secure5.exceda.com

- Exceda LTDA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:6a:5e:46:18:0f:36:10:20:47:0f:86:3e:bb:89:0f was issued on by DigiCert Inc.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Exceda LTDA

Organization: Exceda LTDA
State / Province: Sao Paulo
Locality: Sao Paulo
Country: BR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:6a:5e:46:18:0f:36:10:20:47:0f:86:3e:bb:89:0f
Serial Number (int): 12515347528989083268552304772140206351
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 52:bf:73:67:9f:ec:09:4d:91:6d:f2:96:ff:d8:10:27:60:c7:6f:4b
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): fb:3f:a2:43:e9:ed:bc:2e:b3:ac:a1:13:8d:12:f5:b4:82:4c:9a:cc
Fingerprint (sha256): 28:7e:3d:c5:ff:c8:13:61:5e:9c:b0:cf:d7:e3:40:9e:19:ca:2e:71:2e:70:c8:3a:ae:e3:ef:e7:5d:55:ca:11

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate secure5.exceda.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure5.exceda.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure5.exceda.com
www.tenda.com
www.lockey.com.br
dev.lockey.com.br
images.a12.com
images.concursodasorte.com.br
www.emporioforte.com.br
pegasus.lockey.com.br
www.auxiliadorapredial.com.br
assets1.icasei.com.br
www.a12.com
aka.lojanike.com.br
www.centraldafisioterapia.com.br
alock.lockey.com.br
tendacomvoce.tenda.com.br
api.lockey.com.br
revista.icasei.com.br
homologacao.lockey.com.br
www.lacoscorporativos.com.br
oferta.lockey.com.br
portal.auxiliadorapredial.com.br
www.coroasparavelorio.com.br
fonts.icasei.com.br
www.chavesnamao.com.br

Other certificates including the domain name exceda.com

(limited to 100 certificates)
secure3.exceda.com
secure1.exceda.com
secure5.exceda.com
secure2.exceda.com
secure3.exceda.com
secure5.exceda.com
secure5.exceda.com
secure3.exceda.com
secure1.exceda.com
*.exceda.com
secure3.exceda.com
secure1.exceda.com
secure1.exceda.com
secure1.exceda.com
secure5.exceda.com
secure1.exceda.com
secure3.exceda.com
secure4.exceda.com
secure1.exceda.com
secure3.exceda.com
secure1.exceda.com
secure2.exceda.com
secure4.exceda.com
secure1.exceda.com
secure4.exceda.com
secure4.exceda.com
secure1.exceda.com
secure4.exceda.com
secure1.exceda.com
secure4.exceda.com
secure5.exceda.com
secure1.exceda.com
secure1.exceda.com
secure3.exceda.com
secure2.exceda.com
secure3.exceda.com
secure5.exceda.com
secure1.exceda.com
secure3.exceda.com
secure1.exceda.com
secure1us.exceda.com
secure3.exceda.com
secure5.exceda.com
secure4.exceda.com
secure3.exceda.com
secure1.exceda.com
secure1.exceda.com
secure3.exceda.com
secure2.exceda.com
secure1us.exceda.com
secure2.exceda.com
secure1.exceda.com
secure2.exceda.com
secure1.exceda.com
secure3.exceda.com
secure3.exceda.com
secure3.exceda.com
secure3.exceda.com
secure5.exceda.com
secure1us.exceda.com
secure3.exceda.com
secure1us.exceda.com
secure1us.exceda.com
secure2.exceda.com
secure2.exceda.com
secure1.exceda.com
secure1.exceda.com
secure1.exceda.com
www.exceda.com
secure1.exceda.com
secure3.exceda.com
secure3.exceda.com
secure1.exceda.com
secure3.exceda.com
*.exceda.com
secure1.exceda.com
secure3.exceda.com
secure1.exceda.com
secure3.exceda.com
secure3.exceda.com
secure1.exceda.com
secure4.exceda.com
secure1.exceda.com
secure3.exceda.com
stls1us.exceda.com
secure1.exceda.com
secure2.exceda.com
secure1.exceda.com
secure3.exceda.com
secure4.exceda.com
secure1us.exceda.com
*.exceda.com
secure3.exceda.com
secure1.exceda.com
secure5.exceda.com
secure1.exceda.com
secure3.exceda.com
secure5.exceda.com
secure4.exceda.com
secure3.exceda.com

