www.nflshop.com

- NFL Enterprises LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:28:40:fc:b9:cf:c5:c8:31:50:60:e3:a1:2e:e9:12 was issued on by DigiCert Inc.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NFL Enterprises LLC

Organization: NFL Enterprises LLC
Organization unit: NFL Digital Media
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:28:40:fc:b9:cf:c5:c8:31:50:60:e3:a1:2e:e9:12
Serial Number (int): 20147429908332626960926984606571227410
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 66:62:7e:84:84:16:12:73:7b:eb:21:2f:4d:84:2c:45:b7:52:3a:af
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 73:84:8f:08:80:c9:09:7a:0f:33:f7:bf:36:c2:51:3e:4b:d9:a1:f2
Fingerprint (sha256): 23:e8:e8:06:54:7e:9f:41:ba:6a:18:74:f0:13:4e:05:26:66:a0:83:aa:e5:9f:b0:89:75:fd:fe:17:0c:9d:c0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.nflshop.com

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nflshop.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nflshop.com
nflshop.com
store.philadelphiaeagles.com
jetsshop.com
nfl-jax-jaguars-mobilegw.fanatics.com
shop.bengals.com
nfl-mobilegw.fanatics.com
www.shop49ers.com
shop.giants.com
fr.nflshop.ca
proshop.seahawks.com
nfl-den-broncos-mobilegw.fanatics.com
store.chicagobears.com
nfl-cin-bengals-mobilegw.fanatics.com
www.nflshop.ca
nflshop.ca
nfl-chi-bears-mobilegw.fanatics.com
shop.houstontexans.com
shop.clevelandbrowns.com
ramsfanshop.com
www.ramsfanshop.com
proshop.bengals.com
shop.atlantafalcons.com
nfl-bal-ravens-mobilegw.fanatics.com
nfl-ny-jets-mobilegw.fanatics.com
shop.chargers.com
m.nflshop.com
shop.jaguars.com
nfl-az-cardinals-mobilegw.fanatics.com
shop.denverbroncos.com
shop.chiefs.com
nflshop.frgimages.com
shop49ers.com
nfl-no-saints-mobilegw.fanatics.com
seahawksgw.fanatics.com
nfl-ny-giants-mobilegw.fanatics.com
shop.baltimoreravens.com
nfl-atl-falcons-mobilegw.fanatics.com
shop.miamidolphins.com
shop.detroitlions.com
nfl-ks-chiefs-mobilegw.fanatics.com
www.jetsshop.com
nfl-phi-eagles-mobilegw.fanatics.com
nfl-sdk-mobilegw.fanatics.com
shop.azcardinals.com
shop.neworleanssaints.com

Other certificates including the domain name nflshop.com

(limited to 100 certificates)
europe.nflshop.com
secure01.fanaticsretailgroup.com
domains.returnly.com
secure01.fanaticsretailgroup.com
www.nflshop.com
r.europe.nflshop.com
secure01.fanaticsretailgroup.com
nflshop.com
domains.returnly.com
secure01.fanaticsretailgroup.com
domains.returnly.com
insidenfl.nflshop.com
m.nflshop.com
nflshop.com
r.europe.nflshop.com
europe.nflshop.com
returns.nflshop.com
www.nflshop.com
www.nflshop.com
www.nflshop.com
returns.nflshop.com
domains.returnly.com
returns.nflshop.com
domains.returnly.com
insidenfl.nflshop.com
www.nflshop.com
secure04.dv.fanaticsretailgroup.com
domains.returnly.com
www.nflshop.com
secure04.dv.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.nflshop.com
www.nflshop.com
nflshop.com
strack.europe.nflshop.com
europe.nflshop.com
m.europe.nflshop.com
secure01.fanaticsretailgroup.com
r.europe.nflshop.com
secure04.dv.fanaticsretailgroup.com
returns.nflshop.com
r.europe.nflshop.com
www.nflshop.com
m.europe.nflshop.com
europe.nflshop.com
secure01.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
www.nflshop.com
m.nflshop.com
returns.nflshop.com
europe2.nflshop.com
strack.europe.nflshop.com
www.nflshop.com
www.nflshop.com
nflshop.com
m.nflshop.com
secure04.dv.fanaticsretailgroup.com
strack.europe.nflshop.com
nflshop.com
www.nflshop.com
insidenfl.nflshop.com
secure01.fanaticsretailgroup.com
nflshop.com
r.europe.nflshop.com
nflshop.com
www.nflshop.com
secure04.dv.fanaticsretailgroup.com
returns.nflshop.com
strack.europe.nflshop.com
secure04.dv.fanaticsretailgroup.com
returns.nflshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
europe.nflshop.com
domains.returnly.com
domains.returnly.com
secure01.fanaticsretailgroup.com
m.europe.nflshop.com
domains.returnly.com
europe.nflshop.com
r.europe.nflshop.com
domains.returnly.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
domains.returnly.com
nflshop.com
nflshop.com
www.nflshop.com
europe2.nflshop.com
secure01.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
strack.europe.nflshop.com
www.nflshop.com
r.europe.nflshop.com
nflshop.com
www.nflshop.com
m.europe.nflshop.com
europe.nflshop.com
domains.returnly.com
www.nflshop.com

