eks-nonprod-classic-rest-api.dev.adtech.de

- Oath Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 02:ed:ae:6f:0f:c6:c4:9f:f7:65:74:ba:96:9e:72:19 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oath Inc

Organization: Oath Inc
State / Province: California
Locality: Sunnyvale
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:ed:ae:6f:0f:c6:c4:9f:f7:65:74:ba:96:9e:72:19
Serial Number (int): 3892568285522231362058187278187917849
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 2d:e0:a2:03:66:a9:21:8c:5d:cc:af:ca:39:8c:77:e8:d3:0b:f4:01
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 24:0b:dd:e5:2e:a0:e0:4e:14:c4:23:fc:f8:55:1d:62:df:a3:a8:30
Fingerprint (sha256): 2b:b3:28:e5:53:ed:11:d3:b8:19:3d:e4:49:5d:29:47:4c:e3:ff:5e:7d:20:6c:3b:c2:a1:45:83:cb:2f:a8:ce

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate eks-nonprod-classic-rest-api.dev.adtech.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eks-nonprod-classic-rest-api.dev.adtech.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eks-nonprod-classic-rest-api.dev.adtech.de
eks-nonprod-api-selene.dev.adtech.de
eks-nonprod-classic-api.dev.adtechus.com
eks-nonprod-classic-api.dev.adtech.de
eks-nonprod-api-selene.dev.adtechus.com
eks-nonprod-classic-rest-api.dev.adtechus.com

Other certificates including the domain name adtech.de

(limited to 100 certificates)
targeting-service.adtech.de
console.oneadserver.aol.de
report.adtech.de
aka-cdn.adtech.de
consent.oath.com
formula-api.adtech.de
targeting.oneadserver.aol.de
console.oneadserver.aol.de
pri-adserver-origin-eu.prod.adtech.de
stage.consent.oath.com
stage.guce2.oath.com
aka-cdn.adtech.de
*.adtech.de
selene-api.reserved-adserver-dev.aws.oath.cloud
stage.consent.oath.com
api.oneadserver.aol.com
stage.consent.oath.com
pri-adserver-origin-eu.prod.adtech.de
imspro.oneadserver.aol.de
stage.consent.oath.com
console.oneadserver.aol.de
ws.adtech.de
nonprod-classic-rest-api.dev.adtech.de
console.oneadserver.aol.de
aka-cdn.adtech.de
selene.oneadserver.aol.com
learnapi.oneadserver.aol.de
aka-cdn.adtech.de
*.adtech.de
api.oneadserver.aol.com
console-pr.oneadserver.aol.de
api.oneadserver.aol.com
selene.oneadserver.aol.com
1as-bannertest.adtech.de
selene.oneadserver.aol.com
imspro.oneadserver.aol.de
formula-api.adtech.de
pri-adserver-origin-eu.prod.adtech.de
trunk.consent.oath.com
ws2.adtech.de
consent.oath.com
consent.oath.com
imspro.oneadserver.aol.de
consent.oath.com
targeting-service.adtech.de
api.oneadserver.aol.com
console.oneadserver.aol.de
console.oneadserver.aol.de
pri-adserver-origin-eu.prod.adtech.de
imspro.oneadserver.aol.de
vlibs.eu-central-1.dev.adtech.de
stage.consent.oath.com
trunk.consent.oath.com
trunk.consent.oath.com
stage.consent.oath.com
assets.oneadserver.aol.de
*.adtech.de
console.oneadserver.aol.de
console-pr.oneadserver.aol.de
trunk.consent.oath.com
stage.consent.oath.com
formula-api.adtech.de
api.oneadserver.aol.com
adserver.adtech.de
console-pr.oneadserver.aol.de
consent.oath.com
cstest.oneadserver.aol.com
console-pr.oneadserver.aol.com
nonprod-classic-rest-api.dev.adtech.de
trunk.consent.oath.com
console-pr.oneadserver.aol.de
pri-adserver-origin-eu.prod.adtech.de
console.oneadserver.aol.de
eks-nonprod-classic-rest-api.dev.adtech.de
trunk.consent.oath.com
stage.consent.oath.com
*.adtech.de
nonprod-classic-rest-api.dev.adtech.de
consent.oath.com
consent.oath.com
stage.consent.oath.com
consent.oath.com
imspro.oneadserver.aol.de
formula-api.adtech.de
a.adtech.de
aka-cdn.adtech.de
pri-adserver-origin-eu.prod.adtech.de
consent.oath.com
stage.consent.oath.com
aka-cdn.adtech.de
aka-cdn.adtech.de
trunk.consent.oath.com
formula-api.adtech.de
consent.oath.com
api.oneadserver.aol.com
stage.guce2.oath.com
console.oneadserver.aol.de
pri-adserver-origin-eu.prod.adtech.de
formula-api.adtech.de
trunk.consent.oath.com

