endologix.com

- Endologix Inc. -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 06:b2:a1:81:ff:04:ba:23:92:cd:7f:d8:33:78:a3:17 was issued on by DigiCert Inc.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • 1 DNS name(s) are bare public suffixes: exchange02 The domain SHOULD NOT have a bare public suffix (awslabs certlint)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

Endologix Inc.

Organization: Endologix Inc.
State / Province: California
Locality: Irvine
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:b2:a1:81:ff:04:ba:23:92:cd:7f:d8:33:78:a3:17
Serial Number (int): 8902872582832239038440634824588305175
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3b:a6:9b:84:68:17:ed:33:a2:e5:df:e2:df:32:f5:59:10:b6:87:41
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): 70:ef:3c:4b:05:dd:91:46:df:b5:a7:bf:1f:3c:04:fa:ff:23:16:31
Fingerprint (sha256): 2e:14:2b:9a:f9:6d:d1:cd:30:e4:cb:a6:64:fe:0d:71:2a:cc:a1:b1:ce:84:93:f8:e9:0a:4f:b4:bb:76:f1:6e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-g21.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g21.crl

Check the revocation status for certificate endologix.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for endologix.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

endologix.com
fileserver.endologix.com
exchange02.endologix.com
exchange02
autodiscover.endologix.com
appserver.endologix.com
exchange.endologix.com
irvhqcas02.endologix.com
mail.endologix.com
legacy.endologix.com

Other certificates including the domain name endologix.com

(limited to 100 certificates)
ithelpdesk.endologix.com
5707090131681280-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
wifiguest.endologix.com
leapfrog-ssl-36.gcs-web.com
us2.endologix.com
exchange02.endologix.com
leapfrog-ssl-36.gcs-web.com
endologix.com
eu1.endologix.com
leapfrog-ssl-36.gcs-web.com
ithelpdesk.endologix.com
5688555066097664-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
ithelpdesk.endologix.com
salesforce.endologix.com
5707090131681280-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
us4.endologix.com
5707090131681280-fe3.pantheonsite.io
ithelpdesk.endologix.com
endologix.com
5707090131681280-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
ithelpdesk.endologix.com
us3.endologix.com
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
*.endologix.com
leapfrog-ssl-36.gcs-web.com
5694979263430656-fe3.pantheonsite.io
usirmkexch01.endologix.com
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
endologix.com
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
endologix.com
5707090131681280-fe3.pantheonsite.io
helpdesk.dpsgroupglobal.com
leapfrog-ssl-36.gcs-web.com
ithelpdesk.endologix.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
mail.endologix.com
leapfrog-ssl-36.gcs-web.com
leapfrog-ssl-36.gcs-web.com
5707090131681280-fe3.pantheonsite.io
ithelpdesk.endologix.com
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
*.endologix.com
mail.endologix.com
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
ithelpdesk.endologix.com
ithelpdesk.endologix.com
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
marketing.endologix.com
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
5688555066097664-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io
5707090131681280-fe3.pantheonsite.io
leapfrog-ssl-36.gcs-web.com
LyncWebExt.endologix.com
endologix.com
5707090131681280-fe3.pantheonsite.io
5688555066097664-fe3.pantheonsite.io

Certificate

The complete raw certificate details for endologix.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jC9O9EIuiI7qWdMLW/j
Tf4Qa0BtHf3upIXS2ZMoceB72I8pW2sOfFyJBJtIrcP6xJt3tiocK0bIrPCMclj9
XDN5fD5HyJmR123guFP3WQSaI/T5sftjvOgdbVsy3hONlTEWOqGY9YCtz+FYM1CE
QBPw3vPK/l3Lj3Wi7HhYKhNkfuSVLa2ayCnDmDojRvvzs7/uP/j8i5teMe1yYOmO
ITXxC3ji5IeT+/NrpPG2d3XAhC2hV/K5jTSHoc6Wndl/YRc/ie1rq/oWVUt929LZ
SP8L+eia9tchm0sRnWmiU/N420kkjLxCsGETWu5+YYVpTSJE4D/mtvBOXfja3Aw5
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8902872582832239038440634824588305175
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Irvine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Endologix Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'endologix.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27039031455053690756889886346726245422649410219773905438622116045559516583242760181863618274755799331116212944645052487277548880875365026015821141296396880364630177760760598509240661220756013849364894906201498405391148644502010561492524601553283106808708524097478476005084163498581851389297118660559108401884581730730253260872881497022505293759705994151136603875551297180052722629092736089020767766167826480578918642014689326376439890837619607568195612551485855949264147394198339063266218739563916353328746707941557942842014452884930464414405621184644572491688533024891969445842307093464618645904524262044688030906739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ba69b846817ed33a2e5dfe2df32f55910b68741
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (227 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileserver.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange02.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange02'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appserver.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irvhqcas02.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.endologix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.endologix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g21.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g21.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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