ads4-wc.aryaka.net

- Aryaka Networks, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:24:81:d2:da:78:d1:84:4e:04:0b:43:ec:84:8d:31 was issued on by DigiCert Inc.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Aryaka Networks, Inc.

Organization: Aryaka Networks, Inc.
State / Province: CA
Locality: Milpitas
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:24:81:d2:da:78:d1:84:4e:04:0b:43:ec:84:8d:31
Serial Number (int): 20127975760047783603773536201404091697
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f4:45:fd:61:50:66:5e:92:ba:7e:52:37:90:55:a4:d1:25:ff:8a:a7
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 11:b7:d4:91:4c:fd:77:b1:55:d6:f7:4f:3a:5f:87:25:26:f1:5e:d3
Fingerprint (sha256): 3f:96:39:a6:c9:8e:4e:94:1b:82:b2:5b:5c:cd:39:fd:a8:98:cc:fa:e9:0c:c4:6a:bd:14:35:b7:97:45:25:58

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl

Check the revocation status for certificate ads4-wc.aryaka.net

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ads4-wc.aryaka.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ads4-wc.aryaka.net
aryaka.info
*.sirixtrader.com
*.userservices.exlibrisgroup.com
*.hosted.exlibrisgroup.com
*.exlibrisgroup.com
*.exlibris.com.cn
*.alma.exlibrisgroup.com
ads3.aryaka.net
test.aryaka.info
test.aryaka.com
ch.opinionbar.com
ch.websurvey2.opinionbar.com
my.monash
t1.vipkid.com.cn
msjs.vipkid.com.cn
pr.vipkid.com.cn
*.aryaka.info
*.gcmasia.com
*.campusm.exlibrisgroup.com
*.projectsandapprovals.com
*.leganto.exlibrisgroup.com
*.primo.exlibrisgroup.com

Other certificates including the domain name aryaka.net

(limited to 100 certificates)
ads1.aryaka.net
ads2.aryaka.net
*.aryaka.net
ads1.aryaka.net
ads4-wc.aryaka.net
ads2.aryaka.net
ads4-wc.aryaka.net
ads1.aryaka.net
ads4-wc.aryaka.net
ads2.aryaka.net
ads2.aryaka.net
ads2.aryaka.net
ads1.aryaka.net
*.aryaka.net
ads1.aryaka.net
ads2.aryaka.net
ads2.aryaka.net
ads2.aryaka.net
ads2.aryaka.net
ads2.aryaka.net
ads1.aryaka.net
ads2.aryaka.net
ads1.aryaka.net
ads1.aryaka.net
ads2.aryaka.net
ads1.aryaka.net
ads2.aryaka.net
ads4-wc.aryaka.net
ads1.aryaka.net
ads2.aryaka.net
ads1.aryaka.net
ads4-wc.aryaka.net
ads1.aryaka.net
ads2.aryaka.net
ads2.aryaka.net
ads2.aryaka.net
ads2.aryaka.net
ads2.aryaka.net
ads1.aryaka.net
ads1.aryaka.net
ads2.aryaka.net
ads1.aryaka.net
ads1.aryaka.net
ads1.aryaka.net
ads2.aryaka.net
ads2.aryaka.net
ads1.aryaka.net
ads2.aryaka.net
*.aryaka.net
ads2.aryaka.net
ads1.aryaka.net
ads4-wc.aryaka.net
ads2.aryaka.net
ads4-wc.aryaka.net
ads2.aryaka.net
ads2.aryaka.net
ads1.aryaka.net
ads1.aryaka.net
ads2.aryaka.net
ads1.aryaka.net
ads4-wc.aryaka.net
ads4-wc.aryaka.net
ads2.aryaka.net
ads1.aryaka.net
ads4-wc.aryaka.net
ads2.aryaka.net
ads4-wc.aryaka.net
ads4-wc.aryaka.net
ads2.aryaka.net
ads4-wc.aryaka.net
ads2.aryaka.net
ads4-wc.aryaka.net
ads2.aryaka.net
ads2.aryaka.net
ads4-wc.aryaka.net
ads1.aryaka.net
ads2.aryaka.net
ads1.aryaka.net
ads2.aryaka.net
ads1.aryaka.net
ads4-wc.aryaka.net
ads1.aryaka.net
ads2.aryaka.net
ads4-wc.aryaka.net
ads2.aryaka.net
ads2.aryaka.net
ads4-wc.aryaka.net
ads4-wc.aryaka.net
ads2.aryaka.net
ads4-wc.aryaka.net
ads2.aryaka.net
ads1.aryaka.net
ads1.aryaka.net
ads1.aryaka.net
ads2.aryaka.net
ads1.aryaka.net
ads1.aryaka.net
ads1.aryaka.net
ads2.aryaka.net
ads2.aryaka.net

