iseportal.bhpbilliton.com

- BHP INNOVATION PTY LTD -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:eb:5c:b7:82:f9:dd:0c:3b:c8:ec:6a:be:ff:07:ef was issued on by DigiCert Inc.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BHP INNOVATION PTY LTD

Organization: BHP INNOVATION PTY LTD
State / Province: Victoria
Locality: Melbourne
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:eb:5c:b7:82:f9:dd:0c:3b:c8:ec:6a:be:ff:07:ef
Serial Number (int): 5209754270082825849989368245494155247
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: e6:2c:b5:02:e9:cf:a1:8c:a9:77:3e:cd:4b:cd:28:42:e5:ff:8e:74
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 16:08:ea:fa:e9:46:aa:e3:f5:8d:09:8f:3b:62:02:27:85:c0:97:da
Fingerprint (sha256): 3c:87:af:77:a4:59:34:c1:c3:71:bd:83:29:1c:32:c6:45:f5:10:6e:63:fe:75:1b:20:fe:00:97:5b:fb:98:87

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl

Check the revocation status for certificate iseportal.bhpbilliton.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iseportal.bhpbilliton.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

guestportal1.bhp.com
guestportal2.bhp.com
sponsorportal.bhpbilliton.net
sponsorportal.ent.bhpbilliton.net
iseportal.ent.bhpbilliton.net
mydevice.bhpbilliton.net
mydevice.ent.bhpbilliton.net
iseportal.bhpbilliton.net
iseportal.bhpbilliton.com
iseportal.bhp.com
guestportal3.bhp.com
guestportal4.bhp.com

Other certificates including the domain name bhpbilliton.com

(limited to 100 certificates)
Petroleumanalyticstest.bhpbilliton.com
flex-mau.bhp.com
rail.bhpbilliton.com
eroomdev.bhpbilliton.com
dwapps.bhp.com
eroom2.bhpbilliton.com
*.bhpbilliton.com
1sapcitrix.bhpbilliton.com
spo.bhpbilliton.com
*.bhpbilliton.com
pitesthttpconnect.bhpbilliton.com
ousdc1pc1im01.bhpbilliton.com
mineralsaustralia.bhp.com
*.bhp.com
exmte.bhp.com
mobile.bhp.com
ushoupvcsc09.bhpbilliton.com
DAL5001VCSe01.bhpbilliton.com
dcc.bhpbilliton.com
m3productivityupload.bhpbilliton.com
supplierportal-idev.bhpbilliton.com
petcoresight.bhpbilliton.com
bmacontractormgt.bhpbilliton.com
petmobile.bhpbilliton.com
OD-TMS.apac.ent.bhpbilliton.net
OBIEEDEV.bhpbilliton.com
bhpb-aim.bhpbilliton.com
lonssl.bhpbilliton.com
procon.bhpbilliton.com
petroleumanalyticstest.bhpbilliton.com
citrixtest.bhpbilliton.com
im.bhpbilliton.com
case.bhpbilliton.com
petmobile.bhpbilliton.com
petextranet.bhpbilliton.com
hse.ironore.bhp.com
its06syd.bhpbilliton.com
potashlearning.bhpbilliton.com
houdesktop.bhpbilliton.com
aubnepvcsc09.bhpbilliton.com
sni.cloudflaressl.com
flex.bhp.com
mfa.bhp.com
eroom1.bhpbilliton.com
rail.bhpbilliton.com
apps-cdv-uat.bhpbilliton.com
extranet-service.bhpbilliton.com
mobile.bhp.com
pitesthttpconnect.bhpbilliton.com
dccsbx.bhpbilliton.com
apps-cdv-uat.bhpbilliton.com
ndes.bhp.com
shutdown.bhpbilliton.com
aubnepvcse09.bhpbilliton.com
petcmo.bhpbilliton.com
eroom3.bhpbilliton.com
petapps-cdv.bhpbilliton.com
mi.bhp.com
petextranet.bhpbilliton.com
sp-pet-dev.bhpbilliton.com
aubnepvcse01.bhpbilliton.com
dcc.bhpbilliton.com
mktlgw-vapp58.ent.bhpbilliton.com
apps-cdv-uat.bhpbilliton.com
uraniumserviceclaimsstaging.bhpbilliton.com
supplyservices.bhpbilliton.com
www.eproc04.bhpbilliton.com
aubnepvcse03.bhpbilliton.com
its05syd.bhpbilliton.com
procon.bhpbilliton.com
adfs.bhpbilliton.com
sipwebconf.bhpbilliton.com
housing.bhpbilliton.com
eroomtest.bhpbilliton.com
connect.bhpbilliton.com
ITS05SYD.BHPBILLITON.COM
exmte.bhp.com
flex.bhpbilliton.com
dwapps-uat.bhp.com
dapfiorianalytics.bhpbilliton.com
connect.bhpbilliton.com
adfs.bhpbilliton.com
sni.cloudflaressl.com
aubnepvcse04.bhpbilliton.com
mfa.bhp.com
case.bhpbilliton.com
dapfiorianalytics.bhpbilliton.com
ecc-mdev.bhpbilliton.com
test-petcmo.bhpbilliton.com
pet1gismobilesvc.bhpbilliton.com
londesktop.bhpbilliton.com
aubnepvcse04.bhpbilliton.com
ipick-nsw.bhpbilliton.com
petdesktop.bhpbilliton.com
dapsupplierrca.bhpbilliton.com
exmte.bhp.com
dwapps-uat.bhp.com
spo.bhpbilliton.com
dwapi-uat.bhpbilliton.com
aubnepvcsc02.bhpbilliton.com

