drtestbcp.harlandclarke.com

- Harland Clarke Corp -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 02:e2:0d:1e:b0:a1:ec:99:a7:93:4a:00:73:27:86:eb was issued on by DigiCert Inc.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Harland Clarke Corp

Organization: Harland Clarke Corp
Organization unit: Information Technology
State / Province: Texas
Locality: San Antonio
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:e2:0d:1e:b0:a1:ec:99:a7:93:4a:00:73:27:86:eb
Serial Number (int): 3832181184433541787932709709773506283
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 37:c1:70:67:2d:fc:8a:e3:a9:18:41:d6:d9:a3:cf:be:2d:f4:aa:71
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): d8:4c:b9:f3:72:d2:f7:e0:a8:1b:d4:63:14:b1:1d:60:36:2c:a4:ad
Fingerprint (sha256): 23:72:89:49:c0:66:b0:da:de:a3:be:ac:89:ce:2a:d4:4c:08:2f:79:a1:db:ea:20:14:1b:35:cd:35:db:59:97

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate drtestbcp.harlandclarke.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for drtestbcp.harlandclarke.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

drtestbcp.harlandclarke.com
drtestconnectionpoint.clarkeamerican.com
drtestbranchprod.harland.net
drtestapp3.checksconnect.com
drtestbranchapp2.harland.net
drtestvan.harland.net
drtestvanweb.harland.net
drtestvansso.harland.net
drtesticowebprod.harland.net
drtest.mobinet.harlandclarke.com

Other certificates including the domain name harlandclarke.com

(limited to 100 certificates)
bcpstage.harlandclarke.com
marketingservices.harlandclarke.com
cfs.harlandclarke.com
efilter1.harlandclarke.com
bcpstage.harlandclarke.com
fs.harlandclarke.com
smtp02.harlandclarke.com
meeting.hchgrp.com
fs.harlandclarke.com
hcconnectda1.harlandclarke.com
pkywfh.harlandclarke.com
sipexternal.hchgrp.com
www.harlandclarke.com
efilter3.harlandclarke.com
myreports.harlandclarke.com
vpw.harlandclarke.com
bcp.harlandclarke.com
*.vip.harlandclarke.com
cunexusonline-test.harlandclarke.com
myreportsqa.harlandclarke.com
service-uat.harlandclarke.com
slcwfh.harlandclarke.com
vpw.harlandclarke.com
myreportsqa.harlandclarke.com
hcconnectda1.harlandclarke.com
myreportsqa.harlandclarke.com
staging.insight.harlandclarke.com
hcc1.harlandclarke.com
vservices.harlandclarke.com
dev-paymentprocessing.harlandclarke.com
hcconnect.harlandclarke.com
crm.harlandclarke.com
gitlab.os.harlandclarke.com
meeting.hchgrp.com
securetransfer.harlandclarke.com
inside.harlandclarke.com
efilter2.harlandclarke.com
staging.insight.harlandclarke.com
secureuat.harlandclarke.com
securetransfer.harlandclarke.com
www.hc.rock.rivetica.com
myreports.harlandclarke.com
hcconnectda1drhcd.harlandclarke.com
inside.harlandclarke.com
*.harlandclarke.com
cfs.harlandclarke.com
togo1.harlandclarke.com
efilter1.harlandclarke.com
vpw.harlandclarke.com
www.hc.rock.rivetica.com
smtp02.harlandclarke.com
inside.harlandclarke.com
www.hc.rock.rivetica.com
inside.harlandclarke.com
hs1.harlandclarke.com
hcconnectda1drhcd.harlandclarke.com
togo1.harlandclarke.com
webmail.hchgrp.com
insight.harlandclarke.com
myreports.harlandclarke.com
www.harlandclarke.com
hcconnect2.harlandclarke.com
inside.harlandclarke.com
marketingservices.harlandclarke.com
www.hc.rock.rivetica.com
paymentprocessing.harlandclarke.com
hcc2dr.harlandclarke.com
fs.harlandclarke.com
hcconnect.harlandclarke.com
bcpstage.harlandclarke.com
www.hc.rock.rivetica.com
cfs.harlandclarke.com
epm.harlandclarke.com
epm.harlandclarke.com
drtestbcp.harlandclarke.com
crmqa.harlandclarke.com
sipexternal.hchgrp.com
staging.insight.harlandclarke.com
insight.harlandclarke.com
insight.harlandclarke.com
secureftp.harlandclarke.com
smtp01.harlandclarke.com
mobinet-uat.harlandclarke.com
HCCS.HARLANDCLARKE.COM
smtp01.harlandclarke.com
bcppartner.harlandclarke.com
pkywfh.harlandclarke.com
meeting.hchgrp.com
inside.harlandclarke.com
bcpstage.harlandclarke.com
mobinet.harlandclarke.com
epm.harlandclarke.com
epm.harlandclarke.com
hcj1.harlandclarke.com
taxhelpdesk.harlandclarke.com
myreports.harlandclarke.com
marketingservices.harlandclarke.com
dsa.harlandclarke.com
insight.harlandclarke.com
mobinet-uat.harlandclarke.com

