prod.hot.ingest.monitor.core.usgovcloudapi.net

- Microsoft Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:cb:43:02:f3:48:4f:30:ed:af:d6:02:6c:97:33:82 was issued on by DigiCert Inc.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: Washington
Locality: Redmond
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:cb:43:02:f3:48:4f:30:ed:af:d6:02:6c:97:33:82
Serial Number (int): 20993815354248351807717986766505325442
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 54:b0:1f:7c:8c:cc:1c:1c:17:f7:73:81:6e:b1:d7:15:8f:50:ca:4d
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 31:84:e1:e4:0f:3f:79:87:ae:81:2f:27:e8:7f:58:96:cc:f6:74:69
Fingerprint (sha256): 27:1a:d1:8e:8a:ea:a7:38:2d:62:e7:30:8c:bf:d6:7e:c3:30:75:60:a4:73:f2:59:36:67:ae:08:31:eb:45:3f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl

Check the revocation status for certificate prod.hot.ingest.monitor.core.usgovcloudapi.net

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.hot.ingest.monitor.core.usgovcloudapi.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod.hot.ingest.monitor.core.usgovcloudapi.net
*.prod.hot.ingestion.msftcloudes.us
*.monitoring.azure.us
*.usgovtexas-1.metrics.ingest.monitor.azure.us
*.usgovarizona-1.metrics.ingest.monitor.azure.us
*.usgovvirginia-1.metrics.ingest.monitor.azure.us
*.metrics.z1.ingest.monitor.azure.us
*.metrics.z2.ingest.monitor.azure.us
*.metrics.z3.ingest.monitor.azure.us
*.metrics.z4.ingest.monitor.azure.us
*.metrics.z5.ingest.monitor.azure.us
*.metrics.z6.ingest.monitor.azure.us
*.metrics.z7.ingest.monitor.azure.us
*.metrics.z8.ingest.monitor.azure.us
*.metrics.z9.ingest.monitor.azure.us
*.metrics.z10.ingest.monitor.azure.us
*.metrics.z11.ingest.monitor.azure.us
*.metrics.z12.ingest.monitor.azure.us
*.metrics.z13.ingest.monitor.azure.us
*.metrics.z14.ingest.monitor.azure.us
*.metrics.z15.ingest.monitor.azure.us
*.prod.hot.ingest.monitor.core.usgovcloudapi.net

