portal.bedes.org

- St Bede's School Trust Sussex -

Issued by DigiCert Secure Server CA

About this certificate

This digital certificate with serial number 0a:00:f2:8f:4f:6c:99:bf:2f:14:12:2d:d9:25:54:c3 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

St Bede's School Trust Sussex

Organization: St Bede's School Trust Sussex
Organization unit: Digital Resources
State / Province: East Sussex
Locality: Hailsham
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:00:f2:8f:4f:6c:99:bf:2f:14:12:2d:d9:25:54:c3
Serial Number (int): 13297199655181087786277935636210341059
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 55:a3:10:63:34:10:70:f0:ec:f1:af:e5:4d:6c:49:be:f3:c7:b6:85
AuthorityKeyId: 90:71:db:37:eb:73:c8:ef:dc:d5:1e:12:b6:34:ba:2b:5a:a0:a6:92

Fingerprint (sha1): 8d:0b:95:3d:44:c8:b5:f3:0e:5f:e5:8f:b7:42:3d:8c:83:ea:07:9a
Fingerprint (sha256): 3d:fe:24:1b:71:12:1a:3b:96:43:a1:62:2d:b2:6b:35:dd:a3:e4:b4:c4:a8:a4:ec:05:4b:4b:47:fc:93:d9:fe

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-g7.crl

Check the revocation status for certificate portal.bedes.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.bedes.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.bedes.org

Other certificates including the domain name bedes.org

(limited to 100 certificates)
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
bedes.org
schoolportal.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
shop.bedes.org
shop.bedes.org
sports.bedes.org
shop.bedes.org
sports.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
contact.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
schoolportal.bedes.org
schoolportal.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
shop.bedes.org
shop.bedes.org
schoolportal.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
shop.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
portal.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
shop.bedes.org
contact.bedes.org
sni158254.cloudflaressl.com
helpdesk.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
bedes.org
sni158254.cloudflaressl.com
shop.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
helpdesk.hambroperks.com
elearning.bedes.org
sni158254.cloudflaressl.com
www.bedes.org
helpdesk.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
shop.bedes.org
sni158254.cloudflaressl.com
sni.cloudflaressl.com
shop.bedes.org
sni158254.cloudflaressl.com
staff.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
shop.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
isams.bedes.org
sports.bedes.org
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
assist.pentest.partners
sni158254.cloudflaressl.com
sni158254.cloudflaressl.com
portal.bedes.org
sni158254.cloudflaressl.com
schoolportal.bedes.org
shop.bedes.org

Certificate

The complete raw certificate details for portal.bedes.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIQCgDyj09smb8vFBIt2SVUwzANBgkqhkiG9w0BAQUFADBI
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSIwIAYDVQQDExlE
aWdpQ2VydCBTZWN1cmUgU2VydmVyIENBMB4XDTE0MDcwOTAwMDAwMFoXDTE1MDcx
NDEyMDAwMFowgZUxCzAJBgNVBAYTAkdCMRQwEgYDVQQIEwtFYXN0IFN1c3NleDER
MA8GA1UEBxMISGFpbHNoYW0xJjAkBgNVBAoTHVN0IEJlZGUncyBTY2hvb2wgVHJ1
c3QgU3Vzc2V4MRowGAYDVQQLExFEaWdpdGFsIFJlc291cmNlczEZMBcGA1UEAxMQ
cG9ydGFsLmJlZGVzLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AIahLw6+bqFPQuqKgpeLa0bP+g4kSmdqM2J2fzCahCtQDD4u8vv/gTI0xoi2Awuq
gkQDUcGiEypKhkRW1N8tXwXVTSKzXX4ntCh8hPcnLcwUjRio33JYStbA9/Pz5v0o
U0c25Q8T2RJNlcR63dBswRIRifKef0HL0Q2GoZ7zdW0JjAPZiO11ik9CQ2T8tNWP
v2qwT1t2GIwITS/ahAZhZp69418domBp0PiILjEIXFSUrWQeepeKMmdAlaOwVq+/
8iG1CsP3URMYgbRjkDJ5Fa+jCUgXxVQMdwMEuIuymn+MT0X0cjUtGfaDsZsef1qE
jmpjr9UhZeeZmIF7+EquDwECAwEAAaOCAb8wggG7MB8GA1UdIwQYMBaAFJBx2zfr
c8jv3NUeErY0uitaoKaSMB0GA1UdDgQWBBRVoxBjNBBw8Ozxr+VNbEm+88e2hTAb
BgNVHREEFDASghBwb3J0YWwuYmVkZXMub3JnMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwYQYDVR0fBFowWDAqoCigJoYkaHR0
cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2EtZzcuY3JsMCqgKKAmhiRodHRwOi8v
Y3JsNC5kaWdpY2VydC5jb20vc3NjYS1nNy5jcmwwQgYDVR0gBDswOTA3BglghkgB
hv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ
UzB4BggrBgEFBQcBAQRsMGowJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2lj
ZXJ0LmNvbTBCBggrBgEFBQcwAoY2aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29t
L0RpZ2lDZXJ0U2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZI
hvcNAQEFBQADggEBAI8rO3KYhl2pCCXwak7kx0gmuNISmsn6L+/2aKOHcv0jia3i
501a5dsW2LfRJvUoFmEJvsnZ9z+L4TM+6SArUTUmC9EXVaeq5ZtgS2OJiSYGtICU
7Z57s4MX9s7n8WlkCDeuR+mOsLQY41JbalVMK7yW/DrZUypei81ivExC4LX86lbK
01uCN8yPF9EeE7vm+GtoQgsLrBRFAdMCu/UIe+PFoOYDrNdHr1bTtZuUQQgJOpcL
HDQRo9cW+BKVIIxZejFV+yV/+kjFLR/8fN6rKE/mV+q5ITYhz0F5EX86TezCTdmr
UfOsfBYgIvR5bCi70j/7nxC+8zHynd1QLUHkEYU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqEvDr5uoU9C6oqCl4tr
Rs/6DiRKZ2ozYnZ/MJqEK1AMPi7y+/+BMjTGiLYDC6qCRANRwaITKkqGRFbU3y1f
BdVNIrNdfie0KHyE9yctzBSNGKjfclhK1sD38/Pm/ShTRzblDxPZEk2VxHrd0GzB
EhGJ8p5/QcvRDYahnvN1bQmMA9mI7XWKT0JDZPy01Y+/arBPW3YYjAhNL9qEBmFm
nr3jXx2iYGnQ+IguMQhcVJStZB56l4oyZ0CVo7BWr7/yIbUKw/dRExiBtGOQMnkV
r6MJSBfFVAx3AwS4i7Kaf4xPRfRyNS0Z9oOxmx5/WoSOamOv1SFl55mYgXv4Sq4P
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13297199655181087786277935636210341059
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'East Sussex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hailsham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St Bede's School Trust Sussex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital Resources'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.bedes.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16995415568825428695880341330072376675666806377014502315027059592915167687291141509715806192888117542819121692034139817611583921289781281304047839096295312124680195384844368878610230929850107267454240354785009151554088469104740173671320390742822197048121004317756629445062422321799146095887592312278263389850111837376383236064288209985371238872360286096943530294888065447732736213120322224324569436381167948458960404987615100636056933491310360437362266151020255456477501022222941113281257852014368404733597479788868242834422282464404809138100905189294916889084208910630761037438049403248123281376860766208961983418113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9071db37eb73c8efdcd51e12b634ba2b5aa0a692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55a31063341070f0ecf1afe54d6c49bef3c7b685
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.bedes.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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