lta.gov.sg

- Land Transport Authority -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 08:33:17:a9:0b:a8:71:6a:bc:19:ff:98:4e:cc:b5:e8 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Land Transport Authority

Company registration number: Government Entity
Organization: Land Transport Authority
Locality: Singapore
Country: SG

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:33:17:a9:0b:a8:71:6a:bc:19:ff:98:4e:cc:b5:e8
Serial Number (int): 10899110994652922333429951014355383784
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2f:d2:7b:03:53:41:e3:44:c7:db:e7:e1:c7:4d:f6:5c:8c:39:69:e6
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): e9:a0:73:b6:fe:c4:32:67:c5:6b:e8:ca:fb:cd:4e:1f:31:92:9c:ba
Fingerprint (sha256): 37:b1:94:64:be:1a:30:5c:1c:70:4e:b1:a9:d8:54:92:42:b9:a5:b3:6a:a3:1b:b3:23:f8:d1:a4:bf:7f:84:49

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate lta.gov.sg

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lta.gov.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

datamall.lta.gov.sg
lta.gov.sg
onemotoring.lta.gov.sg
travelsmartrewards.lta.gov.sg
www.lta.gov.sg
www.travelsmartrewards.lta.gov.sg

Other certificates including the domain name lta.gov.sg

(limited to 100 certificates)
ca.gccu.lta.gov.sg
kibana.ignite-uat.lta.gov.sg
ocoe.lta.gov.sg
datamall.lta.gov.sg
ocoe.lta.gov.sg
lta.gov.sg
lta.gov.sg
ocoe.lta.gov.sg
vrl-ilink.lta.gov.sg

lta.gov.sg
vrl.lta.gov.sg
erp.lta.gov.sg
vrl.lta.gov.sg
portal.insight.lta.gov.sg
ocoe.lta.gov.sg
surveys.lta.gov.sg
ivepintrauat.lta.gov.sg
ocoe.lta.gov.sg
ocoe.lta.gov.sg
efms-uat.sso.gccu.lta.gov.sg
vrl-ocbc-ssl.lta.gov.sg
ocoe.lta.gov.sg
onemotoring.lta.gov.sg
ocoe.lta.gov.sg
*.insight-uat.lta.gov.sg
vrl.lta.gov.sg
prompt.lta.gov.sg
vrluat.lta.gov.sg
*.insight-uat.lta.gov.sg
digiwork.lta.gov.sg
prompt-uat.lta.gov.sg
lta.gov.sg
fmw.ccrsu.lta.gov.sg
ocoe.lta.gov.sg
prodintrawebbi.erp2.lta.gov.sg
ignite.lta.gov.sg
*.insight.lta.gov.sg
ltalinkuat.vrl.lta.gov.sg
ltalink.vrl.lta.gov.sg
gateway.ccrsp.lta.gov.sg
*.insight-uat.lta.gov.sg
testparweb01.erp2.lta.gov.sg
gateway.ccrsp.lta.gov.sg
prompt.lta.gov.sg
prompt-uat.lta.gov.sg
insight-vdi.lta.gov.sg
sslcertificate5.queue-it.net
fmw.ccrsp.lta.gov.sg
kibana.ignite.lta.gov.sg
surveys.lta.gov.sg
prompt-api.gccu.lta.gov.sg
lta.gov.sg
kibana.ignite-uat.lta.gov.sg
vrl-ocbc-ssl.lta.gov.sg
prompt.lta.gov.sg
ocoe.lta.gov.sg
ltalink.vrl.lta.gov.sg
surveys.lta.gov.sg
datamall.lta.gov.sg
ltalink.vrl.lta.gov.sg
prompt.lta.gov.sg
prodparweb.erp2.lta.gov.sg
lta.gov.sg
lta.gov.sg
ocoe.lta.gov.sg
careers.lta.gov.sg
gateway.ccrsp.lta.gov.sg
fmw.ccrsp.lta.gov.sg
*.insight.lta.gov.sg
surveys.lta.gov.sg
websvc.efms.lta.gov.sg
fmw.ccrsp.lta.gov.sg
cagw.gccu.lta.gov.sg
gateway.ccrsu.lta.gov.sg
palsuat.lta.gov.sg
kibana.ignite-uat.lta.gov.sg
ocoe.lta.gov.sg
uat.eps.lta.gov.sg
prompt-uat.lta.gov.sg
gateway.ccrsu.lta.gov.sg
ltalinkuat.vrl-elink.lta.gov.sg
surveys.lta.gov.sg
ltalinkuat.vrl-elink.lta.gov.sg
vrl.lta.gov.sg
fmw.ccrsu.lta.gov.sg
erp.lta.gov.sg
fmw.ccrsu.lta.gov.sg
app.safejourney.lta.gov.sg
ocoe.lta.gov.sg
ltalink.vrl.lta.gov.sg
vrl.lta.gov.sg
fmw.ccrsu.lta.gov.sg
ocoe.lta.gov.sg
prompt.lta.gov.sg
gateway.ccrsp.lta.gov.sg
ivepintrauat.lta.gov.sg
gateway.ccrsp.lta.gov.sg
vivr-uat.lta.gov.sg
vrluat.lta.gov.sg

Certificate

The complete raw certificate details for lta.gov.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwUAqat3bPoR28kdI9o6
awLyBzAA6yQ672RVtwV2eyka2WyxGgZ8sTrEk5vMyAFe3Fi3t6dfR2htYOpbCYR5
/3ZNtSEqKHMEmb9IPVxcAhZEfEcOhfivJxt9nIZumW/R08l5B4Dpmr929S+G89mE
oivxtZNGKS9tidPHRjrTG6lAnZOkj3VuAK1zWbaH8uvh5THyICmqRhrKXaMq52gg
tCSXKUq4c8Eefed9bzmNM6YaywUYUbG2FsN/x3rihqzmXZMQ07q9QuoCyR/lkyIr
JWvFH9EknJVbN/Rmm2hTfhbE9UfSAG7wialqcfvT2bilSAIO7xPbv5Y7zQHTMCQC
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10899110994652922333429951014355383784
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Land Transport Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lta.gov.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23609029897208395107270514640011560338587078455450479856385365220263619033425930155474129071395870756991251986862987025896996862636596716418435781936896916071019792260712402408861822339312038447635780733919049077110648651337309597068847274978567403555105982893615324462791317731229787807434993083293890174787843269294869732779806386155308666632976382909512833758782975101199123948331716851021127766354042848689906067281264187421347783381227208686424033472692573779557543068344114216413280458543887964285411240886098366695904563084334044295245059319196616807720639452784541075615073525571531931538206345113439060624027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fd27b035341e344c7dbe7e1c74df65c8c3969e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (142 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datamall.lta.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lta.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onemotoring.lta.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelsmartrewards.lta.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lta.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelsmartrewards.lta.gov.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008d79d5c27ff44b0e5aefe864d882bb54c4918e87f924b12da3c5564b77676c8e3b23787451d3a052d2f2f14b268dc78300fa52da57f65f94842261ea1ceef8ed805ad6f94c916b86f59b4d1a2907bbb082df45fa1d480635ea6bc7da068cabbc99fe21ef33a92b06a8512b05bc69fe1d23f417776bef725093b67aefa53446fbf9fc0068b767bc25fb7937045923b3318ea80926354cd78266002cdac43e4a13639e1dbaa3de8997c9f4ab2304005d9cb699bbd32e0a52f39af37d70fb935518b368279bdb1ede89474d6afe4a519a62aa247880fb2b14f496ff71054cd72943ea23907d5ffa72c6cd5ab80c43460fd61084141fac07232444cbee945517f696