webmail.luxotticaretail.com

- EYEMED VISION CARE LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:ec:ab:0d:10:ae:9e:5a:3f:83:06:a7:2d:33:89:a8 was issued on by DigiCert Inc.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

EYEMED VISION CARE LLC

Organization: EYEMED VISION CARE LLC
State / Province: Ohio
Locality: Mason
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:ec:ab:0d:10:ae:9e:5a:3f:83:06:a7:2d:33:89:a8
Serial Number (int): 14521131343634576218892387007765645736
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ff:b5:f3:22:e1:4a:69:e8:16:bf:4b:9c:6d:bf:3a:a0:99:9a:8a:e5
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 5c:93:06:b4:7a:e9:7d:9f:ab:c8:d1:1b:77:44:2e:55:09:0b:40:30
Fingerprint (sha256): 3e:56:73:ab:03:d1:e6:c9:b5:ac:04:d6:7c:e0:e6:f9:cd:2d:d3:e1:8d:25:b3:09:ec:eb:6a:df:f4:0e:0b:18

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate webmail.luxotticaretail.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.luxotticaretail.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.luxotticaretail.com
usswmelxp007.luxgroup.net
outlook-suw.luxgroup.net
rpc.luxotticaretail.com
usalmelxp005.luxgroup.net
usalmelxp006.luxgroup.net
usalmelxp007.luxgroup.net
usswmelxp005.luxgroup.net
usswmelxp006.luxgroup.net
webmail.arnette.com
autodiscover.arnette.com
webmail.esseyepro.com
webmail.glasses.com
webmail.oakley.com
webmail.oliverpeoples.com
webmail-alp.luxotticaretail.com
webmail-test.luxotticaretail.com
autodiscover.costadelmar.com
autodiscover.nativeyewear.com
outlook-alp.luxgroup.net
webmail.costadelmar.com
autodiscover.sunglasshut.com
autodiscover.glasses.com
autodiscover.ecpa.com
autodiscover.esseyepro.com
autodiscover.eyemed.com
autodiscover.eyemedcontacts.com
autodiscover.eyemedvisioncare.com
autodiscover.eyewearspecialoffers.com
autodiscover.givethegiftofsight.com
autodiscover.iloristyle.com
autodiscover.pearlevision.com
autodiscover.lenscrafters.com
autodiscover.luxotticaretail.com
autodiscover.nextoreretail.com
autodiscover.nextore-retail.com
autodiscover.oakley.com
autodiscover.oliverpeoples.com
autodiscover.onesight.org
autodiscover.labservices.luxottica.com
webmail.us.luxottica.com
autodiscover.us.luxottica.com

Other certificates including the domain name luxotticaretail.com

(limited to 100 certificates)
esp.luxotticaretail.com
access.luxgroup.net
bluroom.luxotticaretail.com
esp.luxotticaretail.com
webmail.luxottica.com
www.luxotticaretail.com
*.luxotticaretail.com
inventoryqa.luxotticaretail.com
lyncpool.luxgroup.net
cst.luxotticaretail.com
myluxapps.luxotticaretail.com
lyncpool.luxgroup.net
cst.luxotticaretail.com
webmail.oakley.com
webmail.luxotticaretail.com
webmail.luxotticaretail.com
login.luxotticaretail.com
webmail.luxotticaretail.com
webmail.luxotticaretail.com
Access.luxgroup.net
login.luxotticaretail.com
sftp.luxotticaretail.com
mim.luxotticaretail.com
cst.luxotticaretail.com
sftp.luxotticaretail.com
vpn.luxotticaretail.com
luxapps.luxotticaretail.com
www.luxotticaretail.com
webmail.luxotticaretail.com
myluxapps.luxotticaretail.com
www.luxotticaretail.com
inventory.luxotticaretail.com
rsvpn.luxotticaretail.com
webmail.luxotticaretail.com
myluxapps.luxotticaretail.com
LYNCPOOL.luxgroup.net
lyncpool.luxgroup.net
*.luxotticaretail.com
inventory.luxotticaretail.com
webmail.luxotticaretail.com
rp1net.luxotticaretail.com
password.luxotticaretail.com
sapportallp1.luxotticaretail.com
access.luxgroup.net
webmail.luxotticaretail.com
LYNCPOOL.luxgroup.net
bluroom.luxotticaretail.com
sapportallp1.luxotticaretail.com
luxapps.luxotticaretail.com
webmail.luxotticaretail.com
sapportallp1.luxotticaretail.com
myluxapps.luxotticaretail.com
password.luxotticaretail.com
sftp.luxotticaretail.com
webmail.luxotticaretail.com
cst.luxotticaretail.com
rsvpn.luxotticaretail.com
password.luxotticaretail.com
sftp.luxotticaretail.com
webmail.luxotticaretail.com
luxapps.luxotticaretail.com
password.luxotticaretail.com
webchat.luxotticaretail.com
webmail.luxottica.com
webmail.oakley.com
inventory.luxotticaretail.com
sftp.luxotticaretail.com
remote.luxotticaretail.com
sftp.luxotticaretail.com
qa.mim.luxotticaretail.com

