www.advocare.com

- AdvoCare International, LLC -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:db:b2:b9:23:39:fb:df:ff:8e:0a:66:0a:ef:99:c6 was issued on by DigiCert Inc.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AdvoCare International, LLC

Organization: AdvoCare International, LLC
State / Province: Texas
Locality: Plano
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:db:b2:b9:23:39:fb:df:ff:8e:0a:66:0a:ef:99:c6
Serial Number (int): 3799193940610547694184617579274803654
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 85:f2:22:a1:39:6e:86:75:e9:99:8d:49:0d:15:8e:40:2e:2c:3b:d9
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 12:a1:80:d3:06:fb:94:87:fd:d7:91:af:e9:15:3c:b7:7f:a4:36:64
Fingerprint (sha256): 2c:f2:09:c5:69:80:fb:80:c6:c0:34:5e:70:d0:ed:5a:1f:34:92:5b:77:ea:f2:d5:f1:a1:65:e3:ba:0b:29:51

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl

Check the revocation status for certificate www.advocare.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.advocare.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.advocare.com
advocare.com
api.advocare.com
development.advocare.com
my-development.advocare.com
my-production.advocare.com
my-staging.advocare.com
my.advocare.com
production.advocare.com
productiontest.advocare.com
reports.advocare.com
staging.advocare.com
uat-api.advocare.com
uat-reports.advocare.com
wwwtest.advocare.com

Other certificates including the domain name advocare.com

(limited to 100 certificates)
magazin.peak-muenster.de
catalogues.meister.com
kiosk.greater.sydney
webkiosk.wonendoejezo.com
www.hochseescheinkurs.online
webkiosk.wonendoejezo.com
e-paper.moinmoin.de
epaper.abakus-magdeburg.de
webkiosks.sm-sport.de
journal.flyskywork.com
moebel-boeck.mediaflip.de
catalog.sogears.com
webkiosk.dein-typ.de
magazin.landrover.com
catalogues.meister.com
epaper.glasmarte.at
kataloge.quester.at
*.advocare.com
kiosk.greater.sydney
kiosk.greater.sydney
*.advocare.com
berliner-kurier.kiosk.plus
app.langguth.wine
pub.vermoegenszentrum.ch
epapers.gleitz-online.de
epaper.swecon-baumaschinen.de
webkiosk.baeckereibuettner.de
blaetterkatalog.rp-media.de
kiosk.greater.sydney
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
renew.advocare.com
*.advocare.com
kataloge.quester.at
renew.advocare.com
www.advocare.com
*.advocare.com
kataloge.fuerholz.de
kurier.leimbacherdruck.ch
magazin.peak-muenster.de
kataloge.quester.at
kiosk.greater.sydney
berliner-zeitung.kiosk.plus
berliner-zeitung.kiosk.plus
kataloge.fuerholz.de
www.advocare.com
kiosk.greater.sydney
www.advocare.com
www.advocare.com
webkiosk.reven.de
kurier.leimbacherdruck.ch
kiosk.greater.sydney
onlinekrant.binnenvaartkrant.nl
pop3.kraemer-praezisionswerkzeuge-kataloge.de
tueren.holzschwab.de
catalogues.meister.com
www.advocare.com
kataloge.fuerholz.de
*.advocare.com
online.hansestyle.hamburg
pub.vermoegenszentrum.ch
kataloge.fuerholz.de
app.langguth.wine
magazin.wiese-rt.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
webkiosk.reven.de
kataloge.quester.at
outdoor.holzschwab.de
kataloge.quester.at
catalogues.meister.com
spezial.holzschwab.de
kataloge.fuerholz.de
kataloge.quester.at
online.hansestyle.hamburg
kataloge.my-workwear.de
webkiosk.sossenheimer-wochenblatt.de
catalog.sogears.com
berliner-kurier.kiosk.plus
renew.advocare.com
remotemail.advocare.com
spezial.holzschwab.de
webkiosks.sm-sport.de
onlinekrant.binnenvaartkrant.nl
www.magazine-kraftquelle-bgl.de
webkiosk.wonendoejezo.com
catalogues.meister.com
onlinekrant.binnenvaartkrant.nl
weser-wohnwelt.mediaflip.de
e-paper.moinmoin.de
www.hochseescheinkurs.online
webkiosks.sm-sport.de
webkiosk.wonendoejezo.com
polsteraktuell.mediaflip.de
kataloge.fuerholz.de
kataloge.fuerholz.de
berliner-kurier.kiosk.plus
kataloge.my-workwear.de
pop3.kraemer-praezisionswerkzeuge-kataloge.de
ssl.yumpu.com
kataloge.fuerholz.de

