*.us-phoenix-1.oc-test.com

- Oracle Corporation -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:9d:e4:09:1a:36:a3:3c:c7:7e:2d:62:e5:a4:0c:8d was issued on by DigiCert Inc.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Oracle Corporation

Organization: Oracle Corporation
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:9d:e4:09:1a:36:a3:3c:c7:7e:2d:62:e5:a4:0c:8d
Serial Number (int): 8795183692055221500868319500975737997
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 59:b7:15:a3:7b:5e:33:67:0e:74:13:c8:a5:26:3d:fe:b4:eb:df:14
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 6c:13:fd:af:54:d4:4d:bc:a8:bd:90:aa:11:c7:15:49:30:99:98:d5
Fingerprint (sha256): 2c:ce:fb:f9:7b:e4:6f:bc:35:27:18:f7:d9:52:76:db:ef:60:5b:79:fc:94:25:f1:2a:14:8f:03:46:f8:d2:ce

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate *.us-phoenix-1.oc-test.com

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.us-phoenix-1.oc-test.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.us-phoenix-1.oc-test.com
*.cell3.containerengine.us-phoenix-1.oci.oc-test.com
*.atat.us-phoenix-1.oci.oc-test.com
*.data-security.us-phoenix-1.oci.oc-test.com
*.workflow.us-phoenix-1.oci.oc-test.com
*.ocs.oc-test.com
*.lakehouse.us-phoenix-1.oci.oc-test.com
*.ocean.ocs.oc-test.com
*.process.oci.oc-test.com
*.managed-access.us-phoenix-1.oci.oc-test.com
*.cell4.containerengine.us-phoenix-1.oci.oc-test.com
*.int.aiservice.us-phoenix-1.oci.oc-test.com
*.projects.sql.us-phoenix-1.oci.oc-test.com
*.process.us-phoenix-1.oci.oc-test.com
*.us-phoenix-1.oci.oc-test.com
*.loganalytics.us-phoenix-1.oci.oc-test.com
*.engage.us-phoenix-1.oci.oc-test.com
*.amw.us-phoenix-1.oci.oc-test.com
*.vset.us-phoenix-1.oci.oc-test.com
*.appmgmt.us-phoenix-1.oci.oc-test.com
*.management.workflow.us-phoenix-1.oci.oc-test.com
*.stack-monitoring.us-phoenix-1.oci.oc-test.com
*.announcements.us-phoenix-1.oci.oc-test.com
*.ui.rpa.integration.us-phoenix-1.ocp.oc-test.com
*.mcms.digitalassistant.us-phoenix-1.oci.oc-test.com
*.cell1.containerengine.us-phoenix-1.oci.oc-test.com
*.ociforfhir.us-phoenix-1.oci.oc-test.com
*.cp.postgresql.us-phoenix-1.oci.oc-test.com
*.rasl.us-phoenix-1.oci.oc-test.com
*.apigateway.us-phoenix-1.oci.oc-test.com
*.aiservice.us-phoenix-1.oci.oc-test.com
*.netcap.us-phoenix-1.oci.oc-test.com
*.channels.ocs.oc-test.com
*.builder.us-phoenix-1.ocp.oc-test.com
*.mcms.us-phoenix-1.oci.oc-test.com
*.dp-dev.ociforfhir.us-phoenix-1.oci.oc-test.com
*.us-phoenix-1.ocp.oc-test.com
*.cell0.containerengine.us-phoenix-1.oci.oc-test.com
*.cell2.containerengine.us-phoenix-1.oci.oc-test.com
*.servicemesh.us-phoenix-1.oci.oc-test.com
*.beta.spectra.us-phoenix-1.ocs.oc-test.com
*.us-phoenix-1.ocs.oc-test.com
*.mediaservices.us-phoenix-1.oci.oc-test.com
*.query.sql.us-phoenix-1.oci.oc-test.com
*.dp.ociforfhir.us-phoenix-1.oci.oc-test.com
*.tss.us-phoenix-1.oci.oc-test.com
*.adm.us-phoenix-1.oci.oc-test.com
*.omnichannel.us-phoenix-1.oci.oc-test.com
*.acs.us-phoenix-1.oci.oc-test.com
*.alpha.spectra.us-phoenix-1.ocs.oc-test.com
*.dev.rasl.us-phoenix-1.oci.oc-test.com
*.workstation.us-phoenix-1.oci.oc-test.com
*.aiservice-dev.us-phoenix-1.oci.oc-test.com
*.fleet-software-update.us-phoenix-1.oci.oc-test.com
*.internal.redis.us-phoenix-1.oci.oc-test.com
*.redis.us-phoenix-1.oci.oc-test.com
*.ossp.us-phoenix-1.ocs.oc-test.com
*.ocvps.us-phoenix-1.oci.oc-test.com
*.overlay.us-phoenix-1.oci.oc-test.com
*.rpa.integration.us-phoenix-1.ocp.oc-test.com
*.cp.appmgmt.us-phoenix-1.oci.oc-test.com
*.gamma.spectra.us-phoenix-1.ocs.oc-test.com
*.spectra.us-phoenix-1.ocs.oc-test.com
*.mdi.us-phoenix-1.oci.oc-test.com
*.integration.us-phoenix-1.ocp.oc-test.com

