checkcertificatepp.peugeot.fr

- Stellantis N.V. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:ff:25:a6:ce:23:c8:50:9e:2d:56:2f:b6:5a:a3:fd was issued on by DigiCert Inc.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stellantis N.V.

Organization: Stellantis N.V.
Locality: Lijnden
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:ff:25:a6:ce:23:c8:50:9e:2d:56:2f:b6:5a:a3:fd
Serial Number (int): 3983255355323695658086174260199072765
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 2f:30:2f:01:c7:df:4e:0f:6e:fc:78:90:1f:f3:cc:0d:43:f0:b1:3c
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 86:61:41:cc:51:54:eb:3f:23:4e:aa:3e:c2:6e:72:bd:15:99:05:f6
Fingerprint (sha256): 2c:c5:cf:48:0f:97:1e:c6:15:64:33:65:1c:b9:cf:79:62:f2:90:37:4d:eb:71:90:96:48:e6:53:0c:16:ca:4f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate checkcertificatepp.peugeot.fr

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for checkcertificatepp.peugeot.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

checkcertificatepp.peugeot.fr
checkcertificatepp.citroen.fr
checkcertificatepp.dsautomobiles.fr
checkcertificatepp.opel.fr
checkcertificatepp.peugeotisland.is
checkcertificatepp.citroen.is
checkcertificatepp.opel.is
checkcertificatepp.peugeot.ch
checkcertificatepp.citroen.ch
checkcertificatepp.dsautomobiles.ch
checkcertificatepp.opel.ch
checkcertificatepp.peugeot.co.uk
checkcertificatepp.citroen.co.uk
checkcertificatepp.dsautomobiles.co.uk
checkcertificatepp.vauxhall.co.uk

Other certificates including the domain name peugeot.fr

(limited to 100 certificates)
dev.services-store.peugeot.com
fix.services-store.peugeot.fr
www.reseau.peugeot.fr
inf-admin.services-store.peugeot.com
pat.services-store.dsautomobiles.com
form.peugeot.fr
uat.test.sams.dsautomobiles.fr
cycles.peugeot.com
uat.admin.sams.dsautomobiles.fr
inf.services-store.dsautomobiles.com
offres.peugeot.fr
pat.services-store.dsautomobiles.com
cycles.peugeot.fr
fix.services-store.peugeot.fr
pat-admin.services-store.peugeot.com
pat-admin.services-store.dsautomobiles.com
dev.services-store.dsautomobiles.com
dev-admin.services-store.peugeot.com
inf.services-store.dsautomobiles.com
ppr-admin.services-store.peugeot.com
uat.test.sams.dsautomobiles.fr
dev.admin.sams.dsautomobiles.fr
trn-admin.services-store.dsautomobiles.com
uat.test.sams.dsautomobiles.fr
pat.services-store.dsautomobiles.com
uat.test.sams.peugeot.fr
new208booking.peugeot.fr
pat.services-store.dsautomobiles.com
new208booking.peugeot.fr
pat-admin.services-store.peugeot.com
ppr-admin.services-store.dsautomobiles.com
pat.services-store.peugeot.com
pat.services-store.dsautomobiles.com
cartographie.peugeot.fr
lesalon.peugeot.fr
trn.services-store.dsautomobiles.com
inf-admin.services-store.peugeot.com
*.peugeot.fr
dev.services-store.dsautomobiles.com
*.peugeot.fr
dev-admin.services-store.dsautomobiles.com
fix.services-store.peugeot.com
pat-admin.services-store.peugeot.com
pat.services-store.dsautomobiles.com
uat.services-store.dsautomobiles.com
services-store.peugeot.fr
www.peugeot.fr
pat.sams.dsautomobiles.fr
dev.services-store.peugeot.com
fix.services-store.peugeot.fr
peugeot.fr
ppr.services-store.dsautomobiles.com
inf-admin.services-store.peugeot.com
pat.services-store.dsautomobiles.com
inf-admin.services-store.peugeot.com
inf-admin.services-store.peugeot.com
inf-admin.services-store.peugeot.com
inf.services-store.peugeot.com
new208booking.peugeot.fr
pat-admin.services-store.dsautomobiles.com
*.peugeot.fr
services-store.peugeot.com
inf.services-store.peugeot.com
uat.services-store.peugeot.com
reservation-nouvelle508.peugeot.fr
services-store.peugeot.fr
new208booking.peugeot.fr
store.peugeot.fr
ppr-admin.services-store.peugeot.com
trn.services-store.dsautomobiles.com
dev-admin.services-store.peugeot.com
fix-admin.services-store.peugeot.com
pat.services-store.peugeot.com
uat.services-store.peugeot.com
uat.services-store.dsautomobiles.com
dev.services-store.dsautomobiles.com
ppr-admin.services-store.peugeot.com
dev-admin.services-store.peugeot.com
trn-admin.services-store.dsautomobiles.com
inf.services-store.dsautomobiles.com
admin.services-store.peugeot.com
admin.services-store.peugeot.fr
pat-admin.services-store.peugeot.com
dev.services-store.dsautomobiles.com
pat.services-store.peugeot.com
offres.peugeot.fr
uat.services-store.peugeot.com
boutique.peugeot.de
trn.sams.dsautomobiles.fr
prd-admin.services-store.peugeot.com
admin.services-store.peugeot.fr
uat.services-store.peugeot.com
fix-admin.services-store.peugeot.com
services-store.peugeot.fr
offres.peugeot.fr
admin.services-store.dsautomobiles.com
admin.services-store.dsautomobiles.com
media.peugeot.fr
uat-admin.services-store.peugeot.com
certificat.peugeot.fr