Certificate

The complete raw certificate details for www.nflshop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TROYj0NzQsrgCT+E7le
umtqCoUbjQiJQJKzPX9q6lOzUxDd5Qmi02V5DLUCt3F3NCXKj55agpJJ99dnkm2R
aKe9D2aS/bJl2Ur7UkCBZvs+Q8bKH2MX7JFvVXCIDPTyZW7fMH4K3KLb83PM9bku
vW+5yh4nrjap67HaQZWp94h3jd8ldz3eBguB3TzqV1+KRFJsA4Laj1qYc70iihiW
6HaPv/CMmLFwYFtZSqHC/DW+nodB3Tom52Ibbc5UmnWv2Zlth3ity0kE9VLs6CJU
9oj5ORMQkfawTWueTv0QjFajFzA2fZFjxUeGasXdUdqoFv8oy2orkRn8nEd1sz0/
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20147429908332626960926984606571227410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NFL Enterprises LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NFL Digital Media'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nflshop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27924458539385878009681079724272783571011843111153135040369601234029812631250782470128845983187292816565053643665665548616017395513467289331010089890410916355020894007454245094264240317521481667222197335880283650981803754036664528545849722417665252940078317530729366709227708552673221004890573694969679734637714161773229471248419185004924798646556611360079106828369893805823347001871397493005101297245454538105405471224191316611197532111875620700082271804865559069713910852678757434879755257109810623953019275487065930013700041761748711312276116488220551975582646408963348240053912954727839896679333371678515043057409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66627e84841612737beb212f4d842c45b7523aaf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nflshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nflshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.philadelphiaeagles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetsshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-jax-jaguars-mobilegw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bengals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-mobilegw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop49ers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.giants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.nflshop.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proshop.seahawks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-den-broncos-mobilegw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.chicagobears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-cin-bengals-mobilegw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nflshop.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nflshop.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-chi-bears-mobilegw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.houstontexans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.clevelandbrowns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramsfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramsfanshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proshop.bengals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.atlantafalcons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-bal-ravens-mobilegw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-ny-jets-mobilegw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.chargers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.nflshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.jaguars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-az-cardinals-mobilegw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.denverbroncos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.chiefs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nflshop.frgimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop49ers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-no-saints-mobilegw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seahawksgw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-ny-giants-mobilegw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.baltimoreravens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-atl-falcons-mobilegw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.miamidolphins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.detroitlions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-ks-chiefs-mobilegw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jetsshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-phi-eagles-mobilegw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfl-sdk-mobilegw.fanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.azcardinals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.neworleanssaints.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001658118e88c0000040300483046022100d8fc13c5a63f1a564743f825af66dde4eb8497e03495a03bc8ffa69fa95925e102210082b9d5834ceea45cf3c58388a223da9b54a268d7a3be53095d39f5fd8e293e460076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001658118e929000004030047304502204cf6992fd02dc067407d545294e15a0185d9f6d1479bfb3c1889f4683c774b0102210080b4c89999ea2de480a490bcd322e0905e0385b63186ff25b42d02dd077111b5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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