Other certificates including the domain name oc-test.com

(limited to 100 certificates)
*.poc.scs.ocs.oc-test.com
*.luna.bt.demo.us-ashburn-1.oci.oc-test.com
*.epm.us-ashburn-1.ocs.oc-test.com
*.dev.cxaudience.ocs.oc-test.com
ocdn-billing-test-5.canaries.cdn.us-ashburn-1.oci.oc-test.com
vellum.test.content.oci.oc-test.com
downstream-dev.applicationmigration.us-ashburn-1.oci.oc-test.com
*.fa.ocs.oc-test.com
gamma.ocir.io
*.imcmcs.ocs.oc-test.com
sni115375.cloudflaressl.com
*.jcs.ocp.oc-test.com
downstream.integ.apigateway.us-ashburn-1.oci.oc-test.com
test.stream-processing.us-ashburn-1.oci.oc-test.com
downstream.cloudshell.us-ashburn-1.oci.oc-test.com
*.stg.scs.ocs.oc-test.com
*.search.test.ocp.oc-test.com
*.preprod.responsys.ocs.oc-test.com
*.hap.test.demo.us-ashburn-1.oci.oc-test.com
*.hap.dev.demo.us-phoenix-1.oci.oc-test.com
*.dev.ocp.oc-test.com
*.dev.cxaudience.ocs.oc-test.com
tims.dev.demo.us-ashburn-1.oci.oc-test.com
*.uk-london-1.oc-test.com
dev.stream-processing.us-phoenix-1.oci.oc-test.com
rbc.di.loganalytics.eu-frankfurt-1.oci.rbrealm.oc-test.com
*.mobile.test.ocp.oc-test.com
*.stage.apigateway.us-ashburn-1.oci.oc-test.com
*.mobile.dev.ocp.oc-test.com
*.hospitality-api.us-ashburn-1.ocs.oc-test.com
rbc.di.loganalytics.eu-frankfurt-1.oci.rbrealm.oc-test.com
*.occa.us-ashburn-1.ocs.oc-test.com
*.cloudguard.ocp.oc-test.com
*.ocp.oc-test.com
*.occa.uk-london-1.ocs.oc-test.com
*.channels.ocs.oc-test.com
*.c9qa.ocp.oc-test.com
*.occa.ocs.oc-test.com
*.analytics.dev.ocp.oc-test.com
*.integration.ocp.oc-test.com
*.hap.uat.demo.us-phoenix-1.oci.oc-test.com
*.botmxp.ocp.oc-test.com
*.qa.responsys.ocs.oc-test.com
*.fa.test.ocs.oc-test.com
*.cec.test.ocp.oc-test.com
rbc.st.loganalytics.eu-frankfurt-1.oci.rbrealm.oc-test.com
*.blockchain.dev.ocp.oc-test.com
interact.rsysdev2.origin.dev.responsys.ocs.oc-test.com
jiratest.gc3.ocs.oc-test.com
mq.test-env2.omccc.ocs.oc-test.com
cxa1-phx-1.origin.preprod.cxaudience.ocs.oc-test.com
interact.aftm2.origin.qa.responsys.ocs.oc-test.com
*.dev.cxaudience.ocs.oc-test.com
ocean.ocs.oc-test.com
*.aiapps.ap-sydney-1.ocs.oc-test.com
*.searchcloudapp.ocp.oc-test.com
*.occa.ocs.oc-test.com
downstream.datascience-dev.us-ashburn-1.oci.oc-test.com
downstream.datascience-int.us-ashburn-1.oci.oc-test.com
git.omccc.ocs.oc-test.com
apicsautodpodmqs.ocp.oc-test.com
integration.eu-frankfurt-1.ocp.oc-test.com
*.botmxp.dev.ocp.oc-test.com
rbc.sq.loganalytics.eu-frankfurt-1.oci.rbrealm.oc-test.com
containerengine.us-ashburn-1.oci.oc-test.com
*.cna.test.demo.us-ashburn-1.oci.oc-test.com
vault.omccc.ocs.oc-test.com
*.ap-mumbai-1.falcm.ocs.oc-test.com
git.omccc.ocs.oc-test.com
*.cna.dev.demo.us-ashburn-1.oci.oc-test.com
sfp.ocs.oc-test.com
*.intapp.poc.scs.ocs.oc-test.com
cxa1-phx-1.origin.qa.cxaudience.ocs.oc-test.com
*.dataplane.dbanalytics.us-phoenix-1.oci.oc-test.com
downstream-tst.applicationmigration.us-phoenix-1.oci.oc-test.com
interact.jarvisdev2.origin.dev.responsys.ocs.oc-test.com
delete-test-v6.cdn.us-ashburn-1.oci.oc-test.com
*.apiplatform.ocp.oc-test.com
*.us-phoenix-1.oc-test.com
*.apiplatform.test.ocp.oc-test.com
test.mysql.us-ashburn-1.ocp.oc-test.com
*.eu-frankfurt-1.oc-test.com
spin-gate-tls.ofscdev.oci.oc-test.com
rbc.en.loganalytics.eu-frankfurt-1.oci.rbrealm.oc-test.com
downstream-dev.applicationmigration.us-phoenix-1.oci.oc-test.com
cx-hack-sono-integ.channels.ocs.oc-test.com
hello1.rsysauto1.origin.dev.responsys.ocs.oc-test.com
*.blockchain.ocp.oc-test.com
*.developer.ocp.oc-test.com
*.searchcloudapp.dev.ocp.oc-test.com
*.blockchain.test.ocp.oc-test.com
*.cna.bt.demo.us-phoenix-1.oci.oc-test.com
rbc.up.loganalytics.eu-frankfurt-1.oci.rbrealm.oc-test.com
preview.stream-processing.us-ashburn-1.oci.oc-test.com
*.apigateway.us-ashburn-1.oci.oc-test.com
*.casb.ocp.oc-test.com
cp.daas.us-phoenix-1.ocs.oc-test.com
sgd.dev.demoservices002.demo.us-ashburn-1.oci.oc-test.com
sfp.ocs.oc-test.com
*.aiapps.eu-frankfurt-1.ocs.oc-test.com

