printit.intermountainhealthcare.org

- Intermountain Health Care Inc -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:de:3d:58:57:5b:bf:ea:f2:52:78:45:24:e4:9f:e5 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Intermountain Health Care Inc

Organization: Intermountain Health Care Inc
Organization unit: Intermountain Health Care Inc
State / Province: Utah
Locality: Salt Lake City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:de:3d:58:57:5b:bf:ea:f2:52:78:45:24:e4:9f:e5
Serial Number (int): 14446214086544128879768854329947365349
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 35:cf:87:7c:61:a6:49:de:21:ec:4c:e7:1c:90:ee:df:da:5c:3e:8d
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): f2:ce:d1:67:38:50:1e:1e:58:4c:9d:da:3c:96:31:d7:a8:85:91:52
Fingerprint (sha256): 22:fa:6a:46:80:4e:b7:87:de:3d:a2:e4:06:31:b9:e7:98:09:64:00:17:e1:65:d4:db:0c:03:22:fd:df:ab:2c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate printit.intermountainhealthcare.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for printit.intermountainhealthcare.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

printit.intermountainhealthcare.org

Other certificates including the domain name intermountainhealthcare.org

(limited to 100 certificates)
fsso.intermountainhealthcare.org
intermountainhealthcare.org
dfd-api-sbx.intermountainhealthcare.org
ebu.intermountainhealthcare.org
tst.intermountainhealthcare.org
check24status.mambu.com
dfd-api.intermountainhealthcare.org
smetrics.intermountainhealthcare.org
apistatus.postnord.no
intermountainhealthcare.org
apistatus.postnord.no
apistatus.postnord.no
incapsula.com
myhealth.intermountainhealthcare.org
check24status.mambu.com
ac2ada-status.elastic.co
intermountainhealthcare.org
sspgateway.intermountainhealthcare.org
securemail.intermountainhealthcare.org
imperva.com
check24status.mambu.com
check24status.mambu.com
secureaccess.intermountainhealthcare.org
mhpstatus.intermountainhealthcare.org
fssoconsumer.intermountainhealthcare.org
mhpstatus.intermountainhealthcare.org
fssoconsumertst.intermountainhealthcare.org
webpay.intermountainhealthcare.org
progeny.intermountainhealthcare.org
tst.intermountainhealthcare.org
myhealth-next.intermountainhealthcare.org
apistatus.postnord.no
check24status.mambu.com
ac2ada-status.elastic.co
scuat.intermountainhealthcare.org
imperva.com
imperva.com
myhealthplusforms.intermountainhealthcare.org
ebu.intermountainhealthcare.org
myhealthplusforms.intermountainhealthcare.org
fsso-tst.intermountainhealthcare.org
myhealth.intermountainhealthcare.org
secureaccess.intermountainhealthcare.org
secureaccess.intermountainhealthcare.org
www-visitpay.intermountainhealthcare.org
imperva.com
*.intermountainhealthcare.org
smetrics.intermountainhealthcare.org
webpay.intermountainhealthcare.org
apistatus.postnord.no
myhealthplusforms.intermountainhealthcare.org
check24status.mambu.com
mhpstatus.intermountainhealthcare.org
check24status.mambu.com
scuat.intermountainhealthcare.org
printit.intermountainhealthcare.org
iris.intermountainhealthcare.org
incapsula.com
apistatus.postnord.no
ac2ada-status.elastic.co
printit.intermountain.net
apistatus.postnord.no
check24status.mambu.com
ac2ada-status.elastic.co
imperva.com
secureaccess.intermountainhealthcare.org
webpay.intermountainhealthcare.org
check24status.mambu.com
imperva.com
ebu.intermountainhealthcare.org
apistatus.postnord.no
webpay.intermountainhealthcare.org
imperva.com
apistatus.postnord.no
apistatus.postnord.no
ma.intermountainhealthcare.org
check24status.mambu.com
check24status.mambu.com
alertus.intermountainhealthcare.org
myhealthplusforms.intermountainhealthcare.org
apistatus.postnord.no
check24status.mambu.com
hiesspgateway.intermountainhealthcare.org
ac2ada-status.elastic.co
fssoconsumer.intermountainhealthcare.org
check24status.mambu.com
mhpstatus.intermountainhealthcare.org
securemessenger.intermountainhealthcare.org
jobs.intermountainhealthcare.org
fsso.intermountainhealthcare.org
hiessptestgateway.intermountainhealthcare.org
myhealthplusforms.intermountainhealthcare.org
intermountainhealthcare.org
secureaccess.intermountainhealthcare.org
intermountainchat.intermountainhealthcare.org
imperva.com
intermountainhealthcare.org
mhpstatus.intermountainhealthcare.org
securemessenger.intermountainhealthcare.org
imperva.com