Certificate

The complete raw certificate details for ads4-wc.aryaka.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG+TCCBeGgAwIBAgIQDySB0tp40YROBAtD7ISNMTANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTYwMjI2MDAwMDAwWhcN
MTcwNjIyMTIwMDAwWjBqMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExETAPBgNV
BAcTCE1pbHBpdGFzMR4wHAYDVQQKExVBcnlha2EgTmV0d29ya3MsIEluYy4xGzAZ
BgNVBAMTEmFkczQtd2MuYXJ5YWthLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAME2EXJEj5tzon/wDI9Oiu56qyj1RcCi908NxP57SB9w07UbM12o
lUVjlMKpxlGhqyNMIpwFu125XrAlOdC8hiCpfpk1qlL+0qEtUeXEjzoOz7+OdJ08
LgDaTYy2CBgUEWjhgROiWxNBmrJjzBK53vr9zBXox4p8FkchQRF02H2gRz9RCEet
SS46nL9Et0Zlc/TIU0Dw0qk5o7WQrL5XJW3TjIpaOVQwU267MQnadG4sqIKjerXI
5SLSA6qZdyXUoQnTJhgUbS4StJxTuKI8YHfl3fg/xk/rpPuF2f0k0GGtzbfNIPOS
T1cykpkFcSoStLxSgIRq/FyR6dsogGNV3tUCAwEAAaOCA7YwggOyMB8GA1UdIwQY
MBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBT0Rf1hUGZekrp+UjeQ
VaTRJf+KpzCCAfgGA1UdEQSCAe8wggHrghJhZHM0LXdjLmFyeWFrYS5uZXSCC2Fy
eWFrYS5pbmZvghEqLnNpcml4dHJhZGVyLmNvbYIgKi51c2Vyc2VydmljZXMuZXhs
aWJyaXNncm91cC5jb22CGiouaG9zdGVkLmV4bGlicmlzZ3JvdXAuY29tghMqLmV4
bGlicmlzZ3JvdXAuY29tghEqLmV4bGlicmlzLmNvbS5jboIYKi5hbG1hLmV4bGli
cmlzZ3JvdXAuY29tgg9hZHMzLmFyeWFrYS5uZXSCEHRlc3QuYXJ5YWthLmluZm+C
D3Rlc3QuYXJ5YWthLmNvbYIRY2gub3BpbmlvbmJhci5jb22CHGNoLndlYnN1cnZl
eTIub3BpbmlvbmJhci5jb22CCW15Lm1vbmFzaIIQdDEudmlwa2lkLmNvbS5jboIS
bXNqcy52aXBraWQuY29tLmNughBwci52aXBraWQuY29tLmNugg0qLmFyeWFrYS5p
bmZvgg0qLmdjbWFzaWEuY29tghsqLmNhbXB1c20uZXhsaWJyaXNncm91cC5jb22C
GioucHJvamVjdHNhbmRhcHByb3ZhbHMuY29tghsqLmxlZ2FudG8uZXhsaWJyaXNn
cm91cC5jb22CGSoucHJpbW8uZXhsaWJyaXNncm91cC5jb20wDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+g
LaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc1LmNybDAv
oC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNS5jcmww
TAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93
d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQG
CCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKG
Omh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVT
ZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAQEALkK1
pvSW75mG0VGKTXQHZsHm5EE2dhEgKHA4GFHnzE4UcSFazUvLb9bbSi6BODFJowvE
TOJx9hIo3bpbc8wQ5jF/p5mp57kWk26HxcyPJIbgAaEfVP4FWYHPrm7D0CNXI5/2
nynhSuOD3d9cvKo6sJc7bjiK6oJUVD3B60Id59yftaPpST48e5Qp/+X6Jpkibevu
5nO9duP0Av3e1LU/FgCPdsiyIfQectGB8uLFC9fxpXu3a01kugfrFoeeO1oALTYQ
b4XSNHcRGDDLSMPvDatmGRTNdJm6G4bA5rGhgiEUbG/Qz79wfHtyv76ln2DCJFA8
eC3mUF6WTQGHKFkh+g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTYRckSPm3Oif/AMj06K
7nqrKPVFwKL3Tw3E/ntIH3DTtRszXaiVRWOUwqnGUaGrI0winAW7XblesCU50LyG
IKl+mTWqUv7SoS1R5cSPOg7Pv450nTwuANpNjLYIGBQRaOGBE6JbE0GasmPMErne
+v3MFejHinwWRyFBEXTYfaBHP1EIR61JLjqcv0S3RmVz9MhTQPDSqTmjtZCsvlcl
bdOMilo5VDBTbrsxCdp0biyogqN6tcjlItIDqpl3JdShCdMmGBRtLhK0nFO4ojxg
d+Xd+D/GT+uk+4XZ/STQYa3Nt80g85JPVzKSmQVxKhK0vFKAhGr8XJHp2yiAY1Xe
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20127975760047783603773536201404091697
