api-energy-asset.bkw.ch

- BKW AG -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:05:81:8c:f1:c9:fd:29:66:2d:1c:c1:3c:d5:17:17 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BKW AG

Organization: BKW AG
Locality: Bern
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:05:81:8c:f1:c9:fd:29:66:2d:1c:c1:3c:d5:17:17
Serial Number (int): 13320869039753532908758623027232839447
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b6:93:56:c7:8c:34:c2:d0:f0:e0:cb:51:a0:f6:4e:ae:c7:a5:25:25
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 3f:b5:3d:ab:97:f9:1e:a8:c0:d8:b2:77:8e:5c:a7:59:94:ce:bd:3b
Fingerprint (sha256): 35:2e:0e:f9:c1:58:97:3d:b3:19:75:d1:bd:d4:bd:67:d1:b4:fe:3e:91:47:97:b4:29:63:3c:79:0c:e7:14:14

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate api-energy-asset.bkw.ch

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-energy-asset.bkw.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-energy-asset.bkw.ch
api-energy-asset-q.bkw.ch
api-energy-asset-t.bkw.ch

Other certificates including the domain name bkw.ch

(limited to 100 certificates)
ecmt.bkw.ch
jobs.bkw.ch
ins.bkw.ch
auth.crmdynamicst.bkw.ch
gridconnection.bkw.ch
event.bkw.ch
trinity.bkw.ch
blog.bkw.ch
blog.bkw.ch
zoon.bkw.ch
haefa.bkw.ch
event-nachhaltigkeit.bkw.ch
blue.bkw.ch
api-notis.bkw.ch
login.bkw.ch
azimi.int.bkw.ch
oscar.bkw.ch
api.bkw.ch
www.bkw.ch
shop.bkw.ch
blog.bkw.ch
bfc-example-app-next.bkw.ch
www.bkw.ch
outlook.bkw.ch
api-crm.bkw.ch
zoon.bkw.ch
blog.bkw.ch
ns-t-bkw-dmz-cus-aaa-ldap-01.bkw.ch
bkw.ch
event-nachhaltigkeit.bkw.ch
bkw.ch
feuerwehr.bkw.ch
ictmonitoring.bkw.ch
belvis.aek.ch
services-q.bkw.ch
ewp.bkw.ch
static.bkw.ch
event.bkw.ch
connect.bkw.ch
fed.bkw.ch
api-dsv-energy-strategy-backend.bkw.ch
event.bkw.ch
git.bkw.ch
netzauskunft.bkw.ch
blog.bkw.ch
akeneo-admin.bkw.ch
eventportal.bkw.ch
ra-kkm.bkw.ch
m2c-bills.bkw.ch
cloud.aek.ch
event.bkw.ch
jobs.bkw.ch
oscar.bkw-fmb.ch
event.bkw.ch
pwreset.bkw.ch
oscar.bkw.ch
*.msda.bkw.ch
www.bkwengineering.com
my.home-energy.bkw.ch
sitzung.hostedapps.bkw.ch
cockpitservicears.bkw.ch
outage.bkw.ch
api-tangento.bkw.ch
jobs.bkw.ch
shop.bkw.ch
event-nachhaltigkeit.bkw.ch
visualization.bkw.ch
visustrom1.bkw.ch
netzauskunft.bkw.ch
blog.bkw.ch
thehub-cloud.bkw.ch
ise.bkw-fmb.ch
BESUCHERZENTREN.BKW.CH
gsxmonitoring.bkw.ch
energy-asset.bkw.ch
mdomus-poc.bkw.ch
login-v2-t.bkw.ch
shop.bkw.ch
metering-workforce.bkw.ch
nexus.bkw.ch
my.home-energy.bkw.ch
haefa.test.bkw.ch
energymonitoring.bkw.ch
api-q.bkw.ch
oscar.bkw.ch
www.abaclik.bkw.ch
*.apps.collab.bkw.ch
*.elastic.int.bkw.ch
plantservices.bkw.ch
mdl.bkw.ch
blog.bkw.ch
*.aks02.bkw.ch
api-energy-asset.bkw.ch
netzauskunft.bkw.ch
smk-mdm.bkw.ch
event-nachhaltigkeit.bkw.ch
shop.bkw.ch
api-m2c-t.bkw.ch
eventportal.bkw.ch
api-oneportal-edm.bkw.ch

