es.bankofalbuquerque.com

- BOK Financial Corporation -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 08:0d:94:69:7c:16:a3:17:d2:56:91:57:3b:a7:61:94 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BOK Financial Corporation

Company registration number: 1900494658
Organization: BOK Financial Corporation
Organization unit: BOK Financial Corporation
State / Province: Oklahoma
Locality: Tulsa
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:0d:94:69:7c:16:a3:17:d2:56:91:57:3b:a7:61:94
Serial Number (int): 10704333979422191958426137660844630420
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d5:55:11:c3:66:a9:e7:e1:63:14:f4:5d:ce:eb:c9:69:c4:15:00:36
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): bd:ab:a8:5b:3d:77:20:38:48:54:e6:78:e1:1b:2a:8c:36:88:88:b4
Fingerprint (sha256): 40:23:84:22:e8:7c:ec:fe:82:16:30:47:6c:ee:77:05:24:57:04:45:df:a3:f2:a2:c4:17:eb:00:ce:3e:d0:0e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl

Check the revocation status for certificate es.bankofalbuquerque.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for es.bankofalbuquerque.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

es.bankofalbuquerque.com

Other certificates including the domain name bankofalbuquerque.com

(limited to 100 certificates)
homenow-d.bokf.com
onlinebanking.bokfinancial.com
openaccount.bokfinancial.com
onlinebanking.bokfinancial.com
onlinebanking.bokfinancial.com
homenow-t.bokf.com
www.bokfinancial.com
homenow.bokf.com
loans.bankofalbuquerque.com
homenow-t.bokf.com
ila.bankofalbuquerque.com
homenow-t.bokf.com
homenow.bokf.com
www.bankofalbuquerque.com
homenow-mqa.bokf.com
openaccount.bankofoklahoma.com
tracking.bankofalbuquerque.com
response.bankofalbuquerque.com
loans.bankofalbuquerque.com
onlinebanking.bankofalbuquerque.com
onlinebanking.bokfinancial.com
go.bokf.com
response.bankofalbuquerque.com
homenow-d.bokf.com
www.bokfinancial.com
response.bankofalbuquerque.com
response.bankofalbuquerque.com
homenow.bokf.com
homenow-t.bokf.com
www.bokfinancial.com
loans.bankofalbuquerque.com
www.bankofalbuquerque.com
locations.bankofalbuquerque.com
www.bokfinancial.com
bok-qa.roostify.com
go.bokf.com
onlinebanking.bokfinancial.com
openaccount.bokfinancial.com
demosource.bokf.com
www.bankofalbuquerque.com
tracking.bankofalbuquerque.com
es.bankofalbuquerque.com
www.bankofalbuquerque.com
www.bokfinancial.com
locations.bankofoklahoma.com
onlinebanking.bankofalbuquerque.com
response.bankofalbuquerque.com
homenow.bokf.com
onlinebanking.bokfinancial.com
homenow-d.bokf.com
onlinebanking.bokfinancial.com
es.bankofalbuquerque.com
www.bokfinancial.com
locations.bankofalbuquerque.com
openaccount.bankofoklahoma.com
bok-qa.roostify.com
homenow.bokf.com
onlinebanking.bankofalbuquerque.com
www.bankofalbuquerque.com
homenow-t.bokf.com
homenow-t.bokf.com
response.bankofalbuquerque.com
ila.bankofalbuquerque.com
bok-qa.roostify.com
es.bankofalbuquerque.com
www.bankofalbuquerque.com
onlinebanking.bokfinancial.com
openaccount.bankofoklahoma.com
onlinebanking.bankofalbuquerque.com
es.bankofalbuquerque.com
www.bokfinancial.com
bok-qa.roostify.com
mortgage-d.bokf.com
onlinebanking.bankofalbuquerque.com
www.bokfinancial.com
homenow.bokf.com
www.bankofalbuquerque.com
es.bokfinancial.com
sitecore.bokfinancial.com
es.bokfinancial.com
homenow.bokf.com
homenow-mqa.bokf.com
bok-qa.roostify.com
loans.bankofalbuquerque.com
m.bankofalbuquerque.com
openaccount.bokfinancial.com
onlinebanking.bokfinancial.com
es.bankofalbuquerque.com
ila.bankofalbuquerque.com
locations.bokfinancial.com
www.bokfinancial.com
locations.bokfinancial.com
www.bankofalbuquerque.com
homenow.bokf.com
onlinebanking.bokfinancial.com
openaccount.bankofoklahoma.com
homenow-d.bokf.com
m.bankofalbuquerque.com
homenow-mqa.bokf.com
onlinebanking.bankofalbuquerque.com

Certificate

The complete raw certificate details for es.bankofalbuquerque.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rYr7xp3TASZOpeM+l+N
LdAVRUwsgknlEYRtS2KHJLsfo3+JyfoZ+Ezs2b/TjPYWru6DxO/sY9gr8ranVhGE
EB2UMKKf9sDJK9+LqNXD4xfADRIClijg+iIU2ruwVpYfxmED/WfcYMRLZrOrVf52
05ttE94mFqhWI4g1hV20EyWdlMrUCGQOaYiKUxxU0f3E4HYlFJvsM1TqXgkXG+48
IH9tx2Fq/F48zxuvItH4Y6pQk8Y9vBebz2MCrRFe34EN2kMNtT/bfKZ8JXSIanQ1
hC/1RUp0LKXagCX4qgUcrmrEbrpzKBlHIOky3CSQWcYjpUiyzG8tpcekllBax7Mi
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10704333979422191958426137660844630420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oklahoma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1900494658'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oklahoma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tulsa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BOK Financial Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BOK Financial Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'es.bankofalbuquerque.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26599876215393743823960686953568392196499854518680481461636345439663833578064935691804245028320320325716701372544009364271836836931584388349397616365566425709124329397656000930911814072258292526012103297956329247974180777154880167415392981435631989470573154237277254689461692699857032264787043131158524889970069735167511591543380639149565162958797806180505609259803287470192119291156347599070231396129680320832052129516520848506212799856419948228219918720781891082207880819403054770641990811318977747338078199955034824103336987700596888129539747162236917674610085928608528233218122490131851344218435317009180135727707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d55511c366a9e7e16314f45dceebc969c4150036
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.bankofalbuquerque.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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