*.cra.gov.qa

- Communications Regulatory Authority (State of Qatar ) -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:bb:05:87:65:e9:cd:76:02:f1:40:7d:ba:8f:aa:ae was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Communications Regulatory Authority (State of Qatar )

Organization: Communications Regulatory Authority (State of Qatar )
Locality: Doha
Country: QA

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:bb:05:87:65:e9:cd:76:02:f1:40:7d:ba:8f:aa:ae
Serial Number (int): 10275667622431017530882418180329810606
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 89:60:89:f1:27:ec:7e:58:4b:5a:83:0a:19:76:df:a6:b2:b3:85:7c
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 8e:38:14:8e:11:fc:e1:77:19:e6:16:d4:81:b1:a6:e8:b5:7a:23:2e
Fingerprint (sha256): 3a:0e:4d:25:da:90:1f:79:5e:40:1e:17:4b:2b:ea:9b:bf:96:8f:3f:08:55:09:bd:2a:ac:8d:9c:9e:3e:f6:15

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate *.cra.gov.qa

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cra.gov.qa

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cra.gov.qa
selfservice.cra.gov.qa
cra.gov.qa

Other certificates including the domain name cra.gov.qa

(limited to 100 certificates)
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
survey.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
survey.fbgfoodtours.com
*.cra.gov.qa
securityawareness.cra.gov.qa
*.cra.gov.qa
s-spectrum.cra.gov.qa
evarchive.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
s-spectrum.cra.gov.qa
e-spectrum.cra.gov.qa
*.cra.gov.qa
survey.webworktools.com
survey.cra.gov.qa
s-spectrum.cra.gov.qa
*.cra.gov.qa
survey.omnihrc.com
*.cra.gov.qa
*.cra.gov.qa
e-spectrum.cra.gov.qa
*.cra.gov.qa
e-spectrum.cra.gov.qa
survey.omnihrc.com
*.cra.gov.qa
docu.crm.cra.gov.qa
*.cra.gov.qa
learner.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
survey.chivib.com
e-spectrum.cra.gov.qa
survey.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
docu.crm.cra.gov.qa
*.cra.gov.qa
s-spectrum.cra.gov.qa
s-spectrum.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
s-spectrum.cra.gov.qa
*.cra.gov.qa
survey.chivib.com
mail.cra.gov.qa
*.cra.gov.qa
e-spectrum.cra.gov.qa
learner.cra.gov.qa
*.cra.gov.qa
s-spectrum.cra.gov.qa
e-spectrum.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
evarchive.cra.gov.qa
survey.chivib.com
mail.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
survey.fbgfoodtours.com
survey.omnihrc.com
*.cra.gov.qa
*.cra.gov.qa
docu.crm.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
securityawareness.cra.gov.qa
survey.cra.gov.qa
*.cra.gov.qa
survey.webworktools.com
*.cra.gov.qa
s-spectrum.cra.gov.qa
e-spectrum.cra.gov.qa
survey.fbgfoodtours.com
s-spectrum.cra.gov.qa
*.cra.gov.qa
s-spectrum.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa
s-spectrum.cra.gov.qa
*.cra.gov.qa
*.cra.gov.qa

Certificate

The complete raw certificate details for *.cra.gov.qa in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIQB7sFh2XpzXYC8UB9uo+qrjANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgxMTE4MDAwMDAwWhcN
MjAwNjE2MTIwMDAwWjBzMQswCQYDVQQGEwJRQTENMAsGA1UEBxMERG9oYTE+MDwG
A1UEChM1Q29tbXVuaWNhdGlvbnMgUmVndWxhdG9yeSBBdXRob3JpdHkgKFN0YXRl
IG9mIFFhdGFyICkxFTATBgNVBAMMDCouY3JhLmdvdi5xYTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOpUnQXaPvkDrr/XYSikdWX09P9fMsu86fF4xqrA
b3isAXORD/yjgMIubASNHGOMTplSICCARGGhkzNMFnZlNeLVVAhUd6ngIe+pZHmH
M7ESBhRZJF1sTNVE0DIoa4JnJJQllIG16SmM/gbhqnshqcE3ZVXqXh3u/6TT5VJb
cLfnC/B8/h6QWuHtIkfjrXmIFFWWusOWDyDeyFwIxJn/pkcwy1py4BBRjD7LLVd8
YaG0DetIELC0o1ODIYH1huCCJMZu6g7g+7ODHbhSqjrERWqZ7Ug8fQGhBRapdCAQ
X70XElUxasap4DeGLED1Nwv/j+8oHD9KZRyF7OFyI0YBSCsCAwEAAaOCAgwwggII
MB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBSJYInx
J+x+WEtagwoZdt+msrOFfDA7BgNVHREENDAyggwqLmNyYS5nb3YucWGCFnNlbGZz
ZXJ2aWNlLmNyYS5nb3YucWGCCmNyYS5nb3YucWEwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilo
dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4Yp
aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0g
BEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGln
aWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUF
BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6
Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJD
QS5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAd7KmpMlJt4pv1uzsTCZN0mgdSJE721vfbkqlqrxc6m8YJ6nL
carFMsRHubwOY98nwIbR8YwDuzxSo8ypaR7Z34QFLgYO4lJYk9RE5vChwJLGnsIq
OFBHQOfLYc+GKGzFFOVgZDIIga9a0Hk0smXWYSMdusfnte8s5nykabm5YjofAUNX
7fz8lxDTOSLoHAX67lB3j/wawrH+dfWESKuATJleoimptTI+jAvV9KXXrryi5knM
9bgBOuf/0hRgF8JCZuLarxiVvkNZFO6PDPbl1aoGXNeAntpy+5OyyH5j5dYLWZBY
DwOqfAsLp8Q+SvUo176iHK8S3UD0QxweZgYW1A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lSdBdo++QOuv9dhKKR1
ZfT0/18yy7zp8XjGqsBveKwBc5EP/KOAwi5sBI0cY4xOmVIgIIBEYaGTM0wWdmU1
4tVUCFR3qeAh76lkeYczsRIGFFkkXWxM1UTQMihrgmcklCWUgbXpKYz+BuGqeyGp
wTdlVepeHe7/pNPlUltwt+cL8Hz+HpBa4e0iR+OteYgUVZa6w5YPIN7IXAjEmf+m
RzDLWnLgEFGMPsstV3xhobQN60gQsLSjU4MhgfWG4IIkxm7qDuD7s4MduFKqOsRF
apntSDx9AaEFFql0IBBfvRcSVTFqxqngN4YsQPU3C/+P7ygcP0plHIXs4XIjRgFI
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10275667622431017530882418180329810606
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Doha'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Communications Regulatory Authority (State of Qatar )'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cra.gov.qa'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29581487770167102381240864945452177061791007735167867665686504095999588649778290386012871506438506475677612472728184608624717431482324263090634904027853053583252896942033953838812464589579815736243338620567527862957154619750108287230449941451699546893018617470020129583282384609492708262146634296511112850451454521725942555186220489097603751806286045387898983845268473098022683716878832108010553905735807581011389153697531204339237660530900211327198985140598079491196471236061475355935503996648517174425044859839950757256333627742620360313131158092807330824576218937969156812234799022928540467160747001383549059287083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							896089f127ec7e584b5a830a1976dfa6b2b3857c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cra.gov.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.cra.gov.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cra.gov.qa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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