www.westbahn.at

- Westbahn Management GmbH -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 0d:1f:5d:17:6c:e5:a3:49:68:2a:0d:51:23:99:b2:37 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Westbahn Management GmbH

Company registration number: 319409w
Organization: Westbahn Management GmbH
State / Province: Wien
Locality: Wien
Country: AT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:1f:5d:17:6c:e5:a3:49:68:2a:0d:51:23:99:b2:37
Serial Number (int): 17442813267861359610914997923089068599
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ad:05:1a:67:2e:c1:00:53:8a:fc:95:e3:53:b6:67:ec:2a:e3:73:dc
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): e3:a3:3c:92:75:59:b1:46:ae:60:3d:e8:bb:43:46:a7:6e:cf:34:0b
Fingerprint (sha256): 41:13:ce:2d:6f:ff:a9:26:33:56:11:07:48:ee:ea:8d:f8:11:77:73:6d:24:08:7a:5a:6b:b4:27:c9:1c:08:0d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate www.westbahn.at

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.westbahn.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.westbahn.at
westbahn.at

Other certificates including the domain name westbahn.at

(limited to 100 certificates)
westbahn.at
*.westbahn.at
westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
jetztnurnochbezahlen.westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
www.westbahn.at
*.westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
westbahn.at
www.westbahn.at
jetztnurnochbezahlen.westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
jetztnurnochbezahlen.westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
jetztnurnochbezahlen.westbahn.at
*.westbahn.at
test.pay.westbahn.at
ticketingfeedback.westbahn.at
jetztnurnochbezahlen.westbahn.at
jetztnurnochbezahlen.westbahn.at
www.westbahn.at
jetztnurnochbezahlen.westbahn.at

