connectserver3.weforum.org

- World Economic Forum -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 0a:8d:3a:8d:f7:68:0b:a6:d0:eb:41:58:50:f8:47:c0 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

World Economic Forum

Organization: World Economic Forum
Organization unit: IT
State / Province: GE
Locality: Cologny
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:8d:3a:8d:f7:68:0b:a6:d0:eb:41:58:50:f8:47:c0
Serial Number (int): 14025581442399076467174239453555738560
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1a:04:d7:b5:c4:f8:d8:e2:59:be:51:7f:08:76:ac:41:f5:d3:49:d7
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): 45:e0:14:97:33:03:a0:7f:6c:a4:14:62:ca:48:3a:29:70:01:30:9f
Fingerprint (sha256): 40:94:bb:fb:59:ef:2c:6d:e5:7b:1c:7c:d4:2f:9d:5e:8f:92:a2:d1:37:d6:4b:10:c8:d1:87:48:22:fc:db:9b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-g20.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g20.crl

Check the revocation status for certificate connectserver3.weforum.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connectserver3.weforum.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connectserver3.weforum.org

Other certificates including the domain name weforum.org

(limited to 100 certificates)
mypassword.weforum.org
virtela.simpplr.com
image.partnerapp1.myworld.com
tracker.weforum.org
dvf.simpplr.com
ssl276313.cloudflaressl.com
connect.weforum.org
5639274879778816-fe4.pantheonsite.io
image.partnerapp1.myworld.com
sni.cloudflaressl.com
5639274879778816-fe4.pantheonsite.io
image.20210419.200345.s6.et.yellsatcloud.com
ssl83833.cloudflare.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
virtela.simpplr.com
5639274879778816-fe4.pantheonsite.io
image.partnerapp1.myworld.com
5639274879778816-fe4.pantheonsite.io
prod.24.slot.cdn.salesforce-communities.com
cdn.intelligence.weforum.org
prod.24.slot.cdn.salesforce-communities.com
5639274879778816-fe4.pantheonsite.io
ssl83833.cloudflare.com
ssl83833.cloudflare.com
5639274879778816-fe4.pantheonsite.io
5639274879778816-fe4.pantheonsite.io
prod.24.slot.cdn.salesforce-communities.com
5639274879778816-fe4.pantheonsite.io
san-2-s6.tlsprovisioning.exacttarget.com
san-1-s50.tlsprovisioning.exacttarget.com
image.20210419.201008.s50.et.yellsatcloud.com
akamai-san8.exacttarget.com
intelligence.weforum.org
remotestatus.dpconsulting.com
prod.24.slot.cdn.salesforce-communities.com
prod.24.slot.cdn.salesforce-communities.com
prod.24.slot.cdn.salesforce-communities.com
intelligence.weforum.org
5639274879778816-fe4.pantheonsite.io
remotestatus.dpconsulting.com
ssl83833.cloudflare.com
5639274879778816-fe4.pantheonsite.io
image.partnerapp1.myworld.com
esms.weforum.org
image.partnerapp1.myworld.com
image.20210419.200345.s6.et.yellsatcloud.com
virtela.simpplr.com
5639274879778816-fe4.pantheonsite.io
*.weforum.org
5639274879778816-fe4.pantheonsite.io
image.20210419.200345.s6.et.yellsatcloud.com
5639274879778816-fe4.pantheonsite.io
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
5639274879778816-fe4.pantheonsite.io
5639274879778816-fe4.pantheonsite.io
aventailrp.weforum.org
image.partnerapp1.myworld.com
5639274879778816-fe4.pantheonsite.io
*.weforum.org
tools.weforum.org
sfwlanp01.weforum.org
dvf.simpplr.com
adfs.weforum.org
ssl83833.cloudflare.com
bearstatus.oostwestsl.com
click.e.weforum.org
image.20210419.200345.s6.et.yellsatcloud.com
ssl83833.cloudflare.com
5639274879778816-fe4.pantheonsite.io
image.20210419.200345.s6.et.yellsatcloud.com
cyberleadership.weforum.org
san-2-s6.tlsprovisioning.exacttarget.com
prod.24.slot.cdn.salesforce-communities.com
remotestatus.dpconsulting.com
5639274879778816-fe4.pantheonsite.io
image.20210419.200345.s6.et.yellsatcloud.com
image.partnerapp1.myworld.com
remotestatus.dpconsulting.com
prod.24.slot.cdn.salesforce-communities.com
image.20210419.200345.s6.et.yellsatcloud.com
toplink-v1.weforum.org
uplink.weforum.org
remotestatus.dpconsulting.com
image.partnerapp1.myworld.com
5639274879778816-fe4.pantheonsite.io
globalshapers.weforum.org
image.20210419.200345.s6.et.yellsatcloud.com
prod.24.slot.cdn.salesforce-communities.com
intelligence.weforum.org
reports.weforum.org
mailbj.weforum.org
bearstatus.oostwestsl.com
survey.weforum.org
prod.24.slot.cdn.salesforce-communities.com
prod.24.slot.cdn.salesforce-communities.com
5639274879778816-fe4.pantheonsite.io
image.partnerapp1.myworld.com

Certificate

The complete raw certificate details for connectserver3.weforum.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyHLApjR0d+tURRTyk5m
kOUz08Au8a1gI22sPabWeXvIVjDh6ty3iWUzAxEv1y6n0wczHPKbFbNIBeQPeaMS
Mgxv7g7X1dlrsm5EbigBpFUYyIIZDX92dDUHufO61NwcwAwUGey1y/AOg35rup62
mT61GradNPRO4P70T3TMX3Jvba6Ps3BEKLPtnAiAlEMv2Mvkq1Is6yqOnwBIf8Ck
AEorKshQS3boJjNlGDlWrA6sTq2f/GRRPuJLmEfjJ0kjvA+TiQr5h26EtVSv6kGt
GTa+5U6xFXC9WLnkeeH8s2B9NGGGy8FgMlid/Kx1IEDjsXN5ajk+dd3neETssG9n
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14025581442399076467174239453555738560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cologny'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'World Economic Forum'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connectserver3.weforum.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25138086641750089874594239851942536897524499953667148888536753041753411236269327480859239613014098533923586068746400936212383889704946035894316676444506464565229088482332727411675368551921999063293583355964471347695364693594704158036006801477184562584488805865613858232628007172305071776025226750740087832699521939201113422337618614481742138982181826413192388046198156303723284178050972589465372920804753722886351660814122988185131616714623064000974180798170711365910558757566458324880119391424585169176216567115588931037571412871209832354164267734973347692801512523934030572801459351743652924247795391136436772103949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a04d7b5c4f8d8e259be517f0876ac41f5d349d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectserver3.weforum.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g20.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g20.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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