vpn.ocubis.co.uk

- Ocubis Ltd -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:c1:59:73:b1:d3:c6:30:5f:2d:92:f8:56:e8:f8:04 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ocubis Ltd

Organization: Ocubis Ltd
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:c1:59:73:b1:d3:c6:30:5f:2d:92:f8:56:e8:f8:04
Serial Number (int): 19613119535414324099208626249205872644
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6f:d8:a9:ba:f6:2e:53:84:fa:dc:0b:0e:04:74:64:a6:35:ed:b6:a3
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): ec:f4:0a:49:be:e3:8b:d4:36:c5:98:e5:87:2e:07:15:c7:ed:95:57
Fingerprint (sha256): 2a:3c:1a:bb:22:0e:e7:b9:eb:dd:44:e3:73:34:83:06:1c:3a:39:99:ae:5a:fd:3a:c8:b3:d6:36:9e:02:eb:1a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate vpn.ocubis.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.ocubis.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.ocubis.co.uk

Other certificates including the domain name ocubis.co.uk

(limited to 100 certificates)
servicedesk.usspeaking.com
ithelpdesk.dccoilireland.com
helpdesk.hlnsc.ac.uk
ithelp.visionrt.com
servicedesk.usspeaking.com
servicedesk.hermesairports.com
helpdesk.kleen-tex.eu
itdesk.mkspamp.com
support.erm.com
it.littlegarth.org
helpdesk.kleen-tex.eu
servicedesk.hafenwien.com
itservice.wearebulletproof.com
support.erm.com
servicedesk.danbred.com
ithelpdesk.farnboroughairport.com
ithelp.visionrt.com
helpdesk.troax.com
vpn.ocubis.co.uk
ithelpdesk.farnboroughairport.com
servicedesk.kuits.com
soporte.llorenteycuenca.com
ithelpdesk.ocubis.co.uk
ithelpdesk.farnboroughairport.com
ithelpdesk.dccoilireland.com
*.ocubis.co.uk
cau.sas-agri.com
servicedesk.vhg.co.uk
support.erm.com
ithelpdesk.dccoilireland.com
servicedesk.hermesairports.com
ocubis.co.uk
servicedesk.hermesairports.com
ithelpdesk.dccoilireland.com
ithelpdesk.farnboroughairport.com
helpdesk.fast.eu
helpdesk.kleen-tex.eu
it.littlegarth.org
ithelpdesk.dccoilireland.com
ithelpdesk.farnboroughairport.com
it.littlegarth.org
servicedesk.hafenwien.com
portalgestion.gruposiete.es
ithelpdesk.dccoilireland.com
servicedesk.nilgosc.org.uk
techsupport.mickgeorge.co.uk
soporte.llorenteycuenca.com
servicedesk.kuits.com
servicedesk.hermesairports.com
servicedesk.hermesairports.com
helpdesk.criticaltechworks.com
soporte.llorenteycuenca.com
ithelpdesk.dccoilireland.com
itdesk.mkspamp.com
vpn.ocubis.co.uk
servicedesk.hermesairports.com
support.erm.com
support.jjhousing.co.uk
helpdesk.hlnsc.ac.uk
ithelpdesk.holmes-hills.co.uk
ithelpdesk.dccoilireland.com
servicedesk.nilgosc.org.uk
ithelpdesk.farnboroughairport.com
helpdesk.usborne.co.uk
ithelpdesk.farnboroughairport.com
servicedesk.groupe-r.ch
ithelpdesk.farnboroughairport.com
servicedesk.hermesairports.com
servicedesk.usspeaking.com
servicedesk.usspeaking.com
helpdesk.troax.com
itsupport.alphaplusgroup.co.uk
helpdesk.troax.com
helpdesk.troax.com
servicedesk.fynbus.dk
helpdesk.fsbtech.com
soporte.llorenteycuenca.com
servicedesk.hermesairports.com
helpdesk.fast.eu
itdesk.mkspamp.com
ithelpdesk.holmes-hills.co.uk
ithelpdesk.ocubis.co.uk
ithelpdesk.ocubis.co.uk
servicedesk.hermesairports.com
ithelpdesk.farnboroughairport.com
helpdesk.hlnsc.ac.uk
helpdesk.kleen-tex.eu
servicedesk.hermesairports.com
ithelpdesk.farnboroughairport.com
it.littlegarth.org
helpdesk.hlnsc.ac.uk
support.claytonglass.co.uk
itsupport.clinisys.com
servicedesk.hermesairports.com
ithelpdesk.holmes-hills.co.uk
ithelpdesk.ocubis.co.uk

