.bri.co.id
sandbox.partner.api.bri.co.id
merchant.ceria.bri.co.id
qlola.bri.co.id

Certificate

The complete raw certificate details for sandbox.partner.api.bri.co.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG+TCCBeGgAwIBAgIQBdW9yxlQch2K0LntMXw3kTANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjIxMDEwMDAwMDAwWhcN
MjMxMTAxMjM1OTU5WjCBpzELMAkGA1UEBhMCSUQxJjAkBgNVBAgTHURhZXJhaCBL
aHVzdXMgSWJ1a290YSBKYWthcnRhMRYwFAYDVQQHEw1KYWthcnRhIFB1c2F0MTAw
LgYDVQQKEydQVC4gQmFuayBSYWt5YXQgSW5kb25lc2lhIChQZXJzZXJvKSBUYmsx
JjAkBgNVBAMTHXNhbmRib3gucGFydG5lci5hcGkuYnJpLmNvLmlkMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn12HgtLkyVL33bad2J9s4Or7tsfb30W+
eSYlXRPDVaHWRP5KbUpwFpmLfehi5H3ksH+AKdm0nLfmIt6V0vZopoSJ2TMxq4gE
kBm511NlXLfVoW0OjOb2xDIpYxoWdTikv5UjRy6rnqN4oj1gu3FUa7wxB9FZaNrw
lI05DdG6zdvL0sc/X6eUuONymedfBG9bvHhQwNDAGrei0afM1xDwA0w4HKb0210Y
2bDZ+c8UHV0pySRgWXs9WlbCbrXZ9IBH9khI4y0s+ndF6iYXTqjXWuIe44xLZT7N
xnUhExpHwEX/8YWO1KMuJWVFakcN0YIgNUgbnZMWiEdsTrsCEkdG/QIDAQABo4ID
eDCCA3QwHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYE
FFOz2AS1HrKc88EaqPh7P7ccvACRMCgGA1UdEQQhMB+CHXNhbmRib3gucGFydG5l
ci5hcGkuYnJpLmNvLmlkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwgY0GA1UdHwSBhTCBgjA/oD2gO4Y5aHR0cDovL2NybDMu
ZGlnaWNlcnQuY29tL0RpZ2ljZXJ0U0hBMlNlY3VyZVNlcnZlckNBLTEuY3JsMD+g
PaA7hjlodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaWNlcnRTSEEyU2VjdXJl
U2VydmVyQ0EtMS5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcC
ARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMH4GCCsGAQUFBwEBBHIwcDAk
BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEgGCCsGAQUFBzAC
hjxodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJl
U2VydmVyQ0EtMi5jcnQwCQYDVR0TBAIwADCCAXwGCisGAQQB1nkCBAIEggFsBIIB
aAFmAHUA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGDwf5f4gAA
BAMARjBEAiADvk4lRXZYAmPDAIZ8b92dvQZzTgmhUzxPxgktjavpjwIgH8J8JdCq
xAasLMaDSp4OuQr8ebtnXtTD1Ytphpq///cAdQCzc3cH4YRQ+GOG1gWp3BEJSnkt
sWcMC4fc8AMOeTalmgAAAYPB/mAhAAAEAwBGMEQCIDKPeCqObsYAGjVI0dt/jqu/
1mH9DfoBqat95V8GdXZwAiAYiQMMANqHmrWk+WUsSGTGKqAOZZLBX7mi2TSZudFw
RgB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABg8H+X9sAAAQD
AEcwRQIhAMLrR2HHQ7iw46Xl1MmIWvyU/kVan+6tWXRk/WqgzfK4AiAWL4Ao85vv
7o/EJ5EcRZvF0fqsVTVowL9+iZPZxOpMDDANBgkqhkiG9w0BAQsFAAOCAQEArO9R
abDcnzx3uFlFq4sPi96ZH23PMNbfo2kKECk4xO1dY0xeMqPNdldXBf9TWSr3Rul/
5F5vdnKZg78gAjNMBGIcF3o0OWyPZFF5SRJosXFBhieYQgwsjjHVDAuAa5g9Tu8q
AecR8FKVCbdSLf/QBAZEJdDX3V0yLAMjCix7tHvVULyKNVGw2fJ6Ju40PEhOe3mt
CiHzu+HMx8BNrZy71Qalwq4t+GO70v61V0azmBWwXvCiqYkb7xGKOA/5UTESamMG
UX56wg73HiJ/iTJo1EJLmfN1Nb5oHAOQXhdCu5fqv5uMDDxyOnfCYUUavIriWANR
Nw8Rp2VZ+4dYOGB/2A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn12HgtLkyVL33bad2J9s
4Or7tsfb30W+eSYlXRPDVaHWRP5KbUpwFpmLfehi5H3ksH+AKdm0nLfmIt6V0vZo
poSJ2TMxq4gEkBm511NlXLfVoW0OjOb2xDIpYxoWdTikv5UjRy6rnqN4oj1gu3FU
a7wxB9FZaNrwlI05DdG6zdvL0sc/X6eUuONymedfBG9bvHhQwNDAGrei0afM1xDw
A0w4HKb0210Y2bDZ+c8UHV0pySRgWXs9WlbCbrXZ9IBH9khI4y0s+ndF6iYXTqjX
WuIe44xLZT7NxnUhExpHwEX/8YWO1KMuJWVFakcN0YIgNUgbnZMWiEdsTrsCEkdG
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7755948676358956416606810069446440849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Daerah Khusus Ibukota Jakarta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jakarta Pusat'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PT. Bank Rakyat Indonesia (Persero) Tbk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sandbox.partner.api.bri.co.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20118011526093558830853700681101937658853044324614918482867525798636044703642689542268764147340098970122254641600749821064654500081893428099330391197700607084265690857383425315158469090889003937769013630739633528229310768471959299098112342782375834476828809097516493703938548412767593817344407410036226605148950556055248140047731034207496327068216451884954446713338690948199709581633971981902704224609043920686855615448667532266116358454696326758824066476794990095287699064131243974253820750137637239922172680472848030980216412772053338973852139448537012942258251830756469794644910803762495734186669074157838073808637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53b3d804b51eb29cf3c11aa8f87b3fb71cbc0091
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.partner.api.bri.co.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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