sa124gl.wpc.edgecastcdn.net

- Verizon Digital Media Services, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:2d:db:8f:c6:5e:fc:7e:0d:e7:93:37:0d:da:9d:1a was issued on by DigiCert Inc.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Verizon Digital Media Services, Inc.

Organization: Verizon Digital Media Services, Inc.
State / Province: California
Locality: Los Angeles
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:db:8f:c6:5e:fc:7e:0d:e7:93:37:0d:da:9d:1a
Serial Number (int): 4225790584712117450933880335176998170
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 85:c3:5e:07:2f:3b:34:c6:22:d9:a4:10:df:b1:72:80:3b:fa:16:3f
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): d6:12:aa:75:96:81:ca:76:68:79:76:b7:e2:7f:5e:ab:b1:fb:8a:d1
Fingerprint (sha256): 42:0c:7d:14:ac:00:70:e3:8a:45:d7:1f:fe:f5:1c:ce:44:cc:33:ab:87:de:84:44:93:b5:1e:d5:52:d2:82:55

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate sa124gl.wpc.edgecastcdn.net

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sa124gl.wpc.edgecastcdn.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

az718207.vo.msecnd.net
az765165.vo.msecnd.net
az857794.vo.msecnd.net
cdn.october.codes
sa122gl.wpc.edgecastcdn.net
sa124gl.wpc.edgecastcdn.net
sa124gl.wpc.kappacdn.net
static.playposit.com
webchat-a.helpshift.com

Other certificates including the domain name edgecastcdn.net

(limited to 100 certificates)
sni1b78egl.wpc.edgecastcdn.net
snif52dgl.wpc.edgecastcdn.net
sni2ca36gl.wpc.edgecastcdn.net
sa390gl.wpc.edgecastcdn.net
sni19013gl.adn.edgecastcdn.net
sni1d11bgl.wpc.edgecastcdn.net
sa402gl.wpc.edgecastcdn.net
sni18c36gl.wpc.edgecastcdn.net
sni1c385gl.wpc.edgecastcdn.net
sa378gl.wpc.edgecastcdn.net
sa32gl.adn.edgecastcdn.net
sni1ada6gl.wpc.edgecastcdn.net
snifcb5gl.wpc.edgecastcdn.net
sa68gl.wpc.edgecastcdn.net
sa488gl.wpc.edgecastcdn.net
sni1d39agl.wpc.edgecastcdn.net
snif2e9gl.wpc.edgecastcdn.net
sa7gl.wpc.edgecastcdn.net
snic74agl.wpc.edgecastcdn.net
sni1a222gl.wpc.edgecastcdn.net
sni192degl.wpc.edgecastcdn.net
sa10gl.wpc.edgecastcdn.net
sni1e35dgl.wpc.edgecastcdn.net
sni1c35cgl.wpc.edgecastcdn.net
sa424gl.wpc.edgecastcdn.net
s2.wac.edgecastcdn.net
sa2gl.wpc.edgecastcdn.net
sni11b92gl.wpc.edgecastcdn.net
sa462gl.wpc.edgecastcdn.net
sni1d489gl.wpc.edgecastcdn.net
sa7gl.wpc.edgecastcdn.net
s10.wac.edgecastcdn.net
sni1bd6egl.wpc.edgecastcdn.net
sa5gl.wpc.edgecastcdn.net
sni19cbegl.wpc.edgecastcdn.net
sa58gl.wpc.edgecastcdn.net
sni1b05agl.wpc.edgecastcdn.net
sa88gl.wpc.edgecastcdn.net
sni11eb5gl.wpc.edgecastcdn.net
snic6c6gl.wpc.edgecastcdn.net
sni1cf3bgl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sa10gl.wpc.edgecastcdn.net
sni1df9cgl.wpc.edgecastcdn.net
sa8gl.wpc.edgecastcdn.net
sni19bf0gl.wpc.edgecastcdn.net
sni1c26fgl.wpc.edgecastcdn.net
sni186cbgl.wpc.edgecastcdn.net
sni1160dgl.wpc.edgecastcdn.net
sni10f1dgl.wpc.edgecastcdn.net
snib7bbgl.wpc.edgecastcdn.net
sa91gl.wpc.edgecastcdn.net
snie7fbgl.wpc.edgecastcdn.net
sni11024gl.wpc.edgecastcdn.net
sa9gl.wpc.edgecastcdn.net
sni1eb03gl.wpc.edgecastcdn.net
sa170gl.wpc.edgecastcdn.net
sa17gl.wpc.edgecastcdn.net
sni1a660gl.wpc.edgecastcdn.net
sni1b5afgl.wpc.edgecastcdn.net
sni125b4gl.wpc.edgecastcdn.net
sa10gl.wpc.edgecastcdn.net
sni1c88bgl.wpc.edgecastcdn.net
sni19addgl.wpc.edgecastcdn.net
sa7gl.wpc.edgecastcdn.net
sni1dd4dgl.wpc.edgecastcdn.net
sa492gl.wpc.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sni127cbgl.wpc.edgecastcdn.net
sni1bc62gl.wpc.edgecastcdn.net
sa9gl.wpc.edgecastcdn.net
sni24206gl.wpc.edgecastcdn.net
sni12ae0gl.wpc.edgecastcdn.net
snice42gl.wpc.edgecastcdn.net
sni1d59fgl.wpc.edgecastcdn.net
snid56agl.wpc.edgecastcdn.net
sni1c41fgl.wpc.edgecastcdn.net
*.sysops.ceaws.edgecastcdn.net
sa505gl.wpc.edgecastcdn.net
sni11d12gl.adn.edgecastcdn.net
sni18531gl.wpc.edgecastcdn.net
sni33750gl.wpc.edgecastcdn.net
snid82agl.wpc.edgecastcdn.net
sni18f84gl.wpc.edgecastcdn.net
sni11a36gl.wpc.edgecastcdn.net
sni1be0egl.wpc.edgecastcdn.net
sni1d142gl.wpc.edgecastcdn.net
sa393gl.wpc.edgecastcdn.net
sni17eeegl.wpc.edgecastcdn.net
sni133b3gl.adn.edgecastcdn.net
sni10d4egl.wpc.edgecastcdn.net
sni13369gl.wpc.edgecastcdn.net
sni9744gl.wpc.edgecastcdn.net
sa399gl.wpc.edgecastcdn.net
sa1gl.adn.edgecastcdn.net
sa4gl.wpc.edgecastcdn.net
sni1c640gl.wpc.edgecastcdn.net
sni1c650gl.wpc.edgecastcdn.net
snie39cgl.wpc.edgecastcdn.net
snifb17gl.wpc.edgecastcdn.net