Certificate

The complete raw certificate details for *.us-phoenix-1.oc-test.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkJePphnEJ+N61c8G9Nc
Wb6642zjKEneEUqK7fNL1FIf0JRCMYAd3mtjxLujbLRglEXIQXZtWZjiVLNRUdJ1
PEI4Mnchx+dJIpCbrg2N4XCMMCmnG5wumIg9XchbC8ZCzl13ISy8cG7XYiM/GgFc
grkXcXF5XaD0mVNb9cx8NLA9jExFtWXeSLE3fdgGaFtXNxUO1BAC0J71nHCw4iW4
gmUrcVe5kIfbTJPcBE/dRFG1QsAxctTNPtHIz9w00noRZJkn5mP1u7sPalYbyylU
ag9fEiXjNhU0CCOEHakMeyWzSnuIfIpBah+h9HQ9XZo6lLwtry3DyWo2GAMpTtGr
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8795183692055221500868319500975737997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.us-phoenix-1.oc-test.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20988285975261076725790336272746082732757352461622587421080142852888158788360257054618185282511728249759165040862532007453413142712437852499613856305735259681016340089718210220186683249785589803156741795368932655430689994613769108797302584878864711570175305289429136234172782940034192822444024142845772481937437232174980329738107277201251110795367106901149706158176664930276152571802470526478261917247125666619711601920490910403309063315246282644050367536139828090511931116662758105328877751646405189011888159036614575969028320459706694042650560884839889817445951765485311745520218107631124227680646170304256568044389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59b715a37b5e33670e7413c8a5263dfeb4ebdf14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2730 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-phoenix-1.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cell3.containerengine.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atat.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.data-security.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workflow.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocs.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lakehouse.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocean.ocs.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.process.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.managed-access.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cell4.containerengine.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int.aiservice.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projects.sql.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.process.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loganalytics.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engage.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amw.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vset.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appmgmt.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.management.workflow.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stack-monitoring.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.announcements.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ui.rpa.integration.us-phoenix-1.ocp.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcms.digitalassistant.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cell1.containerengine.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ociforfhir.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cp.postgresql.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rasl.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apigateway.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiservice.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netcap.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.channels.ocs.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.builder.us-phoenix-1.ocp.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcms.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dp-dev.ociforfhir.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-phoenix-1.ocp.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cell0.containerengine.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cell2.containerengine.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.servicemesh.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.spectra.us-phoenix-1.ocs.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-phoenix-1.ocs.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediaservices.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.query.sql.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dp.ociforfhir.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tss.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adm.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omnichannel.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acs.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alpha.spectra.us-phoenix-1.ocs.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.rasl.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workstation.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiservice-dev.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fleet-software-update.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.redis.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redis.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ossp.us-phoenix-1.ocs.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocvps.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.overlay.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rpa.integration.us-phoenix-1.ocp.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cp.appmgmt.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamma.spectra.us-phoenix-1.ocs.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spectra.us-phoenix-1.ocs.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mdi.us-phoenix-1.oci.oc-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.us-phoenix-1.ocp.oc-test.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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