Certificate

The complete raw certificate details for api-energy-asset.bkw.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH+DCCBuCgAwIBAgIQCgWBjPHJ/SlmLRzBPNUXFzANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE
aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjMw
NjI5MDAwMDAwWhcNMjQwNjI4MjM1OTU5WjBPMQswCQYDVQQGEwJDSDENMAsGA1UE
BxMEQmVybjEPMA0GA1UEChMGQktXIEFHMSAwHgYDVQQDExdhcGktZW5lcmd5LWFz
c2V0LmJrdy5jaDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAIx6E9iP
t1Dozj8CHig6NzUZO2YFH0GDZq1Ixj7upR7Fe06PfV5yAxuLgtBcuoJsUyzajO2L
3loKdCyaYX3rAIMFQQ+6jeovF8J7vrh8IxWDVIjbD53loOWThMMU7zbLq68gEVkp
8Wg+JzIDlJyctfepf6D8APzV6+NGgbBx6jE5CSmcP0Irz/aJnWmQnib/4W773LsP
Bv66hGTqMq4011YZlSv+yMsODw6lz0JKAPfCan8sgSBJdwtzEZ/+KFfDof2Mb1hm
edzpuNnEgIVPz8d6Vbjf/sAn87Zx2lu+01sQW8RP7pAWr8rjP3trxhOvsMxv1y4W
5FGpMfK2KeiORJ2NVPkdIcyulVJP7Hk+78D2K8eR91lsQQukkMt4Fk+ce7JdxI2S
Qg5cTvWUP4OCTGCqSPDL5maIHw/tZCfE9U/FR22/BqezA/RZ+IP9hFZUZAJk2w73
k+OIRedu54ThRgXs3lPnnyoFct0gPZfZ+r+bStxSUkG4yv4KlMFT868FLxK4RVGb
ZdBKOvyapzpjtqvpcGdFwnAuNaruagzhii9Nfi5s2JzTbZSlJYxMfa3GXyCSReQY
4KJxT6YRWMYXlT9REcJB1NoCauXTT0+4zc7aE7h6uP5P6RaqtFhKRaOd8SpNQDGf
5VGb6Wod1UJ6ijhJ0NG/0WwC4blEJub0U1gnAgMBAAGjggPEMIIDwDAfBgNVHSME
GDAWgBR0hYDAZsffN97PvSk3qgMdvu3NFzAdBgNVHQ4EFgQUtpNWx4w0wtDw4MtR
oPZOrselJSUwWAYDVR0RBFEwT4IXYXBpLWVuZXJneS1hc3NldC5ia3cuY2iCGWFw
aS1lbmVyZ3ktYXNzZXQtcS5ia3cuY2iCGWFwaS1lbmVyZ3ktYXNzZXQtdC5ia3cu
Y2gwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjCBnwYDVR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20v
RGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcmwwSKBGoESG
Qmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcyVExTUlNB
U0hBMjU2MjAyMENBMS0xLmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsG
AQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYcGCCsGAQUFBwEB
BHsweTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsG
AQUFBzAChkVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9i
YWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwCQYDVR0TBAIwADCCAXwGCisG
AQQB1nkCBAIEggFsBIIBaAFmAHUA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZ
RnEftZsAAAGJCHhf/AAABAMARjBEAiBx4d0myabstUjfhHK4hvWqwdVE4w0JUl2Z
zyLAD/ltNgIgEYm9I7p9SrxGLlDHluc8kH6sJ9V+NUYOuzRbW7cIL0cAdgBIsONr
2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYkIeGBcAAAEAwBHMEUCIH5q
roiTMnqoVKzZohyfGpAObwV1IIfEGfRqqUa7Xp/rAiEAjFN7bTQFQPrhqFak9KBR
DjY7vq2VLH6EzQ7gH05vopgAdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0w
SNf7qwAAAYkIeGAzAAAEAwBGMEQCIBld/hAdV3LJc2ZTbXgsFvOwqVxXAlTy5hTm
vSOTvJXGAiAw55xqSmbFRxSwnV0rRG9I1Nsr2zx+4b2ZluFX3NnHejANBgkqhkiG
9w0BAQsFAAOCAQEAATGpymTw53UySlRKLo1Rw6BWH2n+DEivTehXF2I2GSGpDXbl
jsP/kTBVbFxwP8GAv8VSFYRmW8wdfIBeH60zzjtBPVe8a0whwbNVmemCWxXtH7ZM
woqkLVte7ZrKam3oiTOdAOnaiAhzAMjmdVcszGphkcFjWt3fx/81eOe9EgjBQ3Fo
dTym9+v3Se0VXt64dhABblVJhFZzS+BFtamMuQMwmwipcPbgIgNHnFmsroF7rOMm
9ImdeYwuMFkwji5eoE6379SPC/RGZyxY8StOczgoV1AMrw6fV6jbBmAQcQdEg8T/
07LYJOQsYOeXIyOVFLPR7Trv1ox4ieLQnobHTQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13320869039753532908758623027232839447
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BKW AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-energy-asset.bkw.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 573095610317430918080853521404522216295759840086211434286669012045393667873999057371087649730337737625145850580524259313841259127210210325349189101689084793754365354407445166596262275829753852783879860705868936171771426026423745367792568073560961299881730464625202760404477060406697906213521541849944404773316417818230786151756404914192509555252174552118748070528936094029809969249254879471554269123352013648744413953442085289639529818962260963736806349667402333279673251832422850838924807278816314419050731129971941369468966726426890098227823445441316298451547207195197085054618266508441415939543267929228486918321267649835352672862176292225672987180605381130341619250270447333902833931635056119289995532157972885098076338184023241524087739116701219025687634801258261272667961991910438317756636734895453868937223257526104804936695669438810321010286263327360174201599433090500150735349392267794900742339002956658293274692577584415814033529199565009574812496154944954610150909175863899609544454590745546818264543298563493178439039778373543469675862019765735076080020887377066731896777691449747316914176569687915281934339185452569559799987332726825681109613415228686658289793200536076862226771885655504737918371913166451766714545952807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b69356c78c34c2d0f0e0cb51a0f64eaec7a52525
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-energy-asset.bkw.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-energy-asset-q.bkw.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-energy-asset-t.bkw.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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