Other certificates including the domain name usgovcloudapi.net

(limited to 100 certificates)
testonly.secretstore.usgovcloudapi.net
a169dcd5-e90f-49db-91f8-fe3e39d14e83.vpn.usgovcloudapi.net
mdsrunner.client.usgovtexas.servicefabric.usgovcloudapi.net
8383f0f0-763b-400b-816f-b4ed06345ac2.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
b2b7c601-84ed-4838-8ed0-540c0b412ac8.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
*.redis.cache.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
gc-p-dd3-cdd5db25-api.p.azurewebsites.usgovcloudapi.net
bastion.usgovcloudapi.net
e7342ee0-7f90-442a-bd54-cd4759cdfd52.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
d3619af4-7ea7-4dc5-b72d-f4e2ab6460ce.vpn.usgovcloudapi.net
591db8b3-8562-4617-a325-6220d22ec756.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
a19652d4d3a9.database.usgovcloudapi.net
*.dfs.core.usgovcloudapi.net
1d6ae19a-74b5-4890-9ec6-4ec1fad0d285.vpn.usgovcloudapi.net
*.stream-diagnostics.store.core.usgovcloudapi.net
864039e4-dc3e-4dea-810e-400dae6eeddc.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
gc-p-dd3-3db7293b.api.p.azurewebsites.usgovcloudapi.net
d16f157c-5b71-487e-b11a-5625e0f6a952.vpn.usgovcloudapi.net
gc-p-bn1-e710a604.st.p.azurewebsites.usgovcloudapi.net
bastion.usgovcloudapi.net
d169214ef3d9.database.usgovcloudapi.net
b19b35e9fe03.database.usgovcloudapi.net
fast-dod-cluster.usdodeast.cloudapp.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
gc-p-bn1-8c7135e3.st.p.azurewebsites.usgovcloudapi.net
gc-p-bn1-467b9285.pub.p.azurewebsites.usgovcloudapi.net
09c9f42f-a8d6-423b-b7c4-479331147652.vpn.usgovcloudapi.net
f8c29c68-8300-421c-9230-f4d4f170f508.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
da550243-606e-4b33-8f21-8fa3e3f4602e.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
gc-p-phx20-ed043389.st.p.azurewebsites.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
486321d5-3fa7-4f60-8498-791533e32983.vpn.usgovcloudapi.net
metricsclient.geneva.core.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
f49944af8ca3.database.usgovcloudapi.net
3839d009-1f07-4635-aa7e-91e0c2746671.vpn.usgovcloudapi.net
2c2217c1-29cf-4608-b382-b64763cffdc5.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
*.redis.cache.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
gc-p-bn1-2f405586.pub.p.azurewebsites.usgovcloudapi.net
4b9f2016-8f2b-4acd-bdd0-1345b27163e0.vpn.usgovcloudapi.net
*.redis.cache.usgovcloudapi.net
mlcssltest2tdk06.usgovvirginia.cloudapp.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
f6dead0b-5ae4-43e4-922e-4007a12f8fd0.vpn.usgovcloudapi.net
bastion.usgovcloudapi.net
enc.p.azurewebsites.usgovcloudapi.net
c5829700-d82a-4656-9d40-9f17c6bae05f.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
e4597a01-716a-45b4-ae86-d644dd31797a.vpn.usgovcloudapi.net
343cff53-806a-4d61-b485-7e343a4c2999.vpn.usgovcloudapi.net
b6f86a53bebe.database.usgovcloudapi.net
bastion.usgovcloudapi.net
*.redis.cache.usgovcloudapi.net
47a65b30-a1b2-4c2d-a176-325c617a48cf.vpn.usgovcloudapi.net
8c2a44f7-4e1f-4859-a601-42d49ed23b40.vpn.usgovcloudapi.net
enc.p.azurewebsites.usgovcloudapi.net
ee9b9658-6f75-4377-b46b-c6bade4e3afc.vpn.usgovcloudapi.net
*.redis.cache.usgovcloudapi.net
b26275e20343.database.usgovcloudapi.net
gc-p-bn1-e649a416.st.p.azurewebsites.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
Mace-Encryption.mace.usgovcloudapi.net
mlcssltestwfuou0.usgovvirginia.cloudapp.usgovcloudapi.net
gc-p-bn1-44f29f63.api.p.azurewebsites.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net
bastion.usgovcloudapi.net
adeidentity-BN1AzFApp15.diskencryption.core.usgovcloudapi.net
bastion.usgovcloudapi.net
bastion.usgovcloudapi.net
*.web.core.usgovcloudapi.net
gc-p-bn1-1335ca65.api.p.azurewebsites.usgovcloudapi.net
38b82784-fe72-44e4-adc7-54121843122a.vpn.usgovcloudapi.net
testonly.secretstore.usgovcloudapi.net

Certificate

The complete raw certificate details for prod.hot.ingest.monitor.core.usgovcloudapi.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t4lm99OzkVFdb0KGNZ8
R+TD1DecsaxSJ8cb3lILmX+jbLWbchGH7cjLVFX/FKouU8zwhCbZCIy7OiZh5LiU
Iqps/UdcInFSt1G5rHt0fwYxXgD0Y/r2doEZVCSJXXXvyHrVJ0gwT89crCacQNCA
iVvqNQKbqlszpfbLpbALZgviauCOG8+sNmP964G+kpt2+kskGoY2nY974eTspLP4
93w3myvuQRr2Fy9ERJmfTp3LPNy1mu166LGcJIgL6YswTaTSxw05J5s2AKySM8gk
0LLbZPGrAnzqfjHU3B5LdYouBGZR0orBm/6oW2muAG4TqI34rA9pEiTJGLZOhUar
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20993815354248351807717986766505325442
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.hot.ingest.monitor.core.usgovcloudapi.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27629495206548057495252406207054765796155033775292018194928097937740582048029062676989999800643142938327608348617346113089079245688645040913263153996766337785351892037313280314091289012095264357882456718326484062053052362760543733558780387002715032641612368186026775964819598542589352633414322560742184121994936786270178036903061549537311894319350457492224536875831850732689470675911541021082768974973307999601773585417085083882859543628466358117609337559114896845334333258528718457392164488164394655908353980728086889642459007479718039070946370259591299837509242583626496172046894846028691634797583373767657510054717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54b01f7c8ccc1c1c17f773816eb1d7158f50ca4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (887 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.hot.ingest.monitor.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.hot.ingestion.msftcloudes.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monitoring.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usgovtexas-1.metrics.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usgovarizona-1.metrics.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usgovvirginia-1.metrics.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.z1.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.z2.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.z3.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.z4.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.z5.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.z6.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.z7.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.z8.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.z9.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.z10.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.z11.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.z12.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.z13.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.z14.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrics.z15.ingest.monitor.azure.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.hot.ingest.monitor.core.usgovcloudapi.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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