www.quantil.com

- Quantil, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:ff:3d:97:eb:13:f1:e9:55:43:d1:8c:c8:4d:94:bf was issued on by DigiCert Inc.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Quantil, Inc.

Organization: Quantil, Inc.
State / Province: CA
Locality: Santa Clara
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:ff:3d:97:eb:13:f1:e9:55:43:d1:8c:c8:4d:94:bf
Serial Number (int): 7971424941042412108751643855532430527
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 4c:4c:e9:62:bc:7b:77:9d:53:f2:3a:3a:3a:03:7a:a1:b8:a9:19:ec
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 0b:61:68:72:db:91:0e:5b:2a:18:ba:df:76:6a:bd:b6:0a:ab:9f:47
Fingerprint (sha256): 2b:60:a2:10:d3:a7:8b:67:e2:45:38:2d:42:52:22:dd:db:d6:02:db:1d:bf:0c:a9:88:52:5c:26:79:2a:08:0f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl

Check the revocation status for certificate www.quantil.com

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.quantil.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.quantil.com
quantil.com
*.mileweb.com
*.quantil.com
*.qtlcn.com
*.mwtrial.info
*.3ds.com
www.mileweb.com
www.darwinex.com
testing.darwinex.com
static.ap.hummingbird.economist.com
api.hummingbird.economist.com
gbr.economist.com
s13.crm.expion.cn
investor.darwinex.com
demo.investor.darwinex.com
objects.airfrance.com
quantil.xmos.com
cdn-uat.giuseppezanotti.com
cdn-pro.giuseppezanotti.com
cdn.giuseppezanottidesign.com
www.ballantinesgolfclub.com
test-qtl.cas.org
www.xmos.com
www.etoro.cn

Other certificates including the domain name quantil.com

(limited to 100 certificates)
www.quantil.com
cactus.quantil.com
test.cdnpro.quantil.com
*.quantil.com
www.quantil.com
lim.quantil.com
www.quantil.com
test1.quantil.com
www.quantil.com
marketing.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
www-test.qtlglb.com
www.quantil.com
www.quantil.com
www.quantil.com
docdev-acc.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
marketing.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
testqtlcli.qtlglb.com
www.quantil.com
www.quantil.com
ngcert-integration.quantil.com
dlrproxy.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
*.quantil.com
www.quantil.com
wscloudcdn.quantil.com
www.quantil.com
docs.quantil.com
www.quantil.com
ms.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
ngapi-acc.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
*.quantil.com
www.quantil.com
lim.quantil.com
www.quantil.com
www.quantil.com
console.quantil.com
www.quantil.com
bill.quantil.com
myip.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
beianmonitor.quantil.com
www.quantil.com
*.quantil.com
*.quantil.com
api-acc.quantil.com
oss.quantil.com
apm-it.quantil.com
www.quantil.com
www.quantil.com
ngapi-integration-acc.quantil.com
www.quantil.com
*.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
www.quantil.com
*.quantil.com
oss.quantil.com
www.quantil.com
*.quantil.com
*.quantil.com
ngcert.quantil.com
wscloudcdn.quantil.com
www.quantil.com
www.quantil.com
quantil.com
wiki.quantil.com
beianmonitor.quantil.com
www.quantil.com
www.quantil.com
notify.quantil.com

Certificate

The complete raw certificate details for www.quantil.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpPihVyf7NttR3oHR/h7
WgySFtjVxim3lQ6iJwtDpiSebEbB9Bh89Jda2Di08P/VfoyauwaCaqaYvYCuMfHh
f29OGvWx/756/GRnFCX77bd89h9ww40saPx9OdY5mQhn2X0HssdeGZL4yJOOmgTr
QvyY5jA8qQnsryGYWMzbk2wPZc9ponTsqeO+16KVuzZAr4F+LLKpEZAgLHS0WCxN
b0Bfqhr3fr1BPwSVBA626HkjMLEb4SkQsqHAdcowBDBwRVe+Gt3K62qVVj2FE2xA
R8no+RtT8V1iFG7O0ReyKkAOzrkB3aT16dhfNPg56joAo+c9Y8dLy1qVpd4GABzu
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7971424941042412108751643855532430527
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Clara'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quantil, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.quantil.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20018576920851971504709895226581530929104483197365083281463727731610057304180822405721272355937229844618374203769878982005582474930022239253645703926800350549678511885166830966872024237804282806049726770861573802691957695292146292579338563806372433584924303677652592607865016854305597969862753313592480326721622884793688080816188910056581534800411143414729357235200803073816218582891087642899518589025549366770423401789957941511543812953800267491521047622428190001896568440078019879681240118742873123021290627000869339791176942632898006046840787727190510321324518174606853966877855410748225815013227277791861015375561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c4ce962bc7b779d53f23a3a3a037aa1b8a919ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (523 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quantil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quantil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mileweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quantil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qtlcn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mwtrial.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3ds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mileweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darwinex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.darwinex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.ap.hummingbird.economist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.hummingbird.economist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbr.economist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's13.crm.expion.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.darwinex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.investor.darwinex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'objects.airfrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quantil.xmos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-uat.giuseppezanotti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-pro.giuseppezanotti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.giuseppezanottidesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ballantinesgolfclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-qtl.cas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xmos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etoro.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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