pigeon.dev.braintree-api.com

- PayPal, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 06:84:f6:f3:5a:c6:e0:17:8b:11:0b:09:2a:fd:f7:d3 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PayPal, Inc.

Organization: PayPal, Inc.
Organization unit: Braintree Development
State / Province: California
Locality: San Jose
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:84:f6:f3:5a:c6:e0:17:8b:11:0b:09:2a:fd:f7:d3
Serial Number (int): 8665759913336158202140026169685047251
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 7f:63:b8:58:d8:21:19:63:14:e6:83:0e:3c:33:bf:55:fe:d5:88:58
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 3e:e6:84:b4:01:dd:d0:ac:05:91:56:d8:fe:5a:0b:8f:5b:30:58:03
Fingerprint (sha256): 1f:cc:19:23:b4:8c:6a:50:74:a0:fe:82:14:39:43:e2:1b:51:43:08:3e:60:d4:93:14:25:7a:9e:68:8a:e3:ae

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate pigeon.dev.braintree-api.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pigeon.dev.braintree-api.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pigeon.dev.braintree-api.com

Other certificates including the domain name braintree-api.com

(limited to 100 certificates)
aegis-proxy.sandbox.braintree-api.com
briskqa.braintree.tools
reader.sandbox.braintree-api.com
payments.sandbox.braintree-api.com
apply.qa.braintreepayments.com
arbiter-kubernetes-qa.dev.braintree-api.com
localpay-checkout.sandbox.braintree-api.com
k8s-oidc.sandbox.braintree-api.com
dimension-finder-stag.sandbox.braintree-api.com
origin-analytics-qa.dev.braintree-api.com
sentinel-prod.production.braintree-api.com
disputin.sandbox.braintree.tools
airflow.data-staging.braintree-api.com
transactions-prod-us.production.braintree-api.com
reader.braintree-api.com
gateway-sand.sandbox.braintree-api.com
functions.sandbox.braintree-api.com
graphql-docs-sand-us-east-1.sandbox.braintree-api.com
brisk.braintree.tools
provisioner.qa.braintreepayments.com
arbiter-kubernetes-sand.sandbox.braintree-api.com
k8s-oidc.data-production.braintree-api.com
localpay-checkout-test.sandbox.braintree-api.com
payments.braintree-api.com
aegis-proxy-sand-us-east-2.sandbox.braintree-api.com
origin-analytics-sand.sandbox.braintree-api.com
*.dev.braintree-api.com
brisk.sandbox.braintree.tools
sentinel-sand.sandbox.braintree-api.com
apply.qa.braintreepayments.com
batch-validation-prod-us-east-2.production.braintree-api.com
localpay-checkout.sandbox.braintree-api.com
k8s-oidc.data-production.braintree-api.com
panel.gateway.qa.braintreepayments.com
docs-qa-us-east-1.dev.braintree-api.com
arbiter-kubernetes-prod.production.braintree-api.com
*.bcoumes.dev.braintree-api.com
data-airflow.sand.braintree.tools
millennium-simulator.dev.braintree-api.com
k8s-oidc.data-production.braintree-api.com
mission-control.braintree-api.com
tugboat.dev.braintree-api.com
taskworker-flower.production.braintree-api.com
reader-service.sandbox.braintree-api.com
apply.braintreegateway.com
taskworker-auditor.production.braintree-api.com
data-airflow-webserver-datastag.data-staging.braintree-api.com
docs-prod-us-east-1.production.braintree-api.com
taskworker-flower.production.braintree-api.com
monitoring-tool-serv-sand-us-west-2.sandbox.braintree-api.com
bazaar.braintree.tools
event-sink-sand-us-west-2.sandbox.braintree-api.com
bazaar.braintree.tools
docs.sandbox.braintree-api.com
data-airflow.braintree.tools
aegis-proxy.production.braintree-api.com
billpay-validator-sand.sandbox.braintree-api.com
k8s-oidc.data-staging.braintree-api.com
provisioner.svc.braintreepayments.com
marketing-qa-us-east-1.dev.braintree-api.com
payments.sandbox.braintree-api.com
blue-front-door.braintree-api.com
infra-sso-token-converter.braintree-api.com
alert-notify-sand-us-west-2.sandbox.braintree-api.com
k8s-oidc.production.braintree-api.com
sentinel-dev.dev.braintree-api.com
origin-falcon.dev.braintree-api.com
tugboat.dev.braintree-api.com
reader.braintree-api.com
aegis-proxy-prod-us-east-2.production.braintree-api.com
pigeon.production.braintree-api.com
k8s-dashboard-qa-us-west-2.braintree.tools
pigeon.dev.braintree-api.com
pricing-prod.production.braintree-api.com
k8s-dashboard.sandbox.braintree-api.com
origin-analytics-sand.sandbox.braintree-api.com
infra-sso-token-converter.braintree-api.com
millennium-simulator.sandbox.braintree-api.com
functions.sandbox.braintree-api.com
airflow.dev.braintree-api.com
ppwr-sand.sandbox.braintree-api.com
signups.sand.braintreepayments.com
payments.sandbox.braintree-api.com
consul.braintree-api.com
arbiter-kubernetes-prod.production.braintree-api.com
localpay-checkout-test.sandbox.braintree-api.com
pigeon.sandbox.braintree-api.com
apply.braintreegateway.com
origin-analytics-qa.dev.braintree-api.com
twistlock-sand-us-east-1.sandbox.braintree-api.com
gateway-qa.dev.braintree-api.com
k8s-oidc.data-staging.braintree-api.com
processor-webhook-receiver.braintree-api.com
k8s-dashboard.data-production.braintree-api.com
gateway.braintree-api.com
sentintel-sand-us-west-2.sandbox.braintree-api.com
arbiter-kubernetes-prod.production.braintree-api.com
origin-falcon-prod.production.braintree-api.com
monitor-data-model-sand-us-west-2.sandbox.braintree-api.com
gateway.braintree-api.com

Certificate

The complete raw certificate details for pigeon.dev.braintree-api.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5E7OZ0pyvSGeKU5wGm4
oJkWtSemCSPl43I7Bab+KInDA+g9D3AT0z5XmsWRdRrwcLFk1cwEGBpiQDDI5fCN
NuYlK6x/MmUBUmtvx40rua0cRk8REtAfA2NPpMxuvoMqNn53i/ul9bGFlf7XSgy6
6pF2mjdPnOOENuiYM7McL1K3ErW31zyJuZMdgBnRkC75VdWLqThjls0Upvcu0LAF
oLVGv477aXmLS6pZI6k7EJgYbX/6iVZeeN1OSLTzT9Th5SOZZY9atX8+sm+76m3X
qJyzGaESSq6GAzwJiNB5Y7r3Ii4D5BQclC6dlalkU242h79JVkHAhIRbdGympqYQ
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8665759913336158202140026169685047251
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PayPal, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Braintree Development'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pigeon.dev.braintree-api.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22163319615868355280625571505034320182435686814839598095408203642027778115769693105013229192727884438983800022536619856316092245798578017323866938152802023460007615609384404793485217846752728997232837056882513902789732055466181631780519656765161610271149444068439102242422377378289442689059148965953541380738773178150608508977604301084918930136072037866570683383045595297499639414572757964606161680512767330369688283226854208605167803264458127581342358705790190574279528734028035324147805255182207703577864602844997637200749652106738509717536506269129227790421769195080898408337516172126176627035215794259795040931879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f63b858d821196314e6830e3c33bf55fed58858
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pigeon.dev.braintree-api.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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