Certificate

The complete raw certificate details for www.advocare.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIAjCCBuqgAwIBAgIQAtuyuSM5+9//jgpmCu+ZxjANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA0MTcwMDAwMDBa
Fw0yMzA0MTgyMzU5NTlaMG8xCzAJBgNVBAYTAlVTMQ4wDAYDVQQIEwVUZXhhczEO
MAwGA1UEBxMFUGxhbm8xJTAjBgNVBAoTHEFkdm9DYXJlIEludGVybmF0aW9uYWws
ICBMTEMxGTAXBgNVBAMTEHd3dy5hZHZvY2FyZS5jb20wggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDO9xxnyvxnb2cdylwQ03tkS1EospCx4o8G2iAosVSN
CjXUwLp8K2krzDLsJVkyP5hwMiNHJvJxgv7ouJkf5HRVaM1PxG+9sP9XfSBC7Loo
RF9uzcoW6ryVR4H6J1GIhzuX6KuYBJL4VuCX5s9l/bEd+U2b5Z7WUHSg1B/QteEW
0By55TT2oHYruTmzDrdTK6AORf+7fHtb/VIhlWoSwcspBmbMlhPSgshsdXEmY0R2
6ui2lpdgnTgPVwJYd2hSO99SY703PvmOji2K7/WAbESMZm2oAGArOiwM/SdbwGmW
IwGk75Zcvc6nkOdMx8b4UWF0dUFoFueJUqKVb75hgrorAgMBAAGjggS4MIIEtDAf
BgNVHSMEGDAWgBS3a6LqqKqEjHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQUhfIioTlu
hnXpmY1JDRWOQC4sO9kwggFkBgNVHREEggFbMIIBV4IQd3d3LmFkdm9jYXJlLmNv
bYIMYWR2b2NhcmUuY29tghBhcGkuYWR2b2NhcmUuY29tghhkZXZlbG9wbWVudC5h
ZHZvY2FyZS5jb22CG215LWRldmVsb3BtZW50LmFkdm9jYXJlLmNvbYIabXktcHJv
ZHVjdGlvbi5hZHZvY2FyZS5jb22CF215LXN0YWdpbmcuYWR2b2NhcmUuY29tgg9t
eS5hZHZvY2FyZS5jb22CF3Byb2R1Y3Rpb24uYWR2b2NhcmUuY29tghtwcm9kdWN0
aW9udGVzdC5hZHZvY2FyZS5jb22CFHJlcG9ydHMuYWR2b2NhcmUuY29tghRzdGFn
aW5nLmFkdm9jYXJlLmNvbYIUdWF0LWFwaS5hZHZvY2FyZS5jb22CGHVhdC1yZXBv
cnRzLmFkdm9jYXJlLmNvbYIUd3d3dGVzdC5hZHZvY2FyZS5jb20wDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBjwYDVR0fBIGH
MIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNS
U0FTSEEyNTYyMDIwQ0ExLTIuY3JsMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2Vy
dC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTIuY3JsMD4GA1UdIAQ3
MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQu
Y29tL0NQUzB9BggrBgEFBQcBAQRxMG8wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw
LmRpZ2ljZXJ0LmNvbTBHBggrBgEFBQcwAoY7aHR0cDovL2NhY2VydHMuZGlnaWNl
cnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS5jcnQwCQYDVR0TBAIw
ADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYArfe++nz/EMiLnT2cHj4YarRn
KV3PsQwkyoWGNOvcgooAAAGANORXzAAABAMARzBFAiB0IOOP1iCRY2qTuv9AhCKd
r/ssGEZ+adBy/FJb0yiPIwIhALBO8yevEFKrUMYqftXH/1whMay2XQ9BVkkxf51Y
49BCAHYANc8ZG7+xbFe/D61MbULLu7YnICZR6j/hKu+oA8M71kwAAAGANORXoAAA
BAMARzBFAiEAgACZsxSpR8U2eE2JMape0qAdYDnx7p5TUldi5K0U3/QCIAtambMG
3P4t0heAN3tSxSJIG+28gqrtlIuRJlgVfp0OAHUAs3N3B+GEUPhjhtYFqdwRCUp5
LbFnDAuH3PADDnk2pZoAAAGANORX1AAABAMARjBEAiBmycgRJnw6vkJgbHa417ob
sqErc3gVoqs9v3R/ZnWCWQIgBQ7YoW/w7Xs4b1Z5I7hg7TXvRA6DWcvIP41XDksi
0HQwDQYJKoZIhvcNAQELBQADggEBAEBsa4aNv81zGAK3Kjjx2gYtA5Sf39wA90mT
GBXPc1sDBXqklm8gJZ2TyM+4suH2xy+2viUQyxzOS1FUSfBMShtArfUd/18a1o4a
ZCa5mL7OWh/sNl6zfIGheFDKDMGt4gcI26woWIct81g8lCsM4oihvT1L26LPccb4
7QrQSZ1IukaeJ9i2MELE8fST33Ti7HAd7uQPSfBO6z5CLP/yQLndkJ2o0HkSsn3Z
wdr9WgaZ4In9vFDtImmoPd5S37X8hZbhW0gOGGxGO1Vw/VZMIGbkFmRMFVPrpARy
7pwDV3WYY2ZTPjtS3exaR2rU8a8IVg8pg5arF2a5X1ORr3puiTI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvccZ8r8Z29nHcpcENN7
ZEtRKLKQseKPBtogKLFUjQo11MC6fCtpK8wy7CVZMj+YcDIjRybycYL+6LiZH+R0
VWjNT8RvvbD/V30gQuy6KERfbs3KFuq8lUeB+idRiIc7l+irmASS+Fbgl+bPZf2x
HflNm+We1lB0oNQf0LXhFtAcueU09qB2K7k5sw63UyugDkX/u3x7W/1SIZVqEsHL
KQZmzJYT0oLIbHVxJmNEdurotpaXYJ04D1cCWHdoUjvfUmO9Nz75jo4tiu/1gGxE
