mail.iap.socgen.com

- Societe Generale -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:d3:b4:35:d0:ca:2f:48:23:96:23:e6:ed:51:04:bb was issued on by DigiCert Inc.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Societe Generale

Organization: Societe Generale
Organization unit: SHA256
Locality: PARIS
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:d3:b4:35:d0:ca:2f:48:23:96:23:e6:ed:51:04:bb
Serial Number (int): 13062281696653670382796875312072295611
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 09:a7:30:bd:fe:a7:82:c8:3e:b7:d2:61:cc:94:38:97:11:13:81:32
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 17:42:36:08:f5:3c:33:ca:15:75:77:a9:1a:c8:f5:0a:8c:29:ac:37
Fingerprint (sha256): 26:ec:fa:84:8c:94:4b:51:36:26:26:84:0a:f4:06:83:35:ff:c9:63:20:6a:f8:62:8e:16:e2:de:a3:54:0c:b5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate mail.iap.socgen.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.iap.socgen.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

parmail.sgcib.com
nycirprmg01.iap.socgen.com
nycirprmg02.iap.socgen.com
nycirprmg03.iap.socgen.com
nycirprmg04.iap.socgen.com
nycirprmg05.iap.socgen.com
nycirprmg06.iap.socgen.com
nycirprmg07.iap.socgen.com
nycmail.iap.socgen.com
nycmail.us.socgen.com
nycmail05.us.socgen.com
nycmail06.us.socgen.com
nycmail07.us.socgen.com
parmail.iap.socgen.com
parmail01.iap.socgen.com
parmail01.sgcib.com
parmail02.iap.socgen.com
parmail02.sgcib.com
parmail03.iap.socgen.com
parmail03.sgcib.com
parmail04.iap.socgen.com
parmail04.sgcib.com
parmail05.iap.socgen.com
parmail05.sgcib.com
parmail06.iap.socgen.com
parmail06.sgcib.com
parmail07.iap.socgen.com
parmail08.iap.socgen.com
parmail09.iap.socgen.com
parmail10.iap.socgen.com
parmail11.iap.socgen.com
parmail12.iap.socgen.com
parmail13.iap.socgen.com
parmail14.iap.socgen.com
secmail01.iap.socgen.com
secmail02.iap.socgen.com
secmail03.iap.socgen.com
secmail04.iap.socgen.com
secmail05.iap.socgen.com
secmail06.iap.socgen.com
secmail07.iap.socgen.com
secmail08.iap.socgen.com
secmail09.iap.socgen.com
secmail10.iap.socgen.com
secmail11.iap.socgen.com
secmail12.iap.socgen.com
secmail13.iap.socgen.com
secmail14.iap.socgen.com
tstmail.iap.socgen.com
mail.iap.socgen.com

