lync-emea01.asg.com

- ASG Technologies Group, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0d:da:80:cf:7b:1a:54:10:c1:3c:d8:90:9b:da:1f:0e was issued on by DigiCert Inc.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ASG Technologies Group, Inc.

Organization: ASG Technologies Group, Inc.
Organization unit: Data Center Services
State / Province: Florida
Locality: Naples
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:da:80:cf:7b:1a:54:10:c1:3c:d8:90:9b:da:1f:0e
Serial Number (int): 18414497247121891904493419399942381326
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 75:9c:e5:6b:dc:20:cd:e8:c9:64:46:ea:0f:50:6f:83:aa:03:b8:ce
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): b3:80:4c:e9:4d:37:48:3a:61:86:28:8a:98:13:82:0a:85:d3:0a:8c
Fingerprint (sha256): 21:e2:2a:fc:46:3d:af:47:cf:67:80:51:26:14:3e:60:d0:79:ef:cd:00:df:3a:76:f3:bc:00:da:be:4f:26:ab

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate lync-emea01.asg.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lync-emea01.asg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip.asg.com
ESBCNLYNCFE02V.asg.com
ESBCNLYNCFE03V.asg.com
lync-emea01-int.asg.com
lync-emea01.asg.com
esbcnlyncfe01v.asg.com
dialin.asg.com
meet.asg.com
admin.asg.com
LyncdiscoverInternal.asg.com
lync-emea01-ext.asg.com
Lyncdiscover.asg.com

Other certificates including the domain name asg.com

(limited to 100 certificates)
cloud.asg.com
sa57gl.wpc.edgecastcdn.net
io.gdi.lenovo.com
sa454gl.wpc.edgecastcdn.net
controlsystems.newcenturyresources.com
*.asg.com
mylanstatus.globalvisioninc.com
sl.asg.com
sa57gl.wpc.edgecastcdn.net
lync-emea02.asg.com
asgmail1.asg.com
tst.asg.com
status.republic.com
voltage-pp-0000.asg.com
ftp.asg.com
status.amanah.com
status.amanah.com
mylanstatus.globalvisioninc.com
sa454gl.wpc.edgecastcdn.net
*.asg.com
status.channelengine.com
sa454gl.wpc.edgecastcdn.net
lawson.asg.com
sa454gl.wpc.edgecastcdn.net
sa454gl.wpc.edgecastcdn.net
mylanstatus.globalvisioninc.com
USAPF-WLC-LAN-2-1.asg.com
sa454gl.wpc.edgecastcdn.net
status.wavity.info
www.viveportstatus.com
www.viveportstatus.com
mail.asg.com
lync-noram01.asg.com
sa454gl.wpc.edgecastcdn.net
mylanstatus.globalvisioninc.com
sa454gl.wpc.edgecastcdn.net
altastatus.us.veritas.com
mi.portal.sagrado.edu
partners.asg.com
status.republic.com
docs.asg.com
status.medpt.com
naples-vpn.asg.com
monitor.mss.brainwalk.net.br
partners.asg.com
status.greenewx.com
riverg.asg.com
asgmail2007.asg.com
ftp.asg.com
ae.asg.com
sa57gl.wpc.edgecastcdn.net
sa454gl.wpc.edgecastcdn.net
asgweb.asg.com
sa528gl.wpc.edgecastcdn.net
sa454gl.wpc.edgecastcdn.net
inhydsfbsbs01v.asg.com
ftp.asg.com
asgsupport.asg.com
sa57gl.wpc.edgecastcdn.net
sa57gl.wpc.edgecastcdn.net
lync-emea01.asg.com
sl.asg.com
sa57gl.wpc.edgecastcdn.net
status.admiresty.co
sapbi.asg.com
citrixweb.asg.com
sa454gl.wpc.edgecastcdn.net
bin-eu.asg.com
sni19635gl.wpc.edgecastcdn.net
mylanstatus.globalvisioninc.com
uern.d5n.is
sa454gl.wpc.edgecastcdn.net
sa57gl.wpc.edgecastcdn.net
sa57gl.wpc.edgecastcdn.net
mylanstatus.globalvisioninc.com
sa454gl.wpc.edgecastcdn.net
www.viveportstatus.com
mylanstatus.globalvisioninc.com
sa454gl.wpc.edgecastcdn.net
sa57gl.wpc.edgecastcdn.net
naples-vpn.asg.com
source-team.asg.com
sa454gl.wpc.edgecastcdn.net
asgu.asg.com
status.alogna.co.ao
sa454gl.wpc.edgecastcdn.net
sa57gl.wpc.edgecastcdn.net
cloudfactorydevrdg.asg.com
*.asg.com
www.viveportstatus.com
www.asg.com
sa454gl.wpc.edgecastcdn.net
lync-noram01-ext.asg.com
asgwebtest.asg.com
asgwebtest.asg.com
www.viveportstatus.com
status.channelengine.com
status.healthera.co.uk
status.conpds.com
status.conpds.com

