www.vermoegenszentrum.ch

- VZ VermögensZentrum AG -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 03:02:49:23:7d:53:20:3c:8b:37:de:07:5c:f0:a0:41 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

VZ VermögensZentrum AG

Company registration number: CHE-106.092.018
Organization: VZ VermögensZentrum AG
Organization unit: Web Services
Address: Beethovenstrasse 24
Postal code: 8002
State / Province: Zurich
Locality: Zurich
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:49:23:7d:53:20:3c:8b:37:de:07:5c:f0:a0:41
Serial Number (int): 3999552008744691148421220978396274753
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: b6:06:55:25:4d:1d:ac:0a:20:4e:21:5d:1b:b0:4b:b8:cc:c3:6b:c9
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 80:44:58:f8:b6:a3:5d:ef:8a:3a:7b:92:12:a3:ac:13:e1:81:0d:8d
Fingerprint (sha256): 1f:6f:5d:c0:0a:3b:37:97:21:cc:2d:6d:fb:81:5f:4f:8b:1e:68:d6:c0:69:1e:21:ac:c0:98:af:31:61:8f:0b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g1.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g1.crl

Check the revocation status for certificate www.vermoegenszentrum.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vermoegenszentrum.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vermoegenszentrum.ch
vermoegenszentrum.ch

Other certificates including the domain name vermoegenszentrum.ch

(limited to 100 certificates)
tennis.yumpu100.com
digital.industrielle-automation.net
epaper.krombacher.de
catalogues.meister.com
kiosk.greater.sydney
webkiosk.wonendoejezo.com
mediathek.stiftung-liebenau.de
digital.derbetriebsleiter.de
www.vermoegenszentrum.ch
kurse.vermoegenszentrum.ch
digital.derkonstrukteur.de
online-katalog.baude.com
webkiosk.wonendoejezo.com
e-paper.moinmoin.de
journal.flyskywork.com
www.vermoegenszentrum.ch
digital.foerdern-und-heben.de
moebel-boeck.mediaflip.de
publikationen.kreis-goerlitz.de
digital.derbetriebsleiter.de
epaper.krombacher.de
www.vermoegenszentrum.ch
prospekte.intersport.de
digital.derbetriebsleiter.de
catalogues.meister.com
digital.derbetriebsleiter.de
epaper.krombacher.de
finanzportal-secure.vermoegenszentrum.ch
online-katalog.baude.com
digital.derbetriebsleiter.de
epaper.glasmarte.at
www.vermoegenszentrum.ch
kiosk.storyboard.de
tennis.yumpu100.com
kataloge.quester.at
bibliothek.bregenzerfestspiele.com
kiosk.greater.sydney
finanzportal-secure.vermoegenszentrum.ch
epaper.krombacher.de
webkiosk.mvz-atrium.de
kiosk.greater.sydney
berliner-kurier.kiosk.plus
pub.vermoegenszentrum.ch
epapers.gleitz-online.de
epaper.swecon-baumaschinen.de
online-katalog.baude.com
digital.foerdern-und-heben.de
digital.derkonstrukteur.de
digital.derkonstrukteur.de
bibliothek.bregenzerfestspiele.com
katalog.ud-shop.de
webkiosk.mvz-atrium.de
digital.foerdern-und-heben.de
kiosk.greater.sydney
pub.vermoegenszentrum.ch
conference.vermoegenszentrum.ch
ssl.yumpu.com
berliner-kurier.kiosk.plus
ssl.yumpu.com
kataloge.quester.at
www.vermoegenszentrum.ch
digital.industrielle-automation.net
ssl.yumpu.com
digital.foerdern-und-heben.de
kataloge.fuerholz.de
kurier.leimbacherdruck.ch
magazin.rollstuhlsport.de
kataloge.quester.at
kiosk.greater.sydney
ssl.yumpu.com
webkiosk.mvz-atrium.de
tennis.yumpu100.com
tennis.yumpu100.com
digital.derkonstrukteur.de
berliner-zeitung.kiosk.plus
3a.vermoegenszentrum.ch
berliner-zeitung.kiosk.plus
ca.lyreco.de
webkiosk.wonendoejezo.com
kataloge.fuerholz.de
publikationen.kreis-goerlitz.de
kiosk.greater.sydney
tennis.yumpu100.com
beratungstools.vermoegenszentrum.ch
bibliothek.bregenzerfestspiele.com
ssl.yumpu.com
kurier.leimbacherdruck.ch
digital.derbetriebsleiter.de
webkiosk.vedes.de
kiosk.greater.sydney
pop3.kraemer-praezisionswerkzeuge-kataloge.de
kurse.vermoegenszentrum.ch
digital.derbetriebsleiter.de
tueren.holzschwab.de
epaper.krombacher.de
catalogues.meister.com
tennis.yumpu100.com
webkiosk.vedes.de
digital.derbetriebsleiter.de
kataloge.fuerholz.de

Certificate

The complete raw certificate details for www.vermoegenszentrum.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNVG098gKzaSJ+6AwkPV
eJE106xj5UR/k2QhfW4TipDedpJxeRLoqgL+woEnL3/XIDaJphwbbCmi0Z19ghZU
6bI+p9AbpwLNKyPHH1hiLHqwaZP6/+/t6E75TsPjRarEw5PKsTNETbsVCaUkFcc8
p9R287/P+O5wJZmrqvYEkpTcy2vmDEORwiTK6tbEcrZ23tLnOvR6hIuFRcoBOXDe
zejoQw6KDfARK4/GT/f/gEjVs0lfvrCsOWJRQ2DZmvVtAgoWC4WzSGJ7M9rG2f7A
yIlgLT7qxVi9UlldDUQNLN3SKaEvSJY1WBKeMKmOugo0CTcMaHgrRW2xNksoG19M
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3999552008744691148421220978396274753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-106.092.018'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beethovenstrasse 24'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '8002'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VZ VermögensZentrum AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Web Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vermoegenszentrum.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20808252660373390331442841148839509841870842997654604127406468785891527206547978469390976775006617073212172095877960446820795136436497981118164360178846536172392635168318818323995768373662249559424156103839889577483060883907414375929997421098338187390649581231842116826911470719546629504044221537884963701457383456319636812796221827329101912782565154991335846423153060563489587181257293952789790796393928095145601165244373362746921246417721265408434331772840270680280342687761112970947820937782955307872013801865399832779889090768335738217687786087407029845891498102719485512718324497118835850866308058683524698295549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b60655254d1dac0a204e215d1bb04bb8ccc36bc9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vermoegenszentrum.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vermoegenszentrum.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001539f4c47e4000004030047304502200d499445322e721438f949879741d21b2af9d5003191978bdcb95a94aeef9d45022100f0bc08994f02df058deacb0d49cf0fb8bc4fb87bf41be3f01207ed7b5de9d0c000750068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001539f4c47b20000040300463044022037fa02c86d178dc5f06f1c6c4d365f6e0f50d9ac386077c9e5e53362acdcb9fa02206c536cc73f847ec147f53b6f75011174f7fde27350ee50ad5b6f8bef841e70990075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd000001539f4c48fa00000403004630440220094ee73179624f711f6e9c11638a889310be80ac1687f76f0a09a0ea0916413f022027a7268b635200973c88534f8a7e14173519457224962bd5d0ecd75c74312faa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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