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milpitas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aryaka Networks, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ads4-wc.aryaka.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24390654856840969427439344288684050259294567599842977159379967058785036142241354676165438568004052078038977680082010948632679791010307775182165227392267847296606153593541146821594091341079223147182726876987159224027754206995556330330985447600533910497142028673006124357706403621809148481228067043545945104532452162416503167540645668706739351932344632220457121900000798552172697887576488789163558883541979678908577602481197565609662061446243202496124568471546282164185290763136397925817081907266774425559638685999141418693228849357458199862868366026623995069005965082235111610126292114555888998236045059426746264575701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f445fd6150665e92ba7e52379055a4d125ff8aa7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (495 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads4-wc.aryaka.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aryaka.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sirixtrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.userservices.exlibrisgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hosted.exlibrisgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exlibrisgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exlibris.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alma.exlibrisgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads3.aryaka.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.aryaka.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.aryaka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.opinionbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.websurvey2.opinionbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.monash'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't1.vipkid.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msjs.vipkid.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.vipkid.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aryaka.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gcmasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campusm.exlibrisgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projectsandapprovals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leganto.exlibrisgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primo.exlibrisgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002e42b5a6f496ef9986d1518a4d740766c1e6e441367611202870381851e7cc4e1471215acd4bcb6fd6db4a2e81383149a30bc44ce271f61228ddba5b73cc10e6317fa799a9e7b916936e87c5cc8f2486e001a11f54fe055981cfae6ec3d02357239ff69f29e14ae383dddf5cbcaa3ab0973b6e388aea8254543dc1eb421de7dc9fb5a3e9493e3c7b9429ffe5fa2699226debeee673bd76e3f402fdded4b53f16008f76c8b221f41e72d181f2e2c50bd7f1a57bb76b4d64ba07eb16879e3b5a002d36106f85d23477111830cb48c3ef0dab661914cd7499ba1b86c0e6b1a18221146c6fd0cfbf707c7b72bfbea59f60c224503c782de6505e964d0187285921fa