jGZtqABgKzosDP0nW8BpliMBpO+WXL3Op5DnTMfG+FFhdHVBaBbniVKilW++YYK6
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3799193940610547694184617579274803654
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AdvoCare International,  LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.advocare.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26126945778366143343891079910978881881815949978094554741431330635346527792209876269373125289426733943949921614111508906574983792201085578301571320286871390081898282323697786531614002837821976195280244481333062685231997906377806278240241879018142177250243198158617070553546374091602179953847809014105291683711885446574696235647011275910384758469574386853724664568685825573624831369245435167830348014335853813917945713967805600141815055177068025835128839468393826868028679142772252043884974984847203802810953007805149831151699665306883260595805657406116585498928223542475707391227641769691113037829053896192872652388907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85f222a1396e8675e9998d490d158e402e2c3bd9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (347 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.advocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.advocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-development.advocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-production.advocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-staging.advocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.advocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.advocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productiontest.advocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.advocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.advocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-api.advocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-reports.advocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwtest.advocare.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018034e457cc000004030047304502207420e38fd62091636a93baff4084229daffb2c18467e69d072fc525bd3288f23022100b04ef327af1052ab50c62a7ed5c7ff5c2131acb65d0f415649317f9d58e3d04200760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000018034e457a00000040300473045022100800099b314a947c536784d8931aa5ed2a01d6039f1ee9e53525762e4ad14dff402200b5a99b306dcfe2dd21780377b52c522481bedbc82aaed948b912658157e9d0e007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018034e457d40000040300463044022066c9c811267c3abe42606c76b8d7ba1bb2a12b737815a2ab3dbf747f667582590220050ed8a16ff0ed7b386f567923b860ed35ef440e8359cbc83f8d570e4b22d074
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00406c6b868dbfcd731802b72a38f1da062d03949fdfdc00f749931815cf735b03057aa4966f20259d93c8cfb8b2e1f6c72fb6be2510cb1cce4b515449f04c4a1b40adf51dff5f1ad68e1a6426b998bece5a1fec365eb37c81a17850ca0cc1ade20708dbac2858872df3583c942b0ce288a1bd3d4bdba2cf71c6f8ed0ad0499d48ba469e27d8b63042c4f1f493df74e2ec701deee40f49f04eeb3e422cfff240b9dd909da8d07912b27dd9c1dafd5a0699e089fdbc50ed2269a83dde52dfb5fc8596e15b480e186c463b5570fd564c2066e416644c1553eba40472ee9c035775986366533e3b52ddec5a476ad4f1af08560f298396ab1766b95f5391af7a6e8932