www.egencia.com

- AMEX Global Business Travel -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:6c:3e:c9:5d:9e:7d:9f:56:b5:b3:92:fa:15:9a:d8 was issued on by DigiCert Inc.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AMEX Global Business Travel

Organization: AMEX Global Business Travel
State / Province: New Jersey
Locality: Jersey City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:6c:3e:c9:5d:9e:7d:9f:56:b5:b3:92:fa:15:9a:d8
Serial Number (int): 8537409498661057819977243725518969560
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6f:8d:ee:b5:8b:1a:49:06:cb:0a:e0:e4:6a:46:2c:6d:4e:40:ec:ac
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 36:a6:eb:27:f2:0e:48:c9:fc:73:8f:5f:f0:1e:c1:70:2a:7e:06:bb
Fingerprint (sha256): 26:fa:ac:0c:51:c8:52:7a:a6:33:67:14:5e:e0:5c:71:cc:09:76:c8:c5:ad:26:0a:08:9f:98:e6:9f:86:ec:46

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.egencia.com

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.egencia.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.egencia.com
*.egencia.cl
*.egencia.cn
*.egencia.co.id
*.egencia.co.jp
*.egencia.co.kr
*.egencia.co.za
*.egencia.com
*.egencia.com.ar
*.egencia.com.hk
*.egencia.com.my
*.egencia.com.ph
*.egencia.com.sg
*.egencia.com.tw
*.egencia.eu
*.egencia.mx
egencia.cl
egencia.cn
egencia.co.id
egencia.co.jp
egencia.co.kr
egencia.co.za
egencia.com
egencia.com.ar
egencia.com.hk
egencia.com.my
egencia.com.ph
egencia.com.sg
egencia.com.tw
egencia.eu
egencia.mx

Other certificates including the domain name egencia.com

(limited to 100 certificates)
learn.egencia.com
www.egencia.com
events.egencia.com
events.egencia.com
info.egencia.com
events.egencia.com
wwph.egencia.cn
discover.egencia.com
mi.egencia.com
www.egencia.com
akamai-san75.exacttarget.com
discover.egencia.com
discover.egencia.com
www.egencia.com
cloud.email.egencia.com
events.egencia.com
events.egencia.com
productinfo.egencia.com
learn.egencia.com
info.egencia.com
www.egencia.com
learn.egencia.com
lyncweb.expedia.biz
events.egencia.com
wwph.egencia.com
feedback.egencia.com
www.egencia.com
view.email.egencia.com
learn.egencia.com
feedback.egencia.com
learn.egencia.com
conversations.expedia.com
events.egencia.com
www.egencia.com
events.egencia.com
productinfo.egencia.com
community.egencia.com
community.egencia.com
mail.expedia.com
feedback.egencia.com
events.egencia.com
community.egencia.com
mi.egencia.com
www.egencia.com
info.egencia.com
conversations.expedia.com
egencia.ae
events.egencia.com
learn.egencia.com
community.egencia.com
egencia.com
lyncphxaccess.expedia.biz
click.email.egencia.com
akamai-san75.exacttarget.com
reporting.egencia.com
events.egencia.com
events.egencia.com
community.egencia.com
metrics.egencia.com
*.int-maui.sb.karmalab.net
discover.egencia.com
go.egencia.com
learn.egencia.com
www.egencia.com
mi.egencia.com
discover.egencia.com
events.egencia.com
egencia.com
events.egencia.com
learn.egencia.com
wwwegenciacom.int-maui.sb.karmalab.net
www.egencia.com
learn.egencia.com
mi.egencia.com
akamai-san75.exacttarget.com
events.egencia.com
www.egencia.com
learn.egencia.com
events.egencia.com
learn.egencia.com
feedback.egencia.com
www.egencia.com
learn.egencia.com
reporting.egencia.com
cloud.email.egencia.com
wwph.egencia.com
go.egencia.com
egencia.com
cloud.email.egencia.com
southwest.egencia.com
click.email.egencia.com
*.egencia.com
events.egencia.com
click.email.egencia.com
www.egencia.com
events.egencia.com
feedback.egencia.com
info.egencia.com
learn.egencia.com
go.egencia.com

