prod.ai.ingestion.msftcloudes.us

- Microsoft Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:3d:96:cd:e2:a2:be:ea:06:01:11:74:4b:f9:67:9c was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: Washington
Locality: Redmond
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:3d:96:cd:e2:a2:be:ea:06:01:11:74:4b:f9:67:9c
Serial Number (int): 18928980722713669649750518053331363740
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ec:66:12:98:22:0d:3c:48:86:5f:c9:c1:43:99:9e:5e:76:29:49:7e
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): bc:e3:a2:04:02:cd:10:e3:73:a4:95:87:69:44:13:cb:ab:df:f4:b0
Fingerprint (sha256): 26:1d:0c:2e:78:af:01:0c:59:aa:07:47:bd:ce:1b:fc:7b:d4:bc:d4:bd:80:58:47:1b:35:56:fa:d4:a6:9b:7e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate prod.ai.ingestion.msftcloudes.us

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.ai.ingestion.msftcloudes.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod.ai.ingestion.msftcloudes.us
*.prod.ai.ingestion.msftcloudes.us

Other certificates including the domain name msftcloudes.us

(limited to 100 certificates)
prod.hot.ingest.monitor.core.usgovcloudapi.net
prod.warm.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.hot.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.hot.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.hot.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.hot.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.hot.ingest.monitor.core.usgovcloudapi.net
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.hot.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.hot.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.hot.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.hot.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.warm.ingest.monitor.core.usgovcloudapi.net
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us
prod.ai.ingestion.msftcloudes.us

Certificate

The complete raw certificate details for prod.ai.ingestion.msftcloudes.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+9RzMW4ngZTX0FeE1Amb
do3spNDtkiaI5Iz/LIzvq3/rPqbqKYPCBFYqptvcMzBeGU9AvVpsnWjAbyrP061C
Gr/qpcmD0/Uwu6AHEqVTFDLmUPIZQiNZ+jlTXnns8G759tKBaLfDj3hiFEQVve4Y
4ZhDFNnXKdHG2RPqP6vULBzUDXehRx0llvjCbcn0w+jQR5n50uOD1vqsFI+O1gee
fZohEe18zuPbhmVwHhB9RhwYlklIsd9pi6P73MU60tF7ipMj+FPtFwXB/yAGBt1O
IikVBP17FBS0pbUVw6/iqBbeLLldsU81rYx5G8UmyTTccMk5tFzg5mjkOMT+tn0c
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18928980722713669649750518053331363740
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.ai.ingestion.msftcloudes.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31790577532735194985238729119407235189531793158523063173533584386071916598497674217339984425682218761484064501004829772418098958397074262944502059023490035206873998382011622345099902774215585011505352390273179111764224901954600716292432654702991162535320121443536203488839403749979393519803405550234087286542978932184267887932332732255013459599032827189586236662820398915990472890170743738303356659062880561690362931524062461172982036121714689436415789905575249702311663918678751186253597118197006887358341521257901637676209348916395230709639507605118384931289055973346992173293648268610603808068475837902596511440089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec661298220d3c48865fc9c143999e5e7629497e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ai.ingestion.msftcloudes.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ai.ingestion.msftcloudes.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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