Other certificates including the domain name socgen.com

(limited to 100 certificates)
mybuilding-t.socgen.com
filetransfer.hpr.tom4.socgen.com
homo-mail.socgen.com
hsvif01f.dns21.socgen.com
filetransfer.hpr.tom4.socgen.com
h-apps.socgen.com
lyxortableau.us.socgen.com
impulse.socgen.com
nirvana-nycprimary.sgmarkets.com
0000010927.socgen.com
0000013990.socgen.com
selfcare.socgen.com
0609200000.socgen.com
ws-dir-apac-01.socgen.com
www.appro.achats.socgen.com
0000017923.socgen.com
mybuilding-t.socgen.com
homol.extranet.eur.socgen.com
mybuilding-f.socgen.com
etece.pesit.socgen.com
h-wallofthanks.socgen.com
PPCMVPN1C.socgen.com
0000018943.socgen.com
identity.nova.socgen.com
webclear.societegenerale.com
Admin-nova.socgen.com
tomt-tom.socgen.com
careers.socgen.com
homowebclear.societegenerale.com
simba.etece-test.socgen.com
dwtflx01.dns21-3.socgen.com
sgcalassistant.socgen.com
le-fil-facture-fournisseur.socgen.com
mail.socgen.com
businesscard.socgen.com
sgmarkets.com
0000010205.socgen.com
0090000000.socgen.com
www.interco.finance.group.socgen.com
0000018943.socgen.com
sgmarkets.com
aiwmail.emm.socgen.com
www.mobility.asi.socgen.com
mobility-uat.eur.socgen.com
www.appro.achats.socgen.com
filetransfer.hpr.tomx.socgen.com
homowebsight.societegenerale.com
cty.sgmarkets.com
hml-gts.mobilityv2.eur.socgen.com
mysocietegenerale.socgen.com
0531800000.socgen.com
extranet.eur.socgen.com
sgmozibhml.socgen.com
access-apac.im.socgen.com
ea-ataccess-uat.eur.socgen.com
warrant.com
0090000000.socgen.com
TOMHLABF1.socgen.com
www.erec.sgcib.com
mail.socgen.com
alphaequityindices.socgen.com
sgnychipsprd.us.socgen.com
mblgwblr-ctt-asi.nova.socgen.com
hietemi.socgen.com
apps.socgen.com
0531100000.socgen.com
ataccess-sso-uat.eur.socgen.com
PPAXVPN_test1.socgen.com
nirvana-hkprimary.sgmarkets.com
nycnirvanaprimary.socgen.com
nominet.socgen.com
gbis.mobilityv2.eur.socgen.com
h-sgcommunities.socgen.com
valuation.sgmarkets.com
gaia.socgen.com
filetransfer.hpr.tomx.socgen.com
aiw.emm.socgen.com
selfcare.socgen.com
careers.socgen.com
0779500000.socgen.com
alpha.socgen.com
www.warrants.com
0532000000.socgen.com
0000017922.socgen.com
gaia-smartcard.socgen.com
pulextrmquat.us.world.socgen.com
filetransfer.hpr.tomr.socgen.com
gaia.socgen.com
www.windi.socgen.com
cty.sgmarkets.com
consolidation.finance.group.socgen.com
join.socgen.com
h-sgcommunities.socgen.com
nycnirvanaprimary.socgen.com
simba.etece-test.socgen.com
0070800000.socgen.com
sgftrcd.us.world.socgen.com
alphametals.socgen.com
sggsc-hotspot.in.socgen.com
parmail.sgcib.com

Certificate

The complete raw certificate details for mail.iap.socgen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OjFG5LImnQlwi+StbVU
EzRE0bYY7GfqUCP3ph3+t68F4sNVOSnO+w2pWFtSDNh6p1s8wOX6CCodB/LzSCxn
Gk73wyZocrU4U5yyHd+tJxyZJP6FPRDQMlcrpVjlLrak3gK5XZrSf+DxDp1zivp4
ASULGU6D+NB4BfXzX9l6T0dNN547S3RCc9Sx17lW8kF1oDkbgis2nzdLnR5MYItL
wxE0aKrsYRHhwkNqtw/rrMnMFvKSnX+qEB/S5Au129g2kGsCVFfmFklND8CVS/z3
mIQRdQvvyehbGFo4cUBp2aUZD7DWTc7XeGumEsk2vMxQemsiuodnHf675LpmPxd8
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13062281696653670382796875312072295611
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Societe Generale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SHA256'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.iap.socgen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28392163453747834621711912007261468325835569298932209151425438772796471026413053669085185793723104536719338840238858464218729355568343818343362312801985442325292238478666319670929057879220899186531728742224250014224456123476409538461523359235804216110041919179096342799393505414474159318280223516954365632502354033228114894067449076243450318572844272247882230331410332149995670089831354465349507423775119801361055402053767857606257290913800715232154884870603285980840220514689186243666256240213074996451087336714818662863519802049503588056955034571862120635433401665280252712651551364658245105641326746546590082104501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09a730bdfea782c83eb7d261cc94389711138132
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycirprmg01.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycirprmg02.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycirprmg03.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycirprmg04.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycirprmg05.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycirprmg06.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycirprmg07.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycmail.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycmail.us.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycmail05.us.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycmail06.us.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycmail07.us.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail01.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail01.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail02.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail02.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail03.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail03.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail04.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail04.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail05.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail05.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail06.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail06.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail07.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail08.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail09.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail10.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail11.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail12.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail13.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmail14.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail01.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail02.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail03.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail04.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail05.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail06.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail07.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail08.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail09.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail10.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail11.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail12.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail13.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secmail14.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstmail.iap.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.iap.socgen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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