Certificate

The complete raw certificate details for www.egencia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHzTCCBrWgAwIBAgIQBmw+yV2efZ9WtbOS+hWa2DANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjEwMDUwMDAwMDBa
Fw0yMzEwMDUyMzU5NTlaMHgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVy
c2V5MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEkMCIGA1UEChMbQU1FWCBHbG9iYWwg
QnVzaW5lc3MgVHJhdmVsMRgwFgYDVQQDEw93d3cuZWdlbmNpYS5jb20wWTATBgcq
hkjOPQIBBggqhkjOPQMBBwNCAATl1/SPEmBswJFL8hC1fzJ5ckgm88D34j1pn/af
XqJQRk9IDH8e3OQxJRu2uOcK8PtbNPAovMfQ+2TK4uCAje88o4IFRTCCBUEwHwYD
VR0jBBgwFoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0OBBYEFG+N7rWLGkkG
ywrg5GpGLG1OQOysMIIB7gYDVR0RBIIB5TCCAeGCD3d3dy5lZ2VuY2lhLmNvbYIM
Ki5lZ2VuY2lhLmNsggwqLmVnZW5jaWEuY26CDyouZWdlbmNpYS5jby5pZIIPKi5l
Z2VuY2lhLmNvLmpwgg8qLmVnZW5jaWEuY28ua3KCDyouZWdlbmNpYS5jby56YYIN
Ki5lZ2VuY2lhLmNvbYIQKi5lZ2VuY2lhLmNvbS5hcoIQKi5lZ2VuY2lhLmNvbS5o
a4IQKi5lZ2VuY2lhLmNvbS5teYIQKi5lZ2VuY2lhLmNvbS5waIIQKi5lZ2VuY2lh
LmNvbS5zZ4IQKi5lZ2VuY2lhLmNvbS50d4IMKi5lZ2VuY2lhLmV1ggwqLmVnZW5j
aWEubXiCCmVnZW5jaWEuY2yCCmVnZW5jaWEuY26CDWVnZW5jaWEuY28uaWSCDWVn
ZW5jaWEuY28uanCCDWVnZW5jaWEuY28ua3KCDWVnZW5jaWEuY28uemGCC2VnZW5j
aWEuY29tgg5lZ2VuY2lhLmNvbS5hcoIOZWdlbmNpYS5jb20uaGuCDmVnZW5jaWEu
Y29tLm15gg5lZ2VuY2lhLmNvbS5waIIOZWdlbmNpYS5jb20uc2eCDmVnZW5jaWEu
Y29tLnR3ggplZ2VuY2lhLmV1ggplZ2VuY2lhLm14MA4GA1UdDwEB/wQEAwIHgDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgY8GA1UdHwSBhzCBhDBAoD6g
PIY6aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2
MjAyMENBMS00LmNybDBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0Rp
Z2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00LmNybDA+BgNVHSAENzA1MDMGBmeB
DAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMw
fwYIKwYBBQUHAQEEczBxMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2Vy
dC5jb20wSQYIKwYBBQUHMAKGPWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9E
aWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwCQYDVR0TBAIwADCCAX4G
CisGAQQB1nkCBAIEggFuBIIBagFoAHcA6D7Q2j71BjUy51covIlryQPTy9ERa+zr
aeF3fW0GvW4AAAGDqjNKbAAABAMASDBGAiEAyVHki1pnE19mCNvZpvqHSCAICY1W
vn1IUAKilzYE3VcCIQCS5RuALak6hOH9jEU5E8RFmm1r2oNb3w7SKcSY7GKjqwB1
ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWaAAABg6ozSt0AAAQDAEYw
RAIgXy2adKC5s5GyGB1YPTrVCT+81C349YebfjuenB61pTYCIAFerFoVBggnIjXp
/5e1BB6CtMCYfR0GfLo6kNkZZgVkAHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXE
nh0JgSXttJkAAAGDqjNKjgAABAMARzBFAiBOBkGMN3Gpp9UaMjIsnOy4MMyxg5OR
f00n3I17DzsMIwIhANz7U5CCxdFpdBPGGh6rwowyrAIWatyHpUBbHyc+VENqMA0G
CSqGSIb3DQEBCwUAA4IBAQBXdyFwNqK40pd9CaTWhTAUJazV7GyQznloI8rZs3dy
mpXCWoaZQYARyHEcv5jSirj6gvj3kHX4IWuybP3Lj8D4/PdVGNZanf5lf3wajEvg
7suLwP/QnO/nUeZ/RF/afWxetH72VgVZ67WrQB30se8w2jbI8lNNcKkvh5d6BEYb
RRguhbKRHgbA0A+qbbk9M1X0oNcsz5Tg5tQ4ZktlTs5vlU5qlEuwDtgqe8OYAZRG
sej5Bl92kru5dvvV3TAZP1j/HNHf4brspNIYeXlM2PljF+N6pHEabExm/drJ0HGd
u0bd+S1C+9SeKKquuwqRDbklC40zaum2L5vpLgLvfdgi
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5df0jxJgbMCRS/IQtX8yeXJIJvPA
9+I9aZ/2n16iUEZPSAx/HtzkMSUbtrjnCvD7WzTwKLzH0PtkyuLggI3vPA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8537409498661057819977243725518969560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jersey City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AMEX Global Business Travel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.egencia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004e5d7f48f12606cc0914bf210b57f3279724826f3c0f7e23d699ff69f5ea250464f480c7f1edce431251bb6b8e70af0fb5b34f028bcc7d0fb64cae2e0808def3c
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f8deeb58b1a4906cb0ae0e46a462c6d4e40ecac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egencia.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egencia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egencia.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egencia.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egencia.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egencia.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egencia.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egencia.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egencia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egencia.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egencia.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egencia.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egencia.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egencia.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egencia.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005777217036a2b8d2977d09a4d685301425acd5ec6c90ce796823cad9b377729a95c25a8699418011c8711cbf98d28ab8fa82f8f79075f8216bb26cfdcb8fc0f8fcf75518d65a9dfe657f7c1a8c4be0eecb8bc0ffd09cefe751e67f445fda7d6c5eb47ef6560559ebb5ab401df4b1ef30da36c8f2534d70a92f87977a04461b45182e85b2911e06c0d00faa6db93d3355f4a0d72ccf94e0e6d438664b654ece6f954e6a944bb00ed82a7bc398019446b1e8f9065f7692bbb976fbd5dd30193f58ff1cd1dfe1baeca4d21879794cd8f96317e37aa4711a6c4c66fddac9d0719dbb46ddf92d42fbd49e28aaaebb0a910db9250b8d336ae9b62f9be92e02ef7dd822