Certificate

The complete raw certificate details for printit.intermountainhealthcare.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIQCt49WFdbv+ryUnhFJOSf5TANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwMzExMDAwMDAwWhcN
MjEwMzE1MTIwMDAwWjCBszELMAkGA1UEBhMCVVMxDTALBgNVBAgTBFV0YWgxFzAV
BgNVBAcTDlNhbHQgTGFrZSBDaXR5MSYwJAYDVQQKEx1JbnRlcm1vdW50YWluIEhl
YWx0aCBDYXJlIEluYzEmMCQGA1UECxMdSW50ZXJtb3VudGFpbiBIZWFsdGggQ2Fy
ZSBJbmMxLDAqBgNVBAMTI3ByaW50aXQuaW50ZXJtb3VudGFpbmhlYWx0aGNhcmUu
b3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlRuVsZrfm9LQZdG
OLgsmD7ZjfDtaH2GHoP/oxeRKtd3cpS4WllFZpyQIHrrLEKfP4B2SjETw+ALz4hM
q098WWXpdIQWP1Wz8WuDB/IqWfUF/IlzOK9mNMpWqa1FAVYX/32GEXmOG2rAn6m+
ALibj1sOh0l69iHcYLmCQm3xZC7WoJJieab69IXW4arOcGNxqmvlpNxEulIhGdrW
YIVqVJRMWVZlzOS/1NP/is4WInciMcFnrQuPeMM5QPUbyRziVqBOfpy6n+NXZwKh
a4umrXka9G+uhhl7YuX5giiJ7MraPa46Jp01JLYUMUBskik8yHVCr2EoWq3a1wi6
D2dVJQIDAQABo4IB/zCCAfswHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG
2eIwHQYDVR0OBBYEFDXPh3xhpkneIexM5xyQ7t/aXD6NMC4GA1UdEQQnMCWCI3By
aW50aXQuaW50ZXJtb3VudGFpbmhlYWx0aGNhcmUub3JnMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2g
K4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6At
oCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwG
A1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3
LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggr
BgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpo
dHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2Vy
dmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ
KoZIhvcNAQELBQADggEBANXO0zWDzN0sQMMUxGdHdK9zKQWH+WjOhoYGcaWtEuKy
BMbBMGtOqETyMrBFBbpMqXo9NamhNEywAbCqEmh4hTHL3nRCDsomWeu/WagtEluo
P/8nwtcDQgJVwcNbq6haWNwbWifK8hTCXlUJHcEwqD9Et+t2ak1j5nNYPaWTPfX+
R+IS/Unqow1gXPW52UPDyL/R+kV+Bm131fvLWurH286XhHS3ucYmbyVPsJnvbf/N
rUoyHgAF+c5r8Ld2KNwwa84P5YuPFP00dMhjtm3YF9hgQPpJ/dsIbOLGJztg74Ic
4pviXnY/bnBXjJWQ8dCcILYmayIyy0F/xJ/MSBcc6Bg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlRuVsZrfm9LQZdGOLgs
mD7ZjfDtaH2GHoP/oxeRKtd3cpS4WllFZpyQIHrrLEKfP4B2SjETw+ALz4hMq098
WWXpdIQWP1Wz8WuDB/IqWfUF/IlzOK9mNMpWqa1FAVYX/32GEXmOG2rAn6m+ALib
j1sOh0l69iHcYLmCQm3xZC7WoJJieab69IXW4arOcGNxqmvlpNxEulIhGdrWYIVq
VJRMWVZlzOS/1NP/is4WInciMcFnrQuPeMM5QPUbyRziVqBOfpy6n+NXZwKha4um
rXka9G+uhhl7YuX5giiJ7MraPa46Jp01JLYUMUBskik8yHVCr2EoWq3a1wi6D2dV
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14446214086544128879768854329947365349
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intermountain Health Care Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intermountain Health Care Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'printit.intermountainhealthcare.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25036818866829442986824357111577488029212300542131991180888781372200444421101745270698405612074318318709890014662026618595956870622337440270521197020240660020478029868142542586188364357132414843318876799205139791112768271299631101855771080025203961056469789460334016318749060864705529410116143453894363946601281457800703366630222476026206289746464305410900243482643166578937694394951340815334037945986404820869346604748894030109516876486322226971472083521457620766141572382923896453668941065606644822511959595702504236823989614423634134478341967780974374758655463063651763093352944905409313833749851353120586661844261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35cf877c61a649de21ec4ce71c90eedfda5c3e8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printit.intermountainhealthcare.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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