Certificate

The complete raw certificate details for www.westbahn.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIVTCCBz2gAwIBAgIQDR9dF2zlo0loKg1RI5myNzANBgkqhkiG9w0BAQsFADB1
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk
IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTIyMDkwNjAwMDAwMFoXDTIzMTAwNjIz
NTk1OVowgdwxEzARBgsrBgEEAYI3PAIBAxMCQVQxFTATBgsrBgEEAYI3PAIBAhME
V2llbjEVMBMGCysGAQQBgjc8AgEBEwRXaWVuMR0wGwYDVQQPDBRQcml2YXRlIE9y
Z2FuaXphdGlvbjEQMA4GA1UEBRMHMzE5NDA5dzELMAkGA1UEBhMCQVQxDTALBgNV
BAgTBFdpZW4xDTALBgNVBAcTBFdpZW4xITAfBgNVBAoTGFdlc3RiYWhuIE1hbmFn
ZW1lbnQgR21iSDEYMBYGA1UEAxMPd3d3Lndlc3RiYWhuLmF0MIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEArOfe+DFToWTZQOeNHHPc5Ox5tzD7qrXgrpq4
dviIsqhZv7koRZWD1jCwhrviJ+ITama6vqdeezTpbc8pVQBTL9bkXxtE4gCOK8GX
mVyaeqpAC7oTlmXBXfzptFZjxMQzg9IoS+0jESTlAYYw7g9iPqcEh9AgR0fH3hjI
bcLZ+NejQonXPRAa4zaD2mTgZh63kx32HpXKGyhObuHH2x4h9uBZkZZ93Ur7hRBM
7sWa+2zhZlzHKeiNaW+KsSbx24OylA3eZzBEA3ulQa9xyjg0MVioZzLRTCKi5BR+
J4EkBEleaXiW7Czkpnb5TbvH6QWbavef4ogbKd1pl1jtfcbKOk7spVcFmXjv5kt3
Gt+xkNeRCkUf4mB+TL14MnlmKo1ZETF0j7S70vjG5sLqlirfYgINASVt9ebbtohU
18M+VsCQDFvgzeLY4tSV6gFQvR6SD5IHg9W+j0mOv6vIofJ/5cdti8AV+9Cwcohs
PCAreEc9OSUThrMPDorPHqIxB3trBEnwQ6Tab0Bz1PpXFPve3k8DaztlrsGrwJcn
/VpmocNoPknkY2DKIn8GpV1KAK0n/exD6AGlKPbNS82aIr3P9tiqZ2Dtj8hsIV0e
qZo4v4PMM2Q83JruUnx0lUp8Lbn3jeXwqydhkjBTMXSIodrIhcZ4CvPMwyjjtsTv
orO/v6UCAwEAAaOCA3cwggNzMB8GA1UdIwQYMBaAFD3TUKXWoK3u80pgCmXTIdT4
+NYPMB0GA1UdDgQWBBStBRpnLsEAU4r8leNTtmfsKuNz3DAnBgNVHREEIDAegg93
d3cud2VzdGJhaG4uYXSCC3dlc3RiYWhuLmF0MA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0
cDovL2NybDMuZGlnaWNlcnQuY29tL3NoYTItZXYtc2VydmVyLWczLmNybDA0oDKg
MIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NoYTItZXYtc2VydmVyLWczLmNy
bDBKBgNVHSAEQzBBMAsGCWCGSAGG/WwCATAyBgVngQwBATApMCcGCCsGAQUFBwIB
FhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYgGCCsGAQUFBwEBBHwwejAk
BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFIGCCsGAQUFBzAC
hkZodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyRXh0ZW5k
ZWRWYWxpZGF0aW9uU2VydmVyQ0EuY3J0MAkGA1UdEwQCMAAwggF+BgorBgEEAdZ5
AgQCBIIBbgSCAWoBaAB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1u
AAABgxLhj0wAAAQDAEcwRQIhAMtj5pmyF6zTlN3fbNu8nKqambEqnwT6WQClzkXi
/eYbAiAsEWLFQpJBlG7/CWaz6MBlkbcyWnVtpt29IphbW06yzAB2ADXPGRu/sWxX
vw+tTG1Cy7u2JyAmUeo/4SrvqAPDO9ZMAAABgxLhj4oAAAQDAEcwRQIgL+T/7oB+
fByUyIoSrv1kGzDqKAt2/R/dm4UP2lWJ7FMCIQCxkuWHeOqAvSuVpTjekRIEru/M
Cb2x7P0MwrdbUEyMnQB2ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWa
AAABgxLhj8EAAAQDAEcwRQIhAP7aTRBuBCC4Div/asZsPK3/A8Dr4jHN02usIwOX
7GyIAiBeeLOHIvUx5C+vSHt/d/xpD3V/VvCrI3m55GC0Zi87TTANBgkqhkiG9w0B
AQsFAAOCAQEAI5kjh/9JtN68iC+is/KCzolbjIEcEVi/BxKdEo2HG+epu0VISWkQ
JXE5beoZufflDRDTgATiA8UcmyvnIEWz3Sx6jtxzaWogH8zouJmdSeu80EFtdxIk
lnZ2nNRAwPYkXtNBgo60AbqGPe9VcgwUYnBG0AFNprdg6OhbS4jXjbcWIP5FiFKx
DdC3bve4I3YK9j8KF7HxZvSK6waYLSvqwxC9VL3btkmB+s9R1UTygpprIsOWHI4g
4CR6HIy6x9V1gbjXaXtnLg3uVeu5joOAT+EsV+wyGuM80GjcQ3Rov57ZueDEUEMq
o35e5YSpPB1LSvjpYS8stCAdI2KhArpH/g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArOfe+DFToWTZQOeNHHPc
5Ox5tzD7qrXgrpq4dviIsqhZv7koRZWD1jCwhrviJ+ITama6vqdeezTpbc8pVQBT
L9bkXxtE4gCOK8GXmVyaeqpAC7oTlmXBXfzptFZjxMQzg9IoS+0jESTlAYYw7g9i
PqcEh9AgR0fH3hjIbcLZ+NejQonXPRAa4zaD2mTgZh63kx32HpXKGyhObuHH2x4h
9uBZkZZ93Ur7hRBM7sWa+2zhZlzHKeiNaW+KsSbx24OylA3eZzBEA3ulQa9xyjg0
MVioZzLRTCKi5BR+J4EkBEleaXiW7Czkpnb5TbvH6QWbavef4ogbKd1pl1jtfcbK
Ok7spVcFmXjv5kt3Gt+xkNeRCkUf4mB+TL14MnlmKo1ZETF0j7S70vjG5sLqlirf
YgINASVt9ebbtohU18M+VsCQDFvgzeLY4tSV6gFQvR6SD5IHg9W+j0mOv6vIofJ/
5cdti8AV+9CwcohsPCAreEc9OSUThrMPDorPHqIxB3trBEnwQ6Tab0Bz1PpXFPve
3k8DaztlrsGrwJcn/VpmocNoPknkY2DKIn8GpV1KAK0n/exD6AGlKPbNS82aIr3P
9tiqZ2Dtj8hsIV0eqZo4v4PMM2Q83JruUnx0lUp8Lbn3jeXwqydhkjBTMXSIodrI
hcZ4CvPMwyjjtsTvorO/v6UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17442813267861359610914997923089068599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '319409w'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wien'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Westbahn Management GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.westbahn.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 705393900973499569869792443281659923276953953148546628902045663418877133360504543670795152768237220643535353228187268772556233638710848816091028879759648444893609104949567993373280765771080153636688338563730262467824194713476798132995961254171655663288497844601293348671417053049259555165998982019098721095259112566549691334070484786681442713505761985858864396961439960226355420145805673106291285546299930516318906023363650307204579412361885330526035142995226572343369802418511307372956864593668738848822937902611248676977584281562597917647281852680623489111080140473351466860939930246424824751687082943525743247167979786838359129869729162617551220681228751568040248703330752912143183493240612400398599583853694717578375252992845351257750008834018640719598163740397222180227697661554087518668563039310596951356642413519620367598413054710077389101938042619117598424451036076005664548742639237059472253970873094069068915422117197181300981616953766744719155428925929641789999813152336085554497778273253208126347357324644764808519093517731114866774531613094451425841835745755856492257233219516674586021605328541136296667181819894009697916994222045238391117565490092748966747215806352077470540084739504451646050977319437442610472910045093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad051a672ec100538afc95e353b667ec2ae373dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westbahn.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westbahn.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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