Certificate

The complete raw certificate details for drtestbcp.harlandclarke.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGbSXzB15mQt4exBhqCJ
t3AWknTh1MrGCVtaioEhM7+Im7y+CV5IVyFAHHVH0ihQ4LaTRkJVjc6DiYrSCj8s
53QxGxGY4pAduPKlwFZEMzB8tnPlufcJQPX4VRH2rTkWv8GRp4O84GaZWkbFVXk0
0xQZWhRskKGGEUmjeclLNuZ0gZd2xxFOgvshVFMDZR1dRjW49IOpTcv4Y70/hUDz
QLolrQIdFdshBVZaXVxheNlzMIT0x3Up5SDIjWtPj79dNDn2vfFfnVGBZaiDK7ry
4cubaRxEJo4h5lG3Q5DP+95zOYXFx4aMClbIAyG+39+lLiveTYm+QcodJLV5/xts
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3832181184433541787932709709773506283
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Antonio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Harland Clarke Corp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'drtestbcp.harlandclarke.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24288457855529602518689834779119697659782863057237346251589970427579727260398858617961271126118542739017554411125295563867339020966703013385944072784281379466686262382337477754061397695004757328441677254764945201271950778122312747722329406542891290796007979204684807886372777976313893848471402476053187761973454749667480577284696087823439608126399932050656956810173467563113153269886564274149987897451157518570191175573179426807093302788834554718921614587842553554502934251281083834961636545862377533644398235767235624078571836512232536871233858834185497854501440527887336775772659987918312885096269680082060094172321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37c170672dfc8ae3a91841d6d9a3cfbe2df4aa71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (304 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drtestbcp.harlandclarke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drtestconnectionpoint.clarkeamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drtestbranchprod.harland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drtestapp3.checksconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drtestbranchapp2.harland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drtestvan.harland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drtestvanweb.harland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drtestvansso.harland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drtesticowebprod.harland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drtest.mobinet.harlandclarke.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00cd17f56a2ec3ab48df26843f9a0899debc44d04c6e5e636aa61ffbc1ec0c5d5bedad16af1eeb9e32995767f30997218b544222d6a42c554b6407d2e65071fd0721b898e3a7fa7c4840961ef979dfac9373b57c680a2fcca56c04abaaf8c5156acbececd67459974dc3a5716f35ebfcd7d434adb447f09ee32838961f15c22da1c921334d7ba41f441601ab3af0d709609180d563bde8b2599315f483598efea5e99a0b6c74ee9ae4e728fe12f83f5ebf86e6189ab36f65bf309d6fb23e228a6fe67a2cd0f825c7d8b86f2e375584bc3695a2cb30299535f970c9539aa6055dca8b0e7136624583a5145de5f604a288cd388b21c5d3db7206ed391b99e89ad38e