it.aramex.support

- Freshworks Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0c:e7:6d:18:0e:ff:d8:e6:4c:b8:a5:1e:be:25:40:3d was issued on by DigiCert Inc.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Freshworks Inc

Organization: Freshworks Inc
Organization unit: Freshworks
State / Province: California
Locality: San Bruno
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:e7:6d:18:0e:ff:d8:e6:4c:b8:a5:1e:be:25:40:3d
Serial Number (int): 17152369212505324532396890163173998653
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b1:08:ab:40:32:f8:e5:85:f4:e6:18:1b:6f:f6:84:24:e5:eb:b4:58
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): e4:1d:81:c9:f1:24:0a:ed:7b:a4:a6:f0:63:99:d2:ee:a9:0f:ac:27
Fingerprint (sha256): 40:55:f8:3d:b9:c5:6f:46:d1:9b:78:13:81:fd:5d:87:8d:93:1a:01:ad:71:3f:38:1a:35:fd:82:3b:f5:a1:be

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate it.aramex.support

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for it.aramex.support

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

it.aramex.support
us-helpdesk.affinityx.com
in-helpdesk.affinityx.com
ph-helpdesk.affinityx.com
itsupport.prochant.com
ithelp.alaschools.org
helpdesk.ucumberlands.edu
support.ccmbbusiness.ca
helpdesk.cornerstone.bank
support.watsonmortgagecorp.com
support.cspr.dexion.com.au
servicedesk.inbweb.com
helpdesk.tepuia.com

Other certificates including the domain name aramex.support

(limited to 100 certificates)
it.aramex.support
fsus-10.freshservice.com
fsus-25a.freshservice.com
it.aramex.support
help.celerity-uk.com
help.cloudio.dk
itsupport.dometic.com
fsus-14.freshservice.com
it.aramex.support
it.aramex.support
fsus-10.freshservice.com
fsus-14.freshservice.com
help.globality.cloud
fsus-10.freshservice.com
it.aramex.support
help.globality.cloud
europe.aramex.support
it.aramex.support
fsus-14.freshservice.com
fsus-13.freshservice.com
fsus-14.freshservice.com
fsus-13.freshservice.com
help.celerity-uk.com
help.globality.cloud
it.aramex.support
fsus-13.freshservice.com
fsus-14.freshservice.com
itsupport.dometic.com
fsus-14.freshservice.com
it.aramex.support
help.globality.cloud
help.cloudio.dk
it.aramex.support
it.aramex.support
it.aramex.support
itsupport.dometic.com
it.aramex.support
it.aramex.support
it.aramex.support
fsus-25a.freshservice.com
it.aramex.support
it.aramex.support
helpdesk.appareluae.com
itsupport.dometic.com
help.globality.cloud
it.aramex.support
fsus-14.freshservice.com
it.aramex.support
helpdesk.appareluae.com
fsus-25a.freshservice.com
it.aramex.support
fsus-10.freshservice.com
it.aramex.support
fsus-14.freshservice.com
it.aramex.support
it.aramex.support
it.aramex.support
fsus-14.freshservice.com
it.aramex.support
fsus-10.freshservice.com
help.globality.cloud
it.aramex.support
fsus-10.freshservice.com
it.aramex.support
it.aramex.support
fsus-13.freshservice.com
help.cloudio.dk
it.aramex.support
it.aramex.support
it.aramex.support
fsus-14.freshservice.com
help.celerity-uk.com
it.aramex.support
it.aramex.support
it.aramex.support
it.aramex.support
fsus-10.freshservice.com
it.aramex.support
it.aramex.support
fsus-10.freshservice.com
it.aramex.support
help.celerity-uk.com
help.celerity-uk.com
it.aramex.support
it.aramex.support
help.globality.cloud
fsus-14.freshservice.com
fsus-14.freshservice.com
itsupport.dometic.com
fsus-13.freshservice.com
help.celerity-uk.com
fsus-10.freshservice.com
fsus-14.freshservice.com
it.aramex.support
it.aramex.support
it.aramex.support
help.globality.cloud
help.globality.cloud
fsus-25a.freshservice.com
help.globality.cloud