Certificate

The complete raw certificate details for vpn.ocubis.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIQDsFZc7HTxjBfLZL4Vuj4BDANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTcxMDMxMDAwMDAwWhcN
MTkxMDE3MTIwMDAwWjBOMQswCQYDVQQGEwJHQjEPMA0GA1UEBxMGTG9uZG9uMRMw
EQYDVQQKEwpPY3ViaXMgTHRkMRkwFwYDVQQDExB2cG4ub2N1YmlzLmNvLnVrMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lyiybPjGLZ49D6zIDjw9PU7
GxENBySt+xdhfaBm2sSUI+7z+a7jhPrVB+l2vtWJZXFRF2kWWBWQeHy7f3QRSjKP
BLR2J+T+jYf1KSCsSYKDcjahjMYB1VvA2IuTVpKRgMqk4ocPZREx5HoqIWSCcwBf
lUELTd5L1s3S7j1qUI3pCv13qnvkrwx5/LYjD1k9WbG3BddU1cnR90aOOe0Sk+0z
/gRSpKZRO8MObME9M1ojrwbjufpJuFzkZ90kneCSb7smDyxSNMUlhtbiVzgKMRoN
sNRRLIQM0YMc79NS738UMdsVIe7cxcaxiglKxxB38CL/KE/YvBtmUS5yIGCccQID
AQABo4IB1zCCAdMwHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYD
VR0OBBYEFG/Yqbr2LlOE+twLDgR0ZKY17bajMBsGA1UdEQQUMBKCEHZwbi5vY3Vi
aXMuY28udWswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5j
b20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQu
Y29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAo
BggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwB
AgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp
Y2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv
bS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADAN
BgkqhkiG9w0BAQsFAAOCAQEAdys/JoWY+1rEfwEbG1KRqPaAVkmIblErMtgNzHk0
nbRJULyDVBPEimFLhWpj48pMbdOxBPfDkaQU0f67kcnFafan3oevB9c31vLKid3o
NW+gHHk32GDraRiwBXuHE0TwvpdViLomVuV3yQzgwTRmH3Lj9qT2uKXdwKvMAZVO
HIM/hm/hXbCJ8rUEAfgRyXFUhqMnilHLTa/E+arK2T49Jy4wC6+35ZgXlZEAXu21
33FULcKbpkCnsge3ohuKIvCqghlR30PfO1bRzvlvwWCqNEuuHVSVIml0JsUfDANE
qlYK91we9XUPwiArTJv9MVkf2GmDo0okV1CN0kgLLzH4qw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lyiybPjGLZ49D6zIDjw
9PU7GxENBySt+xdhfaBm2sSUI+7z+a7jhPrVB+l2vtWJZXFRF2kWWBWQeHy7f3QR
SjKPBLR2J+T+jYf1KSCsSYKDcjahjMYB1VvA2IuTVpKRgMqk4ocPZREx5HoqIWSC
cwBflUELTd5L1s3S7j1qUI3pCv13qnvkrwx5/LYjD1k9WbG3BddU1cnR90aOOe0S
k+0z/gRSpKZRO8MObME9M1ojrwbjufpJuFzkZ90kneCSb7smDyxSNMUlhtbiVzgK
MRoNsNRRLIQM0YMc79NS738UMdsVIe7cxcaxiglKxxB38CL/KE/YvBtmUS5yIGCc
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19613119535414324099208626249205872644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ocubis Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.ocubis.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26555724502883077687201184644330950882423442642027362225416004669796836378048547534177792866720502825280902063908127674569602757670957994549279904594633266545837188188773755176840798513499470060045992260010194974389033713853305322150667830101535783916865496645693448263657115439081478425893241845209591481948406183887976061111996203630802225041312817174769020915116551936959774307711141914178541442159213779923023810792576594207399315153231475391409509908389092873644180983683364338398060683015558005880956480014642486311401035148688199654675822703786482977255116588654683927958552120994495421734888799841547473427569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6fd8a9baf62e5384fadc0b0e047464a635edb6a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.ocubis.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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