yan4pweb01.bhpbilliton.net

- BHP Billiton Innovation Pty Ltd -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:83:68:9a:b8:41:2e:3a:69:7d:4e:fe:75:98:7e:a4 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BHP Billiton Innovation Pty Ltd

Organization: BHP Billiton Innovation Pty Ltd
Organization unit: IS
State / Province: Victoria
Locality: Melbourne
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:83:68:9a:b8:41:2e:3a:69:7d:4e:fe:75:98:7e:a4
Serial Number (int): 17962276462431816029292197144096702116
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 90:6a:ab:e4:8a:aa:58:0b:ee:da:5e:47:12:fd:1a:cc:85:0c:a5:28
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): f8:0b:ff:2e:21:01:f0:60:8b:be:a8:04:fe:0b:e6:a1:44:3e:fe:f1
Fingerprint (sha256): 2d:94:4a:cf:07:0b:c7:4d:17:6b:53:18:d8:a7:e6:f3:3f:f6:ff:92:00:9e:bb:5a:38:ab:56:39:e4:66:71:54

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate yan4pweb01.bhpbilliton.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yan4pweb01.bhpbilliton.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yan4pweb01.bhpbilliton.net

Other certificates including the domain name bhpbilliton.net

(limited to 100 certificates)
BMAPDC-VAM50V.apac.ent.bhpbilliton.net
petebs-zebs2.americas.ent.bhpbilliton.net
inside.bhpbilliton.net
incitrix.apac.ent.bhpbilliton.net
PER1069RVB002.ent.bhpbilliton.net
PDCRDGWAP01VEI.americas.ent.bhpbilliton.net
PER1073RVB001.ent.bhpbilliton.net
USDC2POCDM01.ENT.BHPBILLITON.NET
dspyxe-a-ise-01.americas.ent.bhpbilliton.net
incitrix.apac.ent.bhpbilliton.net
OD-TMS.apac.ent.bhpbilliton.net
bionmnyces01.bhpbilliton.net
petapm.bhpbilliton.net
phoupecmapl01.americas.ent.bhpbilliton.net
potashlearning.bhpbilliton.com
potash-mii.americas.ent.bhpbilliton.net
wdu1pweb01.bhpbilliton.net
biomulyces12.bhpbilliton.net
eroomtest.bhpbilliton.net
OD-TMS.bhp.com
dccsbx.bhpbilliton.com
PER1069RVB001.ent.bhpbilliton.net
phoupoamapl02.americas.ent.bhpbilliton.net
URAOLY-RHH01.APAC.ENT.BHPBILLITON.NET
tent.bhpbilliton.net
dcc.bhpbilliton.com
solmanjava.bhpbilliton.net
simcity.bhpbilliton.net
incvmcitrix.apac.ent.bhpbilliton.net
PET5083RVB001.ent.bhpbilliton.net
KUL2010RVB001.ent.bhpbilliton.net
phouaecoapw01.americas.ent.bhpbilliton.net
pdcrdgwap01vei.americas.ent.bhpbilliton.net
ecc-mdev.bhpbilliton.com
pet1gismobilesvc.bhpbilliton.com
phoudoamapl02.americas.ent.bhpbilliton.net
biopacyces01.bhpbilliton.net
PER1022RVB001.ent.bhpbilliton.net
pet5028rvb001.ent.bhpbilliton.net
inside.bhpbilliton.net
BMAPDC-KM03V.apac.ent.bhpbilliton.net
petoasis-test.bhpbilliton.net
phv1pweb01.bhpbilliton.net
petoasis-dev.bhpbilliton.net
pt5-portal.bhpbilliton.net
tfs.bhpbilliton.net
USDC1RCMPS01.tent.bhpbilliton.net
bmacitrix.apac.ent.bhpbilliton.net
pet5073rvb001.ent.bhpbilliton.net
pet5107rvb001.ent.bhpbilliton.net
pdc-medwb01vu.americas.ent.bhpbilliton.net
aris.bhpbilliton.net
JansenReports.bhp.com
colpdc-gis51v.apac.ent.bhpbilliton.net
simcity.bhpbilliton.net
p2broker.bhpbilliton.net
OLP0TCIT02.apac.ent.bhpbilliton.net
pam-production.bhp.com
accsbx.bhpbilliton.com
USDC1POCWA02.ENT.BHPBILLITON.NET
Phpoupmdmapw01.americas.ent.bhpbilliton.net
aris.bhpbilliton.net
bmapdc-km50v.apac.ent.bhpbilliton.net
red1pweb01.bhpbilliton.net
LER1024RVB001.ent.bhpbilliton.net
PET5079RVB001.ent.bhpbilliton.net
phoupgisapw26.americas.ent.bhpbilliton.net
shutdown.bhp.com
CHI5035RVB002.ent.bhpbilliton.net
yan4pweb01.bhpbilliton.net
phoudoamapl03.americas.ent.bhpbilliton.net
OD-TMS.apac.ent.bhpbilliton.net
PET5074RVB001.ent.bhpbilliton.net
petroleumtalentandlearning.bhpbilliton.net
dspyxe-a-ise-01.americas.ent.bhpbilliton.net
yan4pweb01.bhpbilliton.net
accsbx.bhpbilliton.com
bmapdc-inx01v.apac.ent.bhpbilliton.net
SUPPLIERSRM.BHPBILLITON.COM
ADL1036RVB002.ent.bhpbilliton.net
eroomdev.bhpbilliton.net
Inbrmcitrix.apac.ent.bhpbilliton.net
PDCVERSAwb01v.americas.ent.bhpbilliton.net
DAL5001PUI001.ent.bhpbilliton.net
JansenReports.bhp.com
smartplantapi-waio-qa.bhp.com
petoasis-uat.bhpbilliton.net
phoupoemapl01.americas.ent.bhpbilliton.net
colpdc-gis52v.apac.ent.bhpbilliton.net
saspdcarkwb04v.americas.ent.bhpbilliton.net
colpdc-gis50v.apac.ent.bhpbilliton.net
IAD5037RVB001.ent.bhpbilliton.net
pcnpdc.apac.ent.bhpbilliton.net
ADL1058RVB001.ent.bhpbilliton.net
eroom1.bhpbilliton.net
phoudoamapl04.americas.ent.bhpbilliton.net
bioyanyces01.bhpbilliton.net
OD-TMS.apac.ent.bhpbilliton.net
wdu1pweb01.bhpbilliton.net
iseportal.bhpbilliton.com

