*.humanesources.com

- Human eSources, Ltd -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 08:29:54:2a:1a:0d:d6:15:e3:82:81:12:54:f8:18:f0 was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Human eSources, Ltd

Organization: Human eSources, Ltd
State / Province: Connecticut
Locality: Marlborough
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:29:54:2a:1a:0d:d6:15:e3:82:81:12:54:f8:18:f0
Serial Number (int): 10848415195532124536630726457103489264
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 13:47:55:67:6b:0a:48:43:74:a5:66:21:be:7e:40:50:3a:bb:17:33
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 75:09:a2:d6:4f:96:3b:3c:2a:43:a5:f3:26:a9:7f:bf:1d:ae:7c:3b
Fingerprint (sha256): 2e:c5:9f:a6:b5:59:a1:f2:de:3a:2c:6a:7e:c2:66:e0:af:95:e6:cf:4a:d9:f1:09:82:e7:5a:4d:3e:1c:fb:9f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl

Check the revocation status for certificate *.humanesources.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.humanesources.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.humanesources.com
humanesources.com
eb.staging.humanesources.com
center.staging.humanesources.com
legacy.staging.humanesources.com
api.staging.humanesources.com
shop.staging.humanesources.com
demo.staging.humanesources.com
review.eb.staging.humanesources.com
admin.staging.humanesources.com
pro.staging.humanesources.com

Other certificates including the domain name humanesources.com

(limited to 100 certificates)
humanesources.com
md-api.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
reports.app.hes-edu.pre-prod.aws.us-west-2.humanesources.com
helpdesk.lamundial.com
humanesources.com
meeting.strongdallas.com
help.uafrica.com
hes-api.app.hes-edu.pre-prod.aws.us-west-2.humanesources.com
nonprod.humanesources.com
meeting.strongdallas.com
support.nextconnex.com
support.carpay.com
humanesources.com
*.app.hes-edu.prod.aws.ap-southeast-1.humanesources.com
humanesources.com
*.humanesources.com
md-api.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
*.app.hes-edu.pre-prod.aws.us-west-2.humanesources.com
hes-hyp.app.hes-edu.prod.aws.eu-west-1.humanesources.com
pkg.dev.humanesources.com
suporte.mindify.net
meet.mysocalhealth.com
md-api.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
support.nextconnex.com
jd-api.app.hes-wf.prod.aws.us-west-2.humanesources.com
support.carpay.com
hes-api-docs.app.hes-edu.prod.aws.eu-west-1.humanesources.com
humanesources.com
apitest.staging.humanesources.com
support.labmoneta.com
humanesources.com
meeting.kreate.agency
sos.123assist.me
meeting.kreate.agency
md-api.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
jobs.humanesources.com
webinar.engys.com
*.app.hes-edu.prod.aws.eu-west-1.humanesources.com
staging.humanesources.com
portal.ibizarentals.be
pkg.humanesources.com
help.bettermlo.com
suporte.mindify.net
help.dakcs.com
meet.keterna.com
meeting.kreate.agency
nonprod.humanesources.com
cdn.dev.humanesources.com
academy.teamlink.com.br
apitest.staging.humanesources.com
*.humanesources.com
meeting.kreate.agency
jd.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
meeting.kreate.agency
www.humanesources.com
meeting.tradefy.com.br
www.humanesources.com
meeting.theholdingbox.com
humanesources.com
humanesources.com
*.app.hes-edu.prod.aws.ap-southeast-1.humanesources.com
meeting.kreate.agency
suporte.jumba.com.br
helpdesk.abra.io
md.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
help.dakcs.com
humanesources.com
jd-api.app.hes-wf.prod.aws.us-west-2.humanesources.com
support.thenextlevel.co.uk
hes-hyp.app.hes-edu.prod.aws.ap-southeast-1.humanesources.com
meeting.abrahamsenfinancial.com
apitest.staging.humanesources.com
dev.humanesources.com
meeting.kreate.agency
pkg.humanesources.com
meeting.kreate.agency
md.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
*.hes-prod-1.humanesources.com
support.shopafix.com
hes-api.app.hes-edu.prod.aws.eu-west-1.humanesources.com
meet.mysocalhealth.com
apitest.staging.humanesources.com
suporte.mindify.net
corporateapplication.lendme.co.ke
*.humanesources.com
jd-api.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
humanesources.com
suporte.tradefy.cloud
md.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
hes-api.app.hes-edu.pre-prod.aws.us-west-2.humanesources.com
md-api.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
meet.keterna.com
jd.app.hes-wf.pre-prod.aws.us-west-2.humanesources.com
destek.visiott.com
meeting.kreate.agency
meeting.kreate.agency
support.labmoneta.com
reports.app.hes-edu.pre-prod.aws.us-west-2.humanesources.com
meetings.bopyx.com
ajuda.naveia.com.br

Certificate

The complete raw certificate details for *.humanesources.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud2yKE0DRUM7EbgAO5ZQ
4eag8V0Ni8pLHNLGpdKbC7TUL1ZnpLUVqOCXdOQh9ciS9sQl/JJSCkvdgS8Z49kv
vPv66/rGd4uKI5kw98i0/9hpICBol4NOWdXmyrg4pcXg6ETGMY1ODO1NcPOcMzoS
vQZcRzM6nsUp4dcSglSYln7hIrDyI/OwiKgriBh51cQm9/Gkrzl+lAFhqltjiSSb
AxqR9Ccfd5J1kIvbmaVqF0b2K+9d+BCcJY7VI55UZ9Til0uMF/pGoO4wQ3Pbr+kq
BOBiIPMfuVylWagsvm5XQuOCMpxEXeiRL3upowlWRiA0xJnqHzJXLb6CM0ep9Lan
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10848415195532124536630726457103489264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Marlborough'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Human eSources, Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.humanesources.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23463408755041710190845584647983196723632876616854508283357342326726756882268618038520324616522851264568632122163461824978750051101372192133870399272160745149342427520313499852598761339608098064308608116842188487980555385644179069824955347092542352802461371259127396966957671578023364276139594812294603750605824857396167273938773617707812909356066371647088518755187550168332077667049632459365798124982481247403818640086713990278894961820237586115604929052000558374784519095007083746663546218230659101763189324869831014166040659945946131548017893310688083679779445522686682884466979156435933970991818696901204332947253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							134755676b0a484374a56621be7e40503abb1733
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (338 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.humanesources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humanesources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eb.staging.humanesources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'center.staging.humanesources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.staging.humanesources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.staging.humanesources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.staging.humanesources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.staging.humanesources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.eb.staging.humanesources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.staging.humanesources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.staging.humanesources.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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