Certificate

The complete raw certificate details for iseportal.bhpbilliton.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurS76SL9cLvIebRe9MTr
jxtz6LaOGKWT30UHK8qsowU+UYrXX7rhSsFb/caQSMdnnnMfcbIMYYPRqAw0FY5D
JgOGLfiJXvy7vingGOzopj+h9WGQFfCbhKt0dSO8hOQ6HzYQzdb9f5Le+lHRNQYB
+GCfiLd8zvzqBj9uZJ2Klf/R+hcOqnNACihElvxurlOLXDFnsg5UDHW6diHcNPTl
t6Ij3ugurbinDJlCoUOWBs5Cvf+F8IqvuaphUdOIKz4JCSqAEldzb9I+eDU61V8y
HdmmatiUc44JeQ7rbVog+d70FVF2F9FP3NbCP2QmIyXtoxyyvnm4mCPfk/h0wLKI
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5209754270082825849989368245494155247
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Melbourne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BHP INNOVATION PTY LTD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iseportal.bhpbilliton.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23569447993643052380857823942349520962915193225524913280636967752646776462019673501099314174805460091836708109900216297065954413861267385335872537692712401469219187483322281775229739003129581728678324282462636553999602015942884920319892819284121870960553464195129169858715655482140448661038734410468344867884120668862077459619787920534800867653718082765761450112832784649123260711635317612595893806768913915926192730087670930470277771974919337199236521853350808447583424039522624170182189591825663124741808955662640615825664760929827456779201866774988034003569722631090461287537154279206347864117436966697192616265827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e62cb502e9cfa18ca9773ecd4bcd2842e5ff8e74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (318 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guestportal1.bhp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guestportal2.bhp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsorportal.bhpbilliton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsorportal.ent.bhpbilliton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iseportal.ent.bhpbilliton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydevice.bhpbilliton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydevice.ent.bhpbilliton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iseportal.bhpbilliton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iseportal.bhpbilliton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iseportal.bhp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guestportal3.bhp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guestportal4.bhp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00588e28a08179d7197c2c3ae62d8219df8e3c0ceb01ae2ae19509904030282697d1cc32a21979e23a681324f502045fdacc734cc93186c974d75f0a96147f8cc783fa4493578bdd9e4c46b998d6a79581a072c0f2bab300e7e3b90799176ba0364d9a4d91154c3436a168da524c8982c5fa61f3f91fc83fcd0513dc3486465d94c3d42a9e95eb56eaf8ab66db8640799175c0b492dd33384d9c9325f46dda83e72572ebb414194a0d512ec14a90fff0f0084331b3221deefc8b37e7cb50dce6eb45321cc8906886dd492ed5a9d0df90fd3f13162faba7d9401116bfa26bd488cad154476d8cbd01f2f72af002c7a4c6784d9e851f9d84c1901c6391140c32f0c7