kreditportal.vhv.de

- VHV Vereinigte Hannoversche Versicherung a.G. -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 01:04:63:a0:d5:af:94:b7:0e:d8:50:a9:31:11:be:58 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

VHV Vereinigte Hannoversche Versicherung a.G.

Company registration number: HRB 3387
Organization: VHV Vereinigte Hannoversche Versicherung a.G.
Organization unit: VHV Gruppe
State / Province: Niedersachsen
Locality: Hannover
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:04:63:a0:d5:af:94:b7:0e:d8:50:a9:31:11:be:58
Serial Number (int): 1352017884408390378526298329901547096
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: de:2a:71:7d:53:e9:6e:f6:08:af:49:fb:23:e8:b1:1e:31:f3:fc:9c
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): c5:3e:48:80:19:84:71:a6:97:e7:84:81:68:84:80:ec:34:29:75:f8
Fingerprint (sha256): 26:ae:de:56:6f:40:b4:ff:9c:ab:d1:1f:9f:1f:63:70:0f:63:01:e9:f2:9f:f5:36:0c:cd:e6:1c:bc:b0:97:81

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate kreditportal.vhv.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kreditportal.vhv.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kreditportal.vhv.de
www.kreditportal.vhv.de

Other certificates including the domain name vhv.de

(limited to 100 certificates)
vdi-portal.vhv.de
sts-s.vhv.de
sso-j.vhv.de
sharefile.vhv.de
dssmdm.vhv.de
buergschaftsportal-prod.vhv.de
maxnet-test.vhv.de
storefront-test.vhv.de
kundenportal-j.vhv.de
maxnet-n.vhv.de
vermittlerws.vhv.de
buergschaftsportal-prod.vhv.de
segmdm.vhv.de
uploadws-test.vhv.de
tarifrechner-s.vhv.de
moir-core.vhv.de
kreditportal-test.vhv.de
maxnet.vhv.de
sso-s.vhv.de
www.buergschaftsportal-test.vhv.de
www.buergschaftsportal.vhv.de
bildertool.vhv.de
login.vhv.de
www.buergschaftsportal.vhv.de
lebenrechnerweb-t.vhv.de
unwetter-test.vhv.de
photovoltaik.vhv.de
vermittler.vhv.de
login.vhv.de
vermittler-test.vhv.de
bildertool.vhv.de
gastportal.vhv.de
jvpms.vhv.de
externepartnerws.vhv.de
sysint.auskunftsersuchen.vhv.de
jvpms.vhv.de
www.vhv.de
kreditportal-test.vhv.de
vermittlerws-h.vhv.de
sts.vhv.de
mapo-test.vhv.de
sts-h.vhv.de
tarifrechner-cyber-e.vhv.de
photovoltaik.vhv.de
trsmdm.vhv.de
maxnet-test.vhv.de
photovoltaik.vhv.de
photovoltaik.vhv.de
vpn.vhv.de
photovoltaik.vhv.de
maxnet-s.vhv.de
photovoltaik.vhv.de
messenger.vhv.de
test.auskunftsersuchen.vhv.de
kundenportal.vhv.de
kreditportal.vhv.de
sts.vhv.de
maxnet.vhv.de
sso-b.vhv.de
lebenrechnerweb.vhv.de
uploadws.vhv.de
sdc.vhv.de
e2e.vhv.de
kreditportal.vhv.de
www.vhv.de
sdc.vhv.de
b2b.vhv.de
mobiledevices.vhv.de
unwetter.vhv.de
www.buergschaftsportal.vhv.de
trsmdm.vhv.de
auskunftsersuchen.vhv.de
uploadws-test.vhv.de
tarifrechner.vhv.de
webvpn.vhv.de
sts-s.vhv.de
maxnet.vhv.de
unwetter-test.vhv.de
tarifrechner.vhv.de
auskunftsersuchen.vhv.de
photovoltaik.vhv.de
bildertool.vhv.de
gast-portal.ads.vhv.de
externepartnerws-test.vhv.de
b2b.vhv.de
www.vhv.de
tarifrechner-s.vhv.de
www.vhv.de
www.buergschaftsportal-test.vhv.de
b2b.vhv.de
jvpms.vhv.de
www.vhv.de
tarifrechner-t.vhv.de
tarifrechner-cyber.vhv.de
www.vhv.de
tarifrechner-hhg-t.vhv.de
sts-j.vhv.de
tarifrechner-h.vhv.de
kreditportal.vhv.de
tarifrechner-cyber-e.vhv.de

Certificate

The complete raw certificate details for kreditportal.vhv.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDEJM0UQ68RjFpjWowJI
Uw9M2HHSuBFzdHz56tpUZqMItONpdGZS2G8w8OwkzXjkuJRed0RKqTgMZZ8EbyvK
/eg/pmYNBW1KEI7Tx1vAUIYWfzEWG1TiLNLaxcEZ2fMTFI9sVepVNUfDjUEPZPnP
ocEwLUhg2rm+4s95TJ7u04RW0HmswquDCJXhFf1ETNBDCz/SMK1tAZhsZf1LThzc
5FPVCA4dtF0/dh2ipw7BCavGs5ijLTmTv3U310mLdMU/vQeUAV6H9DwJ2KLlvN52
2j6UowvsTDaskwvkkTG6K7wLlBmsfvrN2q9cYf4siwrhmouKQJ58ewMcr7RuV3Vi
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1352017884408390378526298329901547096
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 3387'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Niedersachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hannover'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VHV Vereinigte Hannoversche Versicherung a.G.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VHV Gruppe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kreditportal.vhv.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21737168976688852810173049754690105638180280661761081618479895962280397906400349758449250635039994015050234469422508483268669376243650581007710625055149567069983907409802399739091963746016172880968991133115667037039514614342017181945192822923892142627108022985553525535896177394817729606188503125735992146684169177293353866867923410815898954288543080993069445290232721538683886413270954028517163512632668485786164329180027919779751564107247374917699755606399310569437046291239246823782834217770128567647003611716696456738457413171036205151767501600671759347134672079422743048210427952587273185272389478543224357610143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de2a717d53e96ef608af49fb23e8b11e31f3fc9c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kreditportal.vhv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kreditportal.vhv.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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