www.accessbankplc.com

- ACCESS BANK PLC -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 08:f5:bc:d9:26:cf:ad:dd:8d:b4:a0:70:0a:40:ac:62 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ACCESS BANK PLC

Company registration number: 125384
Organization: ACCESS BANK PLC
State / Province: Lagos
Locality: Lagos
Country: NG

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:f5:bc:d9:26:cf:ad:dd:8d:b4:a0:70:0a:40:ac:62
Serial Number (int): 11909766994148610935835668212543958114
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d7:57:2c:9d:f5:b6:d7:ce:46:11:cb:9b:b1:b3:19:77:c7:14:0e:12
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 87:12:7c:7e:73:c9:05:da:10:8d:2e:12:97:cd:16:21:b6:91:2c:83
Fingerprint (sha256): 39:12:d5:33:ff:0e:0b:71:e0:fe:36:fe:cc:76:88:3b:ba:34:5a:04:4b:ac:d2:42:f3:64:0c:64:45:f5:30:55

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl

Check the revocation status for certificate www.accessbankplc.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.accessbankplc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.accessbankplc.com
accessbankplc.com

Other certificates including the domain name accessbankplc.com

(limited to 100 certificates)
ghana.accessbankplc.com
fatca.accessbankplc.com
agpaymentnew.accessbankplc.com
creditcardstmt.accessbankplc.com
nextgenpilot-mozambique.accessbankplc.com
primusplustestbw.accessbankplc.com
blog.accessbankplc.com
primuspluske.accessbankplc.com
dtsreporting.accessbankplc.com
cib.accessbankplc.com
*.livebeta.ghana.accessbankplc.com
nextgenprod.accessbankplc.com
agencybankingrw.accessbankplc.com
whatsappbanking.ghana.accessbankplc.com
instantaccountrw.accessbankplc.com
cbnciss.accessbankplc.com
erms.ghana.accessbankplc.com
real.accessbankplc.com
digitalloanadminportal.accessbankplc.com
www.ghana.accessbankplc.com
optixserver.accessbankplc.com
nextgenpilot-zambia.accessbankplc.com
fcubs-ke-webservices.accessbankplc.com
nextgenpilot-zambia.accessbankplc.com
customerconsent.accessbankplc.com
accesspaycong.accessbankplc.com
www.accessbankplc.com
*.ghana.accessbankplc.com
ibank.ghana.accessbankplc.com
accessbankplc.com
link.amexmembershiprewards.accessbankplc.com
nextgenpilot-mozambique.accessbankplc.com
ibank.accessbankplc.com
primusplusguinea.accessbankplc.com
agencybanking.ghana.accessbankplc.com
*.accessbankplc.com
nextgenpilot-sierraleone.accessbankplc.com
*.accessbankplc.com
payroll.accessbankplc.com
merchanttamsapp.accessbankplc.com
accessmobile.ghana.accessbankplc.com
access-charge-pilot.accessbankplc.com
customercomplaints.accessbankplc.com
mail.ghana.accessbankplc.com
www.cameroon.accessbankplc.com
blog.accessbankplc.com
ussd-uat-ext.accessbankplc.com
nextgenprod-guinea.accessbankplc.com
blog.accessbankplc.com
blog.accessbankplc.com
accesstrade.accessbankplc.com
nextgenpilot-southafrica.accessbankplc.com
customercomplaints.accessbankplc.com
ghana.accessbankplc.com
www.ghana.accessbankplc.com
basement.accessbankplc.com
etranzact.accessbankplc.com
cib.accessbankplc.com
southafrica.accessbankplc.com
cib.accessbankplc.com
*.ghana.accessbankplc.com
nextgen-zambia.accessbankplc.com
agsandbox.accessbankplc.com
delivery.accessbankplc.com
accessmobilerw.accessbankplc.com
*.accessbankplc.com
real.accessbankplc.com
*.accessbankplc.com
primusplussouthafrica.accessbankplc.com
primuspluszambia.accessbankplc.com
dmobile.accessbankplc.com
uat-accessbank-appcenter.accessbankplc.com
901.accessbankplc.com
processmaker.accessbankplc.com
*.accessbankplc.com
primuspluszambia.accessbankplc.com
accessnotifier.accessbankplc.com
customerinformationupdate.accessbankplc.com
guinea-b2w.accessbankplc.com
access-charge-prod.accessbankplc.com
cib.accessbankplc.com
mbank.ghana.accessbankplc.com
accesstrade.accessbankplc.com
nextgenprod-sierraleone.accessbankplc.com
nextgen-zambia.accessbankplc.com
southafrica.accessbankplc.com
ebankgh.accessbankplc.com
fatca.accessbankplc.com
bc365.accessbankplc.com
processmaker2.accessbankplc.com
southafrica.accessbankplc.com
fatca.accessbankplc.com
primusplusguinea.accessbankplc.com
fatca.accessbankplc.com
nextgenpilot-zambia.accessbankplc.com
ibank.ghana.accessbankplc.com
blog.accessbankplc.com
delivery.accessbankplc.com
www.accessbankplc.com
rel-accessbank-mobile.accessbankplc.com

Certificate

The complete raw certificate details for www.accessbankplc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7srzRO8ByFePdiOBxCJb
OAwCra7NyddsW48bZVBNbS9yW4yVMCg2GcU3qb0YOZTTdvxNxm3QdX0YqppgEC6T
OCWBorMlZqIWRkJdYjBWRDldsqT/qNCnj8KhC8E7+xi7PSB+P1Ggjo85anXtyX6E
7aMKSM6DlDqPYoJDEOZLKWyttigp5p9rYyjVT/6QtAIrc0MJW8tvIIhy8GEW1PF1
Zm1RmkYQnhgCkl1EJl1/5UV7117/gp57NhFk+bS51OK8tL8/JHK/DGLez4xKGdsl
0sB0PqpELiIHp8f710ksBnFHctHF3KrVH2RL5MCb1Pmo73by+FYh6fsL+uwS2W1G
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11909766994148610935835668212543958114
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '125384'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lagos'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lagos'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ACCESS BANK PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.accessbankplc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30144795090328735877258653469934449864482975245638661822121151893561620701788455793641971324100489913908704876819989196711382096690974779893748989975805040866489575578774197459153961062400350327695511708738338975985392052258918282994150351940509322461811347382953504592333185254584866546712974988789795808108517472058053357178225748257912969459315305813102451356294373991445505883565305360127050059803507128962020693120606608942572872703957506486228102131228357034205193977226632849080068120931510486873457957092594133231896672781702865026747920807453478638455058624687049338786839909031725989184865135730305834763807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7572c9df5b6d7ce4611cb9bb1b31977c7140e12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accessbankplc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessbankplc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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