AHAVA-DEAD SEA LABORATORIES LTD

- AHAVA-DEAD SEA LABORATORIES LTD -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0e:42:cf:08:7b:a2:a5:c8:c5:fe:a3:7d:48:a0:9a:43 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

AHAVA-DEAD SEA LABORATORIES LTD

Company registration number: 511334252
Organization: AHAVA-DEAD SEA LABORATORIES LTD
Address: 1 Arava
Locality: Airport City
Country: IL

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:42:cf:08:7b:a2:a5:c8:c5:fe:a3:7d:48:a0:9a:43
Serial Number (int): 18956082664528661938917291471883246147
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ce:2f:72:0d:a2:4f:6b:c0:95:dd:92:f0:a9:99:35:5d:e0:ef:e8:b2
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): 15:5b:37:2d:d3:07:9c:fb:17:38:c4:01:b2:5f:c6:9d:c3:57:13:4c
Fingerprint (sha256): 2e:9e:08:f7:f0:54:dc:97:32:df:e3:82:05:46:49:ce:22:4d:58:76:ee:89:23:bd:1f:01:9c:6d:fd:6b:17:ef

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate AHAVA-DEAD SEA LABORATORIES LTD

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for AHAVA-DEAD SEA LABORATORIES LTD

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

send.ahava.com

Certificate

The complete raw certificate details for AHAVA-DEAD SEA LABORATORIES LTD in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILQzCCCSugAwIBAgIQDkLPCHuipcjF/qN9SKCaQzANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNzA1BgNVBAMT
LkRpZ2lDZXJ0IFZlcmlmaWVkIE1hcmsgUlNBNDA5NiBTSEEyNTYgMjAyMSBDQTEw
HhcNMjQwNDE1MDAwMDAwWhcNMjUwNDE1MjM1OTU5WjCCASIxEzARBgsrBgEEAYI3
PAIBAxMCSUwxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRIwEAYDVQQF
Ewk1MTEzMzQyNTIxCzAJBgNVBAYTAklMMRUwEwYDVQQHEwxBaXJwb3J0IENpdHkx
EDAOBgNVBAkTBzEgQXJhdmExKDAmBgNVBAoTH0FIQVZBLURFQUQgU0VBIExBQk9S
QVRPUklFUyBMVEQxKDAmBgNVBAMTH0FIQVZBLURFQUQgU0VBIExBQk9SQVRPUklF
UyBMVEQxHzAdBgorBgEEAYOeXwENEw9SZWdpc3RlcmVkIE1hcmsxEjAQBgorBgEE
AYOeXwEDEwJFTTEZMBcGCisGAQQBg55fAQQTCTAwMzQyMzYzOTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAL6H9BXddry3Mby9AbLC+VakBlEkHzR16WJx
U1ifUpYQWbevNYLQhCrZ5IFrlATvvAdLNATOCrRRIwGFc298sBbvXnEm1F9LDvSZ
Lob/qkBhe5p/mK+3p+FucPvjodUnHK1OZQsl/UBoup+u8tCNi/KGVylrSv6U0pJ6
152w70i0mMvMJcmUeMPdKnAnQF+SjzUiMW6ZuzU2Hwr4NFFqfZD/U9driVTNhlZL
WWmaPJw7WagbZtLk6NgHRmVCviPxjV9VO7OEVhDdIRhDqvnh1UR4KLFYgJOpKLkE
tUBX8d/Cgg4I5S/E3A7MNySZEoZ88Oaw/uPuNViSajGveW3FM+MCAwEAAaOCBjQw
ggYwMB8GA1UdIwQYMBaAFL6fvY1XbZW1rWPDl06rqIRdOgf1MB0GA1UdDgQWBBTO