Certificate

The complete raw certificate details for eks-nonprod-classic-rest-api.dev.adtech.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIQAu2ubw/GxJ/3ZXS6lp5yGTANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0yMDA4MjYwMDAwMDBaFw0yMTAyMTcxMjAwMDBa
MH4xCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRIwEAYDVQQHEwlT
dW5ueXZhbGUxETAPBgNVBAoTCE9hdGggSW5jMTMwMQYDVQQDEypla3Mtbm9ucHJv
ZC1jbGFzc2ljLXJlc3QtYXBpLmRldi5hZHRlY2guZGUwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQC4anwFErWYrbOEB3ghMXu0OdaTXbaemvPwIeMxVTqp
tIBva8TKLLiDREnZmSGSQLV3+QyC6BFngFktXgG0mbsBj0E/TTTpZY3B67IXmX4e
YTEvE0n7wSRfATn6BUfPSn39VQNSXy3/v5Sk7AKhbw3xEXs5eEVA3OAXaMJqC6KN
eMHUb4KNKS2MR5+mxVf85jsPw4rwXmUyG3vTjSC7Z1owvAmr+H9TYLIo5jrtbIZJ
bfvVX7Wy7Y+Pr9rr4+LtXs17c/Fd9rFHlGmfGIXPUngaXiq2aBSWlrwp+HHOu6DI
H1Wb8tKwDlUD1VIj+Qq6zfMrJVoITstMCKNVq2CxcgxHAgMBAAGjggLrMIIC5zAf
BgNVHSMEGDAWgBRRaP+QrwIHdTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQULeCiA2ap
IYxdzK/KOYx36NML9AEwggEGBgNVHREEgf4wgfuCKmVrcy1ub25wcm9kLWNsYXNz
aWMtcmVzdC1hcGkuZGV2LmFkdGVjaC5kZYIkZWtzLW5vbnByb2QtYXBpLXNlbGVu
ZS5kZXYuYWR0ZWNoLmRlgihla3Mtbm9ucHJvZC1jbGFzc2ljLWFwaS5kZXYuYWR0
ZWNodXMuY29tgiVla3Mtbm9ucHJvZC1jbGFzc2ljLWFwaS5kZXYuYWR0ZWNoLmRl
gidla3Mtbm9ucHJvZC1hcGktc2VsZW5lLmRldi5hZHRlY2h1cy5jb22CLWVrcy1u
b25wcm9kLWNsYXNzaWMtcmVzdC1hcGkuZGV2LmFkdGVjaHVzLmNvbTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRu
MGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZl
ci1nNi5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWhh
LXNlcnZlci1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEF
BQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwgYMG
CCsGAQUFBwEBBHcwdTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQu
Y29tME0GCCsGAQUFBzAChkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGln
aUNlcnRTSEEySGlnaEFzc3VyYW5jZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAA
MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBaDYaoV7TH
4dkCGuPNDQHHglZlhpicMAZH3SNWcUwPdvTTMe+/C81PVOovEtfkIe3jm16/55Ec
YBH8T43MrE4zumm9DU9+7/FVQwNUJ/UfIaZU5qloUY5e3rkdHtpQZDSKDc+gf2rr
FpDgGjjD6YWjRTBiKjoq4unEp+NBx9OshVTYct8ZA4L7gOa5/ajCZMc1clWVJogm
II5vUJQ6G0ByouTzkwwjPxUA6nbxokSy4CQ7m0m5l+omxBWdBkvNtSDabBrkCMZb
fCoHUsI+1/3IoA0Qc+l2mDzTWnA2WB5mIOgp82MCMjYdA+GiGZK5f+T8nhE8jlAI
jEjE3w/Z9PVv
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGp8BRK1mK2zhAd4ITF7
tDnWk122nprz8CHjMVU6qbSAb2vEyiy4g0RJ2ZkhkkC1d/kMgugRZ4BZLV4BtJm7
AY9BP0006WWNweuyF5l+HmExLxNJ+8EkXwE5+gVHz0p9/VUDUl8t/7+UpOwCoW8N
8RF7OXhFQNzgF2jCaguijXjB1G+CjSktjEefpsVX/OY7D8OK8F5lMht7040gu2da
MLwJq/h/U2CyKOY67WyGSW371V+1su2Pj6/a6+Pi7V7Ne3PxXfaxR5RpnxiFz1J4
Gl4qtmgUlpa8KfhxzrugyB9Vm/LSsA5VA9VSI/kKus3zKyVaCE7LTAijVatgsXIM
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3892568285522231362058187278187917849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunnyvale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oath Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eks-nonprod-classic-rest-api.dev.adtech.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23280357554291368527661791538836526495841376264772475442095254436614285797117620559649023699586263019887129939931234922554415910683733999469794793229390651865544499151994617674318067103481552310928622075569011403356362657160792702233332621450526141833949184193710183343486956139612365411250668430118314247066717807630079621836327415037435084521028653309571175027204091371999193759255725340653275318790101246113245250672799732973339807908403401267637327327126637900423560023838086071956082348577036574838060228016610744676563661408427775884041949997630025604039014143550167007460503796663110018903511667011842152205383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2de0a20366a9218c5dccafca398c77e8d30bf401
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (254 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eks-nonprod-classic-rest-api.dev.adtech.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eks-nonprod-api-selene.dev.adtech.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eks-nonprod-classic-api.dev.adtechus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eks-nonprod-classic-api.dev.adtech.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eks-nonprod-api-selene.dev.adtechus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eks-nonprod-classic-rest-api.dev.adtechus.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a0d86a857b4c7e1d9021ae3cd0d01c782566586989c300647dd2356714c0f76f4d331efbf0bcd4f54ea2f12d7e421ede39b5ebfe7911c6011fc4f8dccac4e33ba69bd0d4f7eeff15543035427f51f21a654e6a968518e5edeb91d1eda5064348a0dcfa07f6aeb1690e01a38c3e985a34530622a3a2ae2e9c4a7e341c7d3ac8554d872df190382fb80e6b9fda8c264c735725595268826208e6f50943a1b4072a2e4f3930c233f1500ea76f1a244b2e0243b9b49b997ea26c4159d064bcdb520da6c1ae408c65b7c2a0752c23ed7fdc8a00d1073e976983cd35a7036581e6620e829f3630232361d03e1a21992b97fe4fc9e113c8e50088c48c4df0fd9f4f56f