Certificate

The complete raw certificate details for it.aramex.support in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHrTCCBpWgAwIBAgIQDOdtGA7/2OZMuKUeviVAPTANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0xODA0MTMwMDAwMDBaFw0xOTA0MDMxMjAwMDBa
MIGAMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTESMBAGA1UEBxMJ
U2FuIEJydW5vMRcwFQYDVQQKEw5GcmVzaHdvcmtzIEluYzETMBEGA1UECxMKRnJl
c2h3b3JrczEaMBgGA1UEAxMRaXQuYXJhbWV4LnN1cHBvcnQwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQC2uIDQT4XbzRIPwkvcNXtznUdf68V4yCj018jz
uDk4JPD31SrloZaaeMGNJl9Salu5w0XAXmXozZYV8e88YQFkhTue11m7G37t889v
5gQY4Pzvy0sV2X6+ROsIEPaiy/KPV2uNyt++AtahUg8yocLGzsFdxiVeKBpJ8xyR
1s1IdwsAd8EW6/zoVGeNwvsug1X31s0sS1wDmBIG290+rqD4CrNS6ubO790OPdDl
9ituivVkll4kgFMyGUXxXNGP0P/5ute+firUbhfG3B9sFCnRw4SXWoHAuL6obTbF
m6GTaskb5ZsPR+cW92KY9tsiXNSSwbSheJ9TCKlaFz3nRLY9AgMBAAGjggQwMIIE
LDAfBgNVHSMEGDAWgBRRaP+QrwIHdTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQUsQir
QDL45YX05hgbb/aEJOXrtFgwggFYBgNVHREEggFPMIIBS4IRaXQuYXJhbWV4LnN1
cHBvcnSCGXVzLWhlbHBkZXNrLmFmZmluaXR5eC5jb22CGWluLWhlbHBkZXNrLmFm
ZmluaXR5eC5jb22CGXBoLWhlbHBkZXNrLmFmZmluaXR5eC5jb22CFml0c3VwcG9y
dC5wcm9jaGFudC5jb22CFWl0aGVscC5hbGFzY2hvb2xzLm9yZ4IZaGVscGRlc2su
dWN1bWJlcmxhbmRzLmVkdYIXc3VwcG9ydC5jY21iYnVzaW5lc3MuY2GCGWhlbHBk
ZXNrLmNvcm5lcnN0b25lLmJhbmuCHnN1cHBvcnQud2F0c29ubW9ydGdhZ2Vjb3Jw
LmNvbYIac3VwcG9ydC5jc3ByLmRleGlvbi5jb20uYXWCFnNlcnZpY2VkZXNrLmlu
YndlYi5jb22CE2hlbHBkZXNrLnRlcHVpYS5jb20wDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5o
dHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYuY3JsMDSg
MqAwhi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzYu
Y3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBz
Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMIGDBggrBgEFBQcBAQR3
MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBNBggrBgEF
BQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkhp
Z2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADCCAQQGCisGAQQB
1nkCBAIEgfUEgfIA8AB1AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQ
AAABYr7CQb8AAAQDAEYwRAIgJ8i7cyCUwFA3ThOrp4N7b8iT0Zw4FfRZFTAp32vT
C18CIHTgQMsUPfvQ78QCizR/upVnZ26sEK1EOcubUmc5pmeqAHcAb1N2rDHwMRnY
mQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFivsJDLwAABAMASDBGAiEAleZW6S/A
N+mlPvbqgccuiKPaqX2bK1przZiqiQEhhKECIQDh8XSFON0BnO4uUVcYOboMmHl/
pkuRzvBmskChbQHyojANBgkqhkiG9w0BAQsFAAOCAQEAdPeHOTXVISLjW5sciU3t
eHpnn+L1R9jWkwNonNeCXjrW8Zu0BxBW/l7RLs6ZNtx65f41h9xvfAz+chl0BCpQ
LXdkruKsU28G50mYPnTY66uD1voeiuPZeO8GCVqtAdn0v1R0c7MB+VdkVzko3J7Z
qWT8GsTJKc+a9/t7ljUoBuqUlTI9LC+eZcoWwvASPtXM/i/di7YqctvpEd8+R5qG
3RrpxJTIkksqMnPVdUxBF9XlN2dQ9NHbExi4ChyvlMqQk8Ys0YYPCtVOL2OV8nCM
KYpGscZKNC5GNi/TSrQ8aQI0pgvBIaRAiV+AkER5ZyO/LKKcSqSrlgbxQfi5f382
4Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtriA0E+F280SD8JL3DV7
c51HX+vFeMgo9NfI87g5OCTw99Uq5aGWmnjBjSZfUmpbucNFwF5l6M2WFfHvPGEB
ZIU7ntdZuxt+7fPPb+YEGOD878tLFdl+vkTrCBD2osvyj1drjcrfvgLWoVIPMqHC
xs7BXcYlXigaSfMckdbNSHcLAHfBFuv86FRnjcL7LoNV99bNLEtcA5gSBtvdPq6g
+AqzUurmzu/dDj3Q5fYrbor1ZJZeJIBTMhlF8VzRj9D/+brXvn4q1G4XxtwfbBQp
0cOEl1qBwLi+qG02xZuhk2rJG+WbD0fnFvdimPbbIlzUksG0oXifUwipWhc950S2
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17152369212505324532396890163173998653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Bruno'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Freshworks Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Freshworks'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'it.aramex.support'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23066353412116738461747449828822897533581259477043768814803469937080102481232233726180541606328102275844561668635756689317103898783809694372250552657546419925421478492909533983027232552596650358269182543182505244389962877910436594148789553063638614219483649225473963064482429351308250037240404921013984533124955976335655284963647760404607702557705657024977697225428456876828197588121401901037022773834334362242863247355862692474048297445505814048384869011465710169919408187652302312717451596617038510326857979382854803457855050139036842170278478657191628332127533784223596372247211516552789866553918514595708717545021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b108ab4032f8e585f4e6181b6ff68424e5ebb458
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (335 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.aramex.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-helpdesk.affinityx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in-helpdesk.affinityx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ph-helpdesk.affinityx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport.prochant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ithelp.alaschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ucumberlands.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ccmbbusiness.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.cornerstone.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.watsonmortgagecorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cspr.dexion.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.inbweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.tepuia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000162bec241bf0000040300463044022027c8bb732094c050374e13aba7837b6fc893d19c3815f459153029df6bd30b5f022074e040cb143dfbd0efc4028b347fba9567676eac10ad4439cb9b526739a667aa0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000162bec2432f000004030048304602210095e656e92fc037e9a53ef6ea81c72e88a3daa97d9b2b5a6bcd98aa89012184a1022100e1f1748538dd019cee2e51571839ba0c98797fa64b91cef066b240a16d01f2a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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