L3INok9rwJXdkvCpmTVd4O/osjAZBgNVHREEEjAQgg5zZW5kLmFoYXZhLmNvbTBQ
BgNVHSAESTBHMDcGCmCGSAGG/WwAAgUwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3
dy5kaWdpY2VydC5jb20vQ1BTMAwGCisGAQQBg55fAQEwEwYDVR0lBAwwCgYIKwYB
BQUHAx8wgaUGA1UdHwSBnTCBmjBLoEmgR4ZFaHR0cDovL2NybDMuZGlnaWNlcnQu
Y29tL0RpZ2lDZXJ0VmVyaWZpZWRNYXJrUlNBNDA5NlNIQTI1NjIwMjFDQTEuY3Js
MEugSaBHhkVodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRWZXJpZmll
ZE1hcmtSU0E0MDk2U0hBMjU2MjAyMUNBMS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQG
CCsGAQUFBzAChkhodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRW
ZXJpZmllZE1hcmtSU0E0MDk2U0hBMjU2MjAyMUNBMS5jcnQwDAYDVR0TAQH/BAIw
ADCCA8AGCCsGAQUFBwEMBIIDsjCCA66iggOqoIIDpjCCA6IwggOeMIIDmhYNaW1h
Z2Uvc3ZnK3htbDAjMCEwCQYFKw4DAhoFAAQUXXhTm3QSwXdWDvUNtkNkh8Pq6H4w
ggNiFoIDXmRhdGE6aW1hZ2Uvc3ZnK3htbDtiYXNlNjQsSDRzSUFBQUFBQUFBQ3BW
VXkyN2JNQkM4OXlzRTlpcXV4VjIrVkZnTzBrT1JRd3owME9hUVcrb29rVkRWRG16
QlR2KytRMGxPblNJR0dnZ2dsOVEraGpOTHppK2VmM1hadnQ3dTJzMjZVb1lLbGRY
cjFlYStYVDlXNnZ1M0x6cXFpOFdIK1c3L21NRnp2YXRVMC9kUG4yYXp3K0ZBQjZI
TjluSEdSVkhNNEtHeUgzZTcrdXQyODlCMmRhWDZkdjFiUCszVWFYckdxcTBQbnpm
UGxTcXlJbU4ySkQ1emdRS3J4WWNzbS9kdDM5V0x5NnZMbTh2NWJGeWs3YWU3dnNH
Y1pmZVZXcUlnV1plYlFIYWxpYjBtQ1pwQzFGU1dHa1ZnZU5aa0E0bG9Ud0pYUzFZ
SGlpa214cndZUGlvc2VjSFlHRThtckRTVFJPM1NFTWl4TmdGek1KaEpsaVBTSEVo
ZGFOSStyMURLT2dTaEZ1S2ROZzY1WVpZK2haUndRMTd2QVJISnlFVDRlOUU4VGZn
TDl3NmppVG1TbER1VXRweWc0alFJTkFrc0k0c2o1NUJFYlBKbDRFVk4vSnJtNjhS
R01IblJNWTdqUm9TM1N4TUxRZ2FLb2ZFRXJGUXc5Z2QyOHRkV3AxbkltZHdKcWww
YlNaakhRSnd5cm9TaXo4SGFBQWRRSlJJblV5U1pGa0dlTElVU0lZVmdFSndGUjRB
dU5qY0lGaTFtT0JjUUd5MGxGV0daU2xseUZ0Q0U5MklCcGVHVTVHYmNESGJ2d0tO
cjlHQW5PaFByZzh0K1dxVFE1SDY3dEJIbWlUTG1IMlhzR1dVU3FlNG9ESS9DOEN0
aHlqZUZHWFc1UXVLa0NrK3F5S1NLVEtwSW9uRVV4UjlGd2ViSXhOQzNZZXJiY096
YjhsemZKbmJmM2JnOE5xNngrQkZPNkJuWThTL3MrTC9zeEZOMjdMdjZWdDd1MjNE
S2tKc1lHdWRyd3lkOSswSlIyclgrN04yV2lTTDNIMWZiSGhueUEwUGh6TlZXdzd1
Q042dXIxRWNXODhCNEJIZjlkdk96MW9mMnZtL3dWS2xzaGxjd1BYS0xQN25DMmZz
ekJRQUEwgYsGCisGAQQB1nkCBAIEfQR7AHkAdwBVWVOuMJYAgGzS61IIpsmekxgo
rBBWtEIcVTYVTF91rAAAAY7jgZfPAAAEAwBIMEYCIQCUCxJKZwfnVFPurfEP1ga1
av/sTm296VcxZOEJAt/1zgIhAIm8tKLmjtHrWFN69ii8eSAwwv6ASU+08cqVBd3v
2NpAMA0GCSqGSIb3DQEBCwUAA4ICAQCa+uU0y1SRPvh2DpDTheeOPops7QQG4VIw
0S7oRi2v1td/r827xtSxQ9ycgp+i7FsWfpKmjosl4B+HYWw+OIfemQxEFPsTs39o
1PQfI2QVDjcBTXZCzTQW2/W1v2OyU7zkv5eY3SG3vEMM8oqadJ62MRYyxCQ5UBaV
SDc/mGstMu7ZtgRrLEyhzSB/RvUbxyP1YZGRG1QdqSGp9C2fLaxs8XlMgljfRIdT
PJ1G0bIx6S+1AcHdyoyM6J6CdLnjRs6qVsSaYi4RbgCt/b3B2c1NJXjORGX3NIJ3