Certificate

The complete raw certificate details for lync-emea01.asg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGfzCCBWegAwIBAgIQDdqAz3saVBDBPNiQm9ofDjANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0xODA2MDEwMDAwMDBaFw0yMDA2MDUxMjAwMDBa
MIGUMQswCQYDVQQGEwJVUzEQMA4GA1UECBMHRmxvcmlkYTEPMA0GA1UEBxMGTmFw
bGVzMSUwIwYDVQQKExxBU0cgVGVjaG5vbG9naWVzIEdyb3VwLCBJbmMuMR0wGwYD
VQQLExREYXRhIENlbnRlciBTZXJ2aWNlczEcMBoGA1UEAxMTbHluYy1lbWVhMDEu
YXNnLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOBvoER1iMwK
aDAuPZp2ABOfE7oBpcBDm+y32U0ALlMVxTMUt8r8nfzIaE2CyRWjxWvPtYhd/3W3
WQ9lDrDi5HC0724tciU5aBPNNRUJUIv/opDJMbkNS8YnEfewWJBDYTMBZeL1ARdy
cX3ek49SVv7KtwaFD9kEOZJ8U3jzvWYvSNgps54sEj8tROrNFOIDv0maYKSufmIg
OVjpaFeYNHG6QkO/FRtmPoGRNC/Ad/FgML9ZhiVk70K62E7IBW40UXnud0RVw/Sg
rw3m3iGFw1iq+bzGn8iJBDrMhe4ZKD1ag2DnnkktVMBtihCtHKSXB3LIaCimXduo
72favb0Vwa0CAwEAAaOCAu4wggLqMB8GA1UdIwQYMBaAFFFo/5CvAgd1PMzZZWRi
ohK4WXI7MB0GA1UdDgQWBBR1nOVr3CDN6MlkRuoPUG+DqgO4zjCCAQkGA1UdEQSC
AQAwgf2CC3NpcC5hc2cuY29tghZFU0JDTkxZTkNGRTAyVi5hc2cuY29tghZFU0JD
TkxZTkNGRTAzVi5hc2cuY29tghdseW5jLWVtZWEwMS1pbnQuYXNnLmNvbYITbHlu
Yy1lbWVhMDEuYXNnLmNvbYIWZXNiY25seW5jZmUwMXYuYXNnLmNvbYIOZGlhbGlu
LmFzZy5jb22CDG1lZXQuYXNnLmNvbYINYWRtaW4uYXNnLmNvbYIcTHluY2Rpc2Nv
dmVySW50ZXJuYWwuYXNnLmNvbYIXbHluYy1lbWVhMDEtZXh0LmFzZy5jb22CFEx5
bmNkaXNjb3Zlci5hc2cuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMu
ZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDA0oDKgMIYuaHR0cDov
L2NybDQuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVyLWc2LmNybDBMBgNVHSAE
RTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdp
Y2VydC5jb20vQ1BTMAgGBmeBDAECAjCBgwYIKwYBBQUHAQEEdzB1MCQGCCsGAQUF
BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wTQYIKwYBBQUHMAKGQWh0dHA6
Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJIaWdoQXNzdXJhbmNl
U2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAw
DQYJKoZIhvcNAQELBQADggEBALGH45E/yjBuxYvSXBnRWpnybZ66vipFTnaKEE71
NDVUQTitYrTMRDTlQK19L+oQcIT/O+qsS/PK+Uq16AAR0NztljrFG54PSWHiTTR7
PaaOkwbCzZTQahWLEXjNOnX821pasBmfWtei8AxVo20fGlffaxxCeHOX86dqUjnG
J7/lBLi+kn7Axy1ww+Meue0QksOl8xkmbe0Ogfik92ZXIrStl3lAh3Uyhy674v8A
/KrdecYguF0EmyhzXSd3pClQZeYb1by8F+iOaskNBZMLvr7yJ2tVjeVwl+H8501m
7Ob1lWBOV9EGXxx8xWQL97FhdWo3gcFaKpXUZR6fOmckT98=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G+gRHWIzApoMC49mnYA
E58TugGlwEOb7LfZTQAuUxXFMxS3yvyd/MhoTYLJFaPFa8+1iF3/dbdZD2UOsOLk
cLTvbi1yJTloE801FQlQi/+ikMkxuQ1LxicR97BYkENhMwFl4vUBF3Jxfd6Tj1JW
/sq3BoUP2QQ5knxTePO9Zi9I2CmzniwSPy1E6s0U4gO/SZpgpK5+YiA5WOloV5g0
cbpCQ78VG2Y+gZE0L8B38WAwv1mGJWTvQrrYTsgFbjRRee53RFXD9KCvDebeIYXD
WKr5vMafyIkEOsyF7hkoPVqDYOeeSS1UwG2KEK0cpJcHcshoKKZd26jvZ9q9vRXB
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18414497247121891904493419399942381326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Naples'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ASG Technologies Group, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Data Center Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lync-emea01.asg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28332425166540803125627130382826342866126729228914178082616260071290078878799802925645220155365765294172648854143848474094975161015362832918549263495691310178111003770821251999016727054079681910066406857785724794701184870872752760367047279768652994897505456934237510452861803667855499689524999054655271665908510504851081263512700394157799816558122895760883761245149710905019714018814395515038696214367213299978948127506995978125686841162368734784596442190807004956785173315770088536772966329566866449526129646445125047339351022669113011812403163846027572558276376544646926038467572526173843958142667420424648032371117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							759ce56bdc20cde8c96446ea0f506f83aa03b8ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (256 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ESBCNLYNCFE02V.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ESBCNLYNCFE03V.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync-emea01-int.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync-emea01.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbcnlyncfe01v.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync-emea01-ext.asg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.asg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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