Certificate

The complete raw certificate details for secure5.exceda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHVjCCBj6gAwIBAgIQCWpeRhgPNhAgRw+GPruJDzANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwOTA5MDAwMDAwWhcN
MjAwNDA0MTIwMDAwWjBoMQswCQYDVQQGEwJCUjESMBAGA1UECBMJU2FvIFBhdWxv
MRIwEAYDVQQHEwlTYW8gUGF1bG8xFDASBgNVBAoTC0V4Y2VkYSBMVERBMRswGQYD
VQQDExJzZWN1cmU1LmV4Y2VkYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQD6KrV1N1NJdyTNxQov/wRp2gyM+769OgYROi1uHE6DDOi1o7iE7BbE
PhFeDZm+7vDfNFZkBdpH2OScBuLX++jOZjfDu5cPDbB02G84jSt2jK4VQFZQZnMR
bsM4XPq9YwuI7U+QitONNz7hRyT0jbOV01+DvpiigC8GuPUWmCb3G+M319H7uGjk
XLKlB+7Hq9RTs57m0Mye5+RpYrLy7L6+3P6NyOOVQPOHQhJBenRn++655b3y/cmt
e8sFvfYam3FoWJsjXmQRB9Kw3YF8prUcL0MFVjSX9JFpTkCrpdMAvIHKOSI1K3eN
g0QRL+q7KAR5nENKXOim03XjE9xJo8IrAgMBAAGjggQVMIIEETAfBgNVHSMEGDAW
gBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUUr9zZ5/sCU2RbfKW/9gQ
J2DHb0swggJFBgNVHREEggI8MIICOIISc2VjdXJlNS5leGNlZGEuY29tgg13d3cu
dGVuZGEuY29tghF3d3cubG9ja2V5LmNvbS5icoIRZGV2LmxvY2tleS5jb20uYnKC
DmltYWdlcy5hMTIuY29tgh1pbWFnZXMuY29uY3Vyc29kYXNvcnRlLmNvbS5icoIX
d3d3LmVtcG9yaW9mb3J0ZS5jb20uYnKCFXBlZ2FzdXMubG9ja2V5LmNvbS5icoId
d3d3LmF1eGlsaWFkb3JhcHJlZGlhbC5jb20uYnKCFWFzc2V0czEuaWNhc2VpLmNv
bS5icoILd3d3LmExMi5jb22CE2FrYS5sb2phbmlrZS5jb20uYnKCIHd3dy5jZW50
cmFsZGFmaXNpb3RlcmFwaWEuY29tLmJyghNhbG9jay5sb2NrZXkuY29tLmJyghl0
ZW5kYWNvbXZvY2UudGVuZGEuY29tLmJyghFhcGkubG9ja2V5LmNvbS5icoIVcmV2
aXN0YS5pY2FzZWkuY29tLmJyghlob21vbG9nYWNhby5sb2NrZXkuY29tLmJyghx3
d3cubGFjb3Njb3Jwb3JhdGl2b3MuY29tLmJyghRvZmVydGEubG9ja2V5LmNvbS5i
coIgcG9ydGFsLmF1eGlsaWFkb3JhcHJlZGlhbC5jb20uYnKCHHd3dy5jb3JvYXNw
YXJhdmVsb3Jpby5jb20uYnKCE2ZvbnRzLmljYXNlaS5jb20uYnKCFnd3dy5jaGF2
ZXNuYW1hby5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdp
Y2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGln
aWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1s
AQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAI
BgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz
cC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2lj
ZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwCQYDVR0TBAIw
ADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2y1iuFTL
YuqfHEzCuDCyWRdKVoL2VQg/O9RnsiK+POHZNxdLJpnfKR0Gk7zMSYh+380gtKnQ
5Rl37bTsWv9RknsDpA3TS6CrjXLNZs+EV3ObdZRZji5tn87VRnYz38wKOgLSskM5
z7+m4HwLyX3F9au+6HJlFJgFMOLC1aKudl7f7WeIjjMP5eY9JRzib7QJ0W3HeRuO
o+xP3ZhLAnr85nm9kGnzyIqullgjiDkjL3r4dgm96pOaofku/TAg6BHDOpDOIVDc
2B0PGgZHvuChpjS52ATmrejlgt6fYUJZ95NrMNRLkT/tbTjevVPPqiIg+TglfYxP
vPf10fJW2EWLJw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+iq1dTdTSXckzcUKL/8E
adoMjPu+vToGETotbhxOgwzotaO4hOwWxD4RXg2Zvu7w3zRWZAXaR9jknAbi1/vo
zmY3w7uXDw2wdNhvOI0rdoyuFUBWUGZzEW7DOFz6vWMLiO1PkIrTjTc+4Uck9I2z
ldNfg76YooAvBrj1Fpgm9xvjN9fR+7ho5FyypQfux6vUU7Oe5tDMnufkaWKy8uy+
vtz+jcjjlUDzh0ISQXp0Z/vuueW98v3JrXvLBb32GptxaFibI15kEQfSsN2BfKa1
HC9DBVY0l/SRaU5Aq6XTALyByjkiNSt3jYNEES/quygEeZxDSlzoptN14xPcSaPC
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12515347528989083268552304772140206351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sao Paulo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sao Paulo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Exceda LTDA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure5.exceda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31580636745506573303092798034461926330455640224071835834234381119034254686911476810294793513515042203976026637224223949872971681122872896807417901821651408473426517865263773406292482895039612033361933500402716691589241494830103439244739372393783662441941335095685113494605807342417102077904925532615023960328807554626435548887155003864467690005888732328662501255146252209010228077757216116385774967372634259263321695351919675937074535601485873292430321080896639815719234725084564439110326324223027466073134926627919807528553703610126071117303105031229054094688450988765667462025178976189574837639557316132551979680299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52bf73679fec094d916df296ffd8102760c76f4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (572 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure5.exceda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lockey.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.lockey.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.a12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.concursodasorte.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emporioforte.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pegasus.lockey.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auxiliadorapredial.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets1.icasei.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aka.lojanike.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centraldafisioterapia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alock.lockey.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tendacomvoce.tenda.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lockey.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revista.icasei.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologacao.lockey.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacoscorporativos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oferta.lockey.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.auxiliadorapredial.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coroasparavelorio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonts.icasei.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chavesnamao.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00db2d62b854cb62ea9f1c4cc2b830b259174a5682f655083f3bd467b222be3ce1d937174b2699df291d0693bccc49887edfcd20b4a9d0e51977edb4ec5aff51927b03a40dd34ba0ab8d72cd66cf8457739b7594598e2e6d9fced5467633dfcc0a3a02d2b24339cfbfa6e07c0bc97dc5f5abbee8726514980530e2c2d5a2ae765edfed67888e330fe5e63d251ce26fb409d16dc7791b8ea3ec4fdd984b027afce679bd9069f3c88aae9658238839232f7af87609bdea939aa1f92efd3020e811c33a90ce2150dcd81d0f1a0647bee0a1a634b9d804e6ade8e582de9f614259f7936b30d44b913fed6d38debd53cfaa2220f938257d8c4fbcf7f5d1f256d8458b27