download.dws.com

- DWS Group GmbH & Co. KGaA -

Issued by DigiCert EV RSA CA G2

About this certificate

This digital certificate with serial number 04:78:7d:4c:8d:48:7b:aa:53:3e:be:7f:f4:a8:53:a3 was issued on by DigiCert Inc.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DWS Group GmbH & Co. KGaA

Company registration number: HRB 111128
Organization: DWS Group GmbH & Co. KGaA
Address: Mainzer Landstr. 11 17
State / Province: Hessen
Locality: Frankfurt am Main
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:78:7d:4c:8d:48:7b:aa:53:3e:be:7f:f4:a8:53:a3
Serial Number (int): 5942528972429663386775773014615675811
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 5f:f1:2a:ba:2f:89:08:85:cf:7c:13:1b:dd:81:58:8c:b5:a9:8b:00
AuthorityKeyId: 6a:4e:50:bf:98:68:9d:5b:7b:20:75:d4:59:01:79:48:66:92:32:06

Fingerprint (sha1): 49:a8:17:e3:69:fa:14:f9:6f:f9:cf:1a:08:dc:66:85:00:30:0d:c5
Fingerprint (sha256): 20:d6:1b:9b:5a:52:67:7c:d0:3d:f2:ee:22:79:31:9c:a9:88:16:a4:4d:94:1d:b0:51:c6:ea:a5:19:2c:4a:d3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertEVRSACAG2.crl

Check the revocation status for certificate download.dws.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for download.dws.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

download.dws.com
download.deutscheam.com
at.download.dws.com
be.download.dws.com
ch.download.dws.com
de.download.dws.com
es.download.dws.com
fr.download.dws.com
in.download.dws.com
it.download.dws.com
jp.download.dws.com
kr.download.dws.com
lu.download.dws.com
nl.download.dws.com
pt.download.dws.com
se.download.dws.com
sg.download.dws.com
tw.download.dws.com
uk.download.dws.com
xq.download.dws.com
si.download.dws.com

Other certificates including the domain name dws.com

(limited to 100 certificates)
iqcodex.dws.com
geuw3uwarcwap01.corp.dws.com
clientconnect.deutscheam.com
opt.information.dws.com
mediamanager.deutscheam.com
download.dws.com
go.dws.com
download.dws.com
view.insight.dws.com
secure.dws.com
uat.dms.dws.com
geuwe3pwexch02.corp.dws.com
institutional.deutscheawm.com
geuwe3pwexch02.corp.dws.com
secondary-prod-mm.prod-getty.cloud
go.dws.com
dws.com
api.digital.dws.com
track.dws.com
betterstories.dws.com
mediamanager.dws.com
institutional.dws.com
lighthouse.dws.de
clientconnect.deutscheam.com
www.dws.com
dws.com
iqcodex.dws.com
lighthouse.us.dws.com
institutional.lighthouse.dws.de
download.dws.com
www.dws.com
download.dws.com
akamai-san26.exacttarget.com
fundsus.deutscheawm.com
ml.fundsus.deutscheawm.com
mediamanager.dws.com
lighthouse.dws.de
click.insights.dws.com
www.dws.com
pages.insights.dws.com
www.dws.com
prod-mm.prod-getty.cloud
lighthouse.us.dws.com
dws.com
go.dws.com
secondary-prod-mm.prod-getty.cloud
go.dws.com
cioview.dws.com
mediamanager.dws.com
mailer.dws.com
uat.iqcodex.dws.com
go.dws.com
akamai-san137.exacttarget.com
download.dws.com
ml.fundsus.deutscheawm.com
institutional.deutscheawm.com
click.insight.dws.com
click.insight.dws.com
info.dws.com
onboarding.www.deutscheinvest.lu
uat2.api.digital.dws.com
info.dws.com
www.dws.com
akamai-san26.exacttarget.com
admin.dws.com
prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
mailer.dws.com
secure.dws.com
iqcodex.dws.com
ml.fundsus.deutscheawm.com
secure.dws.com
lighthouse.us.dws.com
secure.dws.com
www.dws.com
view.insights.dws.com
institutional.lighthouse.dws.de
idp.dws.com
secure.dws.com
dws.com
info.dws.com
mediamanager.deutscheam.com
live.cioview.dws.com
akamai-san137.exacttarget.com
www.dws.com
view.insights.dws.com
api.digital.dws.com
api.digital.dws.com
institutional.deutscheawm.com
ml.fundsus.deutscheawm.com
dws.com
outlook.dws.com
dms.dws.com
view.insights.dws.com
view.insight.dws.com
vhdggqs4ci.sap.dws.com
lighthouse.dws.de
akamai-san26.exacttarget.com
mit.dws.de
dws.at

Certificate

The complete raw certificate details for download.dws.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5942528972429663386775773014615675811
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 111128'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mainzer Landstr. 11 17'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DWS Group GmbH & Co. KGaA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'download.dws.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 850720319262646409480710058072812777384809668859468609225616962327282133746649746179711703264201668341000265637640761355666656007610156148190467169754786740908735270876460944030256412896520469630522513554111857372991241475870794826047938781479701224486352032242817974551765585580348617611607781405693710917739952763418017666307994974845315743014520163714364948737716436234460326502218928673559259092354973929138918393120685821454827427911669598445403979674021628592271129221692651542258983045911101811430377256132236723326759360480152247096251123491546535816267116033868188162467758985250556817939751094315369906874434332525740867303966603744214169228671702032171502087877962742801713337673705790180503274722134873184888141064510848190583841393327044559482829298371979619924559336705697213228014784314059139755381962687787419681441742101027754074073894515027305703575900350586355478185814537190018799212576061978592326231479427797130821805373951496174889550997576282127931339575157512922422077761696211774182396096167448359103646124286300419671185488234806187314986446541694215704037553882356251520533441150343380204644685946837100418184697808185869521315057294348147286157757105186086443222510495160369397987745424374860946684951551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6a4e50bf98689d5b7b2075d45901794866923206
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ff12aba2f890885cf7c131bdd81588cb5a98b00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (446 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.deutscheam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lu.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xq.download.dws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si.download.dws.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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