securessl-ap.tessituranetworkhost.com

- Tessitura Network, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 08:29:5b:a9:24:4f:0c:a3:f3:87:59:5e:65:4a:93:a8 was issued on by DigiCert Inc.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tessitura Network, Inc.

Organization: Tessitura Network, Inc.
State / Province: TX
Locality: Dallas
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:29:5b:a9:24:4f:0c:a3:f3:87:59:5e:65:4a:93:a8
Serial Number (int): 10848567237549677314764988704862409640
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3b:f3:ec:89:8f:9b:80:5b:d2:0e:d3:ad:b6:f9:1f:c6:29:b3:b8:19
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 6f:da:20:ac:d7:30:fc:8b:9c:34:10:67:01:b7:c2:87:75:20:e5:17
Fingerprint (sha256): 29:fc:4b:f4:9c:38:22:a1:59:95:ae:23:93:ba:47:8c:78:78:ae:89:70:c6:21:c6:e9:b7:13:39:1d:93:6a:d3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl

Check the revocation status for certificate securessl-ap.tessituranetworkhost.com

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securessl-ap.tessituranetworkhost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

securessl-ap.tessituranetworkhost.com
my.nzso.co.nz
myaccount.aucklandmuseum.com
purchase.apo.co.nz
www.mynzballet.org.nz
tickets.musicaviva.com.au
tickets.cityrecitalhall.com
tickets.queenslandtheatre.com.au
tickets.perthfestival.com.au
my.aso.com.au
shop.mona.net.au
subscriptions.artscentremelbourne.com.au
secure.portrait.gov.au
ticketing.anam.com.au
my.victorianopera.com.au
tickets.swf.org.au
tickets.brandenburg.com.au
shop.bellshakespeare.com.au
tickets.tso.com.au
tickets.waso.com.au
tickets.festival.melbourne
purchase.queenslandballet.com.au
welcome.griffintheatre.com.au
supporters.nida.edu.au
shop.qso.com.au
my.bangarra.com.au
boxoffice.seymourcentre.com
tickets.perthconcerthall.com.au
connect.ngv.vic.gov.au
my.belvoir.com.au
tickets.mofo.net.au
shop.nzopera.com
tickets.sydneysymphony.com
tickets.mona.net.au

Other certificates including the domain name tessituranetworkhost.com

(limited to 100 certificates)
securessl-pst1.tessituranetworkhost.com
incapsula.com
securessl-eu.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-mst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
sdna-paloapp.tessituranetworkramp.com
securessl-cst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-mst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
*.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-mst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-mst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com

Certificate

The complete raw certificate details for securessl-ap.tessituranetworkhost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2O7HbZ0v4Y4ZvD5VpNFo
IIxnUUohZnacmmP6uBSRen+hyvy8xAZiLTgbEKl2T8Zw5UJCkRnBcHcHeg+JThy9
3u6ekGGHpuwtFDTa0GVHAZzdXnBdPZ+lW/oQmseSkqU0DlhfLXEF/H+SBU/+kXUW
whCmFkD1NfDgMepXQEnxTioq+8S8oVvfrTSJ6fzdf/xfsKNzhcBxsr/xOpamBykl
CeVP4pezUpdG86heSJT8igd2tzxPFKMABu67DY8tbhLGUMiYQGDBRSQn73211RA7
WKIt+zNVp1chwREOiQ91K6E1rExlJQnBTo5vGPn5rQZRD3yvobloD756KhO3E8ah
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10848567237549677314764988704862409640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tessitura Network, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securessl-ap.tessituranetworkhost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27385220194085045517146656270285859101754411618272013530954421233605258538974576006365599338877433009951421653292603524732233383484774456015381975832605108501373996195682963768534439254004295388171009787842120525284262471351722104293145716249341267054409053833866938172387684573926594387642211453066197090742456477626833087868533980109340378431259121798089331449006510200850111850100040308385472633723949366738149308264591200720468568589094677100749159689055453438687857020509659527274839987610236145529517733878175932021486319123920737908224060419287748567663478671337826374013890469384992987422370345414745110520227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3bf3ec898f9b805bd20ed3adb6f91fc629b3b819
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (864 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securessl-ap.tessituranetworkhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.nzso.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.aucklandmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.apo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mynzballet.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.musicaviva.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.cityrecitalhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.queenslandtheatre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.perthfestival.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.aso.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mona.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriptions.artscentremelbourne.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.portrait.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.anam.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.victorianopera.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.swf.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.brandenburg.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bellshakespeare.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.tso.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.waso.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.festival.melbourne'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.queenslandballet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome.griffintheatre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporters.nida.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.qso.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.bangarra.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.seymourcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.perthconcerthall.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ngv.vic.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.belvoir.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mofo.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.nzopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.sydneysymphony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mona.net.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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