uc17.janrainengage.com

- Akamai Technologies, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 09:ff:13:b2:59:63:4f:38:bf:a9:f6:57:0e:d2:5a:23 was issued on by DigiCert Inc.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Akamai Technologies, Inc.

Organization: Akamai Technologies, Inc.
Organization unit: Operations
State / Province: Oregon
Locality: Portland
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:ff:13:b2:59:63:4f:38:bf:a9:f6:57:0e:d2:5a:23
Serial Number (int): 13287487157050244466221901575659608611
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1c:c6:c4:7b:1f:df:f4:2d:9d:fd:6e:36:b1:a8:c4:00:f3:d9:c7:04
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): f3:b9:34:97:54:c6:b8:35:7a:ad:4a:55:81:be:56:2d:be:8d:9b:2c
Fingerprint (sha256): 37:23:4b:65:1b:62:1f:92:8c:50:dd:ba:07:c6:c0:b3:59:8c:cb:f9:1d:79:5d:9e:10:b3:e0:99:b8:51:96:17

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate uc17.janrainengage.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uc17.janrainengage.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uc17.janrainengage.com
login.tbcretail.tbccorp.com
dm-sso.pfizer.com
login.sourceinterlinkdigital.com
login.cmgdigital.com
signin-be-nl.siemens-home.com
signin-au.siemens-home.com
login.efinancialcareers.com
login.philips.com
account.sbs.com.au
signin.coca-cola.com.au
signin.cokerewards.com.au
login.oreilly.com

Other certificates including the domain name janrainengage.com

(limited to 100 certificates)
*.rpxnow.com
uc17.janrainengage.com
uc13.janrainengage.com
uc12.janrainengage.com
uc16.janrainengage.com
uc13.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc14.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
uc16.janrainengage.com
uc16.janrainengage.com
uc16.janrainengage.com
*.rpxnow.com
uc17.janrainengage.com
uc13.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
*.eval.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc15.janrainengage.com
uc16.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc16.janrainengage.com
uc13.janrainengage.com
uc17.janrainengage.com
*.eval.janrainengage.com
uc15.janrainengage.com
uc09.janrainengage.com
*.eval.janraincapture.com
uc16.janrainengage.com
*.eval.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc15.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
*.eval.janrainengage.com
uc14.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
*.eval.janrainengage.com
uc16.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
uc15.janrainengage.com
uc15.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
*.rpxnow.com
uc18.janrainengage.com
*.rpxnow.com
*.rpxnow.com
uc18.janrainengage.com
uc09.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc19.janrainengage.com
uc17.janrainengage.com
uc17.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc17.janrainengage.com
*.rpxnow.com
uc16.janrainengage.com
uc15.janrainengage.com
uc17.janrainengage.com
uc12.janrainengage.com
uc18.janrainengage.com
uc09.janrainengage.com
uc16.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc18.janrainengage.com
uc09.janrainengage.com
uc18.janrainengage.com
uc16.janrainengage.com
uc18.janrainengage.com

Certificate

The complete raw certificate details for uc17.janrainengage.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCtaRE25fd8/ULm7JhqM
7gCepMOhZMtkAbdqWMp0WBrNi711YkIJyk6x+gidznUW5FYHOxn2oviZ/pT+u6M6
oWETmVaclXwC2tuQEnHFIiEfvGDpmLxY6wDy7uFyIC9lAScne+BrJE7MR+r75tkk
3fzJZkwpBxjqVOl9gxYInGuL9+9Uwyqh26plaUACa9d4gcBUknDqhI/hWE9n6++H
ts5Q94WwF1Pmb4oZjBNuhTDPw40zvTLZMLbhQuQbv5ICRciqpIwdAYuLE8S0GsaX
BP15SHBDP4ZYQTsVExmBmRwi8nMvy899ARQLHqiSOMvVDnrbfZ745P8ZzBD2N4S5
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13287487157050244466221901575659608611
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uc17.janrainengage.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23249226079915057939645753160360772744860081699184772276749996569353862597355155368571702469555041193204688047507706121344360766562686938685033139505810186213629811330416934001990849063721604042780202403640405844000145142425782637263988721351933362023202650769559842097854555796001571417623686174427467105392035327845769898913323072410535935805142877903233264267722760505846214356597024205467890065674264337128844421353981265547853853029548068684620187628124768788693811014593060299683921218391835486946720436809585486498693080825015741906991317724008823177210281443061094202190787012888755150673564810101375229016569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1cc6c47b1fdff42d9dfd6e36b1a8c400f3d9c704
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (330 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uc17.janrainengage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.tbcretail.tbccorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dm-sso.pfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.sourceinterlinkdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.cmgdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin-be-nl.siemens-home.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin-au.siemens-home.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.efinancialcareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.philips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.sbs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.coca-cola.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.cokerewards.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.oreilly.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016df4bd84f6000004030048304602210087c1df63e3fe634c1f469583015be70f27fcf444ff0703f39526cac45fe34c67022100a8cf821c75b6726e75ad15f40e9aed22e1b889c04df594b39c3712676e7fe9c80075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016df4bd85910000040300463044022049b9c37e8546ddf93d9f9e3e270698a89bbb72d892a0189b299e403114db9a9902206493d75bfddd8b1defb70b28a20ca45659355b70c0d0f6745c4d93444f50bd64
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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