Certificate

The complete raw certificate details for checkcertificatepp.peugeot.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ166hGSU3c2tM6cZsto
aW5W2d+FhjMIgdMzpChy3HFBorGc4BXbWGO/8GvHpUbaNhTF6B+JR27QvrveiLxt
dWjIMGjU8IG/ftUen4cnuXdyZMdqtrM/7Dv7hmL6EussFD+fP0/l6WH4re9uf0YK
+YIj7hFPDQ1FEY+QFb+9jdZosbfWEDkPaQc5numAdSwlEyXtJeHM+tvM/aUKmusK
FzES5gxVVSGuq7gpQz2I6Jvjn6JxROsJgW/4pXJIlAPOeufXUaS9B0Dbe+/Qv1Oo
Tu1YustuatCCy2J98pwuD5CNFYwOz80sNxCN6tgmybIfhtrj8rB1DP1WYOE5gqqi
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3983255355323695658086174260199072765
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lijnden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stellantis N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'checkcertificatepp.peugeot.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24875593380188559141413159894125619556449810390287600344768458043521072314624338845450106744016001337826296953391304588721946166702156799080895293211923119979027853828712546441323197368774866477142093333735541972617550964319915309958357316197938818484410220615880699266035147541532086990343400047432439175045934407963293252461226244213949813013977746529433497304763476702284131785907104143919406095659914989165015119980438542237435462220392705287930881984885180640633879992388577759779002180509510123246298170344326473330514862812814393847344894375792308163789947093405017361994692095269830838976379930709583903498969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f302f01c7df4e0f6efc78901ff3cc0d43f0b13c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (497 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkcertificatepp.peugeot.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkcertificatepp.citroen.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkcertificatepp.dsautomobiles.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkcertificatepp.opel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkcertificatepp.peugeotisland.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkcertificatepp.citroen.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkcertificatepp.opel.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkcertificatepp.peugeot.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkcertificatepp.citroen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkcertificatepp.dsautomobiles.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkcertificatepp.opel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkcertificatepp.peugeot.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkcertificatepp.citroen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkcertificatepp.dsautomobiles.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkcertificatepp.vauxhall.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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