Certificate

The complete raw certificate details for webmail.luxotticaretail.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2Z+t/eXo3RZYKyWMNbx
tt3/4a2QkCohkv6r0EAjlylEyxs7y6g0w2F9/ua+8uxjpqwJnCuIHh1Us/L9RESN
Iy4vF+EJWFdfhllKz31lZ3WJiViewEYo+0B+J/nrIPX1cZwNi/cED9TH6MBhYWvq
Le53JFQ3V5wkbOPX4ue/eSETOOGhH0+tfHFmfFqfhTwl1E9ytG42/aDCNyu7Okhr
lLGuvNuvUpaQXSvt0jIqCqdrGtOLtkR70zNlZ84s7dxNPCfKP0nx4SyrrHv/+6Aw
j/bkLVlABpDEzm4MPEjiE8At0c1J3IHfmDwfBhFUlMI5P/Yf54pRJUG//g4oV4rB
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14521131343634576218892387007765645736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mason'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EYEMED VISION CARE LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.luxotticaretail.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23657105194230445496337088947128575438373254233327383861425740160073622857127836804985033207563356414351996498053240234861231308480782826064208557967420586872921775419994655958765780634743145103521566236345632166051601917594009269432685926084718700047480570627850439493788489079412101420186004505141606427017031508081440013277559131035705249099812346632390269467389334538327754274707882653243658469234799295093127035694761829050678098165849049428806445092888173861737512333378160039422076767921282965632091202087408174270718969689435314864270732561552972977139700138076720666871388609112816814182262096817356049924571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffb5f322e14a69e816bf4b9c6dbf3aa0999a8ae5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1210 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usswmelxp007.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook-suw.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpc.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usalmelxp005.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usalmelxp006.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usalmelxp007.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usswmelxp005.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usswmelxp006.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.arnette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.esseyepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail-alp.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail-test.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.costadelmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nativeyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook-alp.luxgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.costadelmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sunglasshut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.glasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ecpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.esseyepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eyemed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eyemedcontacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eyemedvisioncare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eyewearspecialoffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.givethegiftofsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.iloristyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pearlevision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lenscrafters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.luxotticaretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nextoreretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nextore-retail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.oakley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.oliverpeoples.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.onesight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.labservices.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.us.luxottica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.us.luxottica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001730a08a55a000004030046304402200ed7305e6bff841ed22a5e183ed3d85e819d0b8e366aa2b21ce374e4ff0b182802206f4cf83e8493987993e1936d9a27d571fbac0d387cbade38d6b709f47a5cea350075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001730a08a53a00000403004630440220173f59012b8b13ad1d342a30e678e16fbd262491d39ca86744af4357700e64f402202227d9909cc42911a7c5f8eeef61bcacfeb5ca2fab6f691abcfbf0795ac0c156
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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