Certificate

The complete raw certificate details for yan4pweb01.bhpbilliton.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gVdgnXt8D8XBzYfg0e1
Ymy3DxDaBd7JU63b3AjqaA7Lcg/c47u1xG0Jbtp0CqRfqcwYycYEaimUC064nKA1
2FHpb8M4YekdDqBGEyqqGCQTV2IMRyy7Ox6UYhV9HDVC8TKHJbfwBdsDeP6LSyjw
USdAj+p1wTf7F7uaQhK2NkNVJ3SmNRt3u1/sNARhw+dzQGiJtcvjIoPX79MtrWWC
iOv+DgxbF7lYnmJPUYZ3ikTfQbfiMyV2ykl1/kDZjR6LJOvhM7FVZLt1se4cEYsf
cpF0CDiLKycOeb38pgM31pDuXJbdaT0nEzTavtHqfFZapZq/r7bIjM3Y55tumLyD
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17962276462431816029292197144096702116
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BHP Billiton Innovation Pty Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yan4pweb01.bhpbilliton.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27017642976928264064098296197531339376747695969579035928927250320269877800464000914115692034444084512641289647496253751467500097222315614001911063173939572378902942076867362185365104455116736796516936694255285415488412673764802078741952702741322615021261829230336359207522133102277298600820261267862540150111921818908013868805772473345538033235724762870038797911495260922822577272331274737847311835145730096590725535924953527552434160728508219370468476206269520000581991409608285071238867529402031247688865652625258956984212432400597617176579463969664673389670470594329370576146226934554069344180391728575591955071747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							906aabe48aaa580beeda5e4712fd1acc850ca528
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yan4pweb01.bhpbilliton.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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