KGZaO+8vJPOlrJZUE2SNnZihQBgjtV15RJ8YvzoT11524LLZ9t65N1YxjUxwk1vb
SAHfxJ7OPQC2UgivCpX/nds8lPgNRmdxcW1Pna1GjeHSzhif/hfdKyILXFoDQ+SS
hDRvwbCNWDzXOcP06Wc4rcYfrGE9iH4h2wsPG/eH6Xl3kqTmF4xnfvrUq7bXKbHC
juYaVCn/6TZrVznn+dDlOUMZUCXhdYRPFgGHNT1VQFhKRt5z/HOhIDjaaWLmHo6Z
3t6gGIpe8w99QJpVKp3EDE3h0Lid5/Q6dpIlJ3JmQq4dfsDiZPponiVdr3BdDypU
MGMJzALjbmwlx2IsEnGWAzL9iLc3mmbrxhXP0InmDzT4GZ7mj4iTZBGNrH2PQFNI
W13d05Lmhw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvof0Fd12vLcxvL0BssL5
VqQGUSQfNHXpYnFTWJ9SlhBZt681gtCEKtnkgWuUBO+8B0s0BM4KtFEjAYVzb3yw
Fu9ecSbUX0sO9Jkuhv+qQGF7mn+Yr7en4W5w++Oh1SccrU5lCyX9QGi6n67y0I2L
8oZXKWtK/pTSknrXnbDvSLSYy8wlyZR4w90qcCdAX5KPNSIxbpm7NTYfCvg0UWp9
kP9T12uJVM2GVktZaZo8nDtZqBtm0uTo2AdGZUK+I/GNX1U7s4RWEN0hGEOq+eHV
RHgosViAk6kouQS1QFfx38KCDgjlL8TcDsw3JJkShnzw5rD+4+41WJJqMa95bcUz
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18956082664528661938917291471883246147
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '511334252'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Airport City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1 Arava'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AHAVA-DEAD SEA LABORATORIES LTD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AHAVA-DEAD SEA LABORATORIES LTD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '003423639'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24052319092661824474574395664514583665039947204632683318838199271487994135132604323926217311864934161894648452259424115762794500363667212750111256069488039405280289382317399121343171474077912450782734076525287746292227393544955740082127656177586529904966241127780376639659377540353085870634887692954114166383775263521548431075009217511993180823911866092449000241205101026111352784921830187091168547711110616570904680454763214665044062097573368042411892518620621843413845269071407498047354474948528441936170921714659761762975240948905909123936212873109522426867216791532431589808065962105964906721690097850945368306659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce2f720da24f6bc095dd92f0a999355de0efe8b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'send.ahava.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (946 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															5d78539b7412c177560ef50db6436487c3eae87e
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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