Certificate

The complete raw certificate details for sa124gl.wpc.edgecastcdn.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIQAy3bj8Ze/H4N55M3DdqdGjANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwNTE0MDAwMDAwWhcN
MjAwODE1MTIwMDAwWjCBjTELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3Ju
aWExFDASBgNVBAcTC0xvcyBBbmdlbGVzMS0wKwYDVQQKEyRWZXJpem9uIERpZ2l0
YWwgTWVkaWEgU2VydmljZXMsIEluYy4xJDAiBgNVBAMTG3NhMTI0Z2wud3BjLmVk
Z2VjYXN0Y2RuLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIz/
xKNu29wlDjhUFJCGCgCeeBAbbX4tqVXuCYL1e+Du4PMJwA3mDZloPJAj7awaB2mG
fyVpP01Qn2ayCeGoQXyaXIl77y9Es3vLzdPq3sOk5YnMXY+eHZ57Y0FZ0ltUDjCO
onj5H+JX0I41EZaLGfDPMVWZ4PXZK/ccvTVTyNAoBjcO2+BWlAakDkcKnRkyPtXP
hZ1TJ7n+ORC8t6D5/iMDuqCOu3So8BfASo7kGwgdQ9AnaY2FSsM7baXf8ahYuZ0Y
uQM55qhRsQht2wucs5l3O5pZIVzlKzNWV0BK7tuuj7i1FKjPmEqNfeMSi1xWqx4N
D53Y2aNp0FZujTv0hxECAwEAAaOCArswggK3MB8GA1UdIwQYMBaAFA+AYRyCMWHV
LyjnjUY4tCzhxtniMB0GA1UdDgQWBBSFw14HLzs0xiLZpBDfsXKAO/oWPzCB6QYD
VR0RBIHhMIHeghZhejcxODIwNy52by5tc2VjbmQubmV0ghZhejc2NTE2NS52by5t
c2VjbmQubmV0ghZhejg1Nzc5NC52by5tc2VjbmQubmV0ghFjZG4ub2N0b2Jlci5j
b2Rlc4Ibc2ExMjJnbC53cGMuZWRnZWNhc3RjZG4ubmV0ghtzYTEyNGdsLndwYy5l
ZGdlY2FzdGNkbi5uZXSCGHNhMTI0Z2wud3BjLmthcHBhY2RuLm5ldIIUc3RhdGlj
LnBsYXlwb3NpdC5jb22CF3dlYmNoYXQtYS5oZWxwc2hpZnQuY29tMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQw
YjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5j
cmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYu
Y3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBz
Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAw
bjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUF
BzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2Vj
dXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQC
BQAwDQYJKoZIhvcNAQELBQADggEBAAxtMxsT4dfaeUS+FdXpIaAjHGRkWDGPXn4S
8D5KLVRJf7vA/FNrkFhRH7vSd4TwrPvlaqb20TjeQfbpcXZcWmirO917SJL/5Ib+
AzRfVPohPJjiPctY0dcNQsUby/Xiij/oMsNCaHMJ47lY/8VgFyPG1rjujoiTo0Sx
S5y7x7NYYHTTKgr6PBJ7BK+lDfjVdc1luheWVvSJk8natvi9jdVQhGo/jj/WIzPM
78ojKCQJiACELCCkvYE5o92oHxca1KQy//rXlkRDLg78EEeuLQnGvEDH/7p2+Hog
R1WDB9UAMS/x7byhqlnMNRjkYlFVshWWO2E6OYwAXQ4HHC/5014=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP/Eo27b3CUOOFQUkIYK
AJ54EBttfi2pVe4JgvV74O7g8wnADeYNmWg8kCPtrBoHaYZ/JWk/TVCfZrIJ4ahB
fJpciXvvL0Sze8vN0+rew6Tlicxdj54dnntjQVnSW1QOMI6iePkf4lfQjjURlosZ
8M8xVZng9dkr9xy9NVPI0CgGNw7b4FaUBqQORwqdGTI+1c+FnVMnuf45ELy3oPn+
IwO6oI67dKjwF8BKjuQbCB1D0CdpjYVKwzttpd/xqFi5nRi5AznmqFGxCG3bC5yz
mXc7mlkhXOUrM1ZXQEru266PuLUUqM+YSo194xKLXFarHg0PndjZo2nQVm6NO/SH
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4225790584712117450933880335176998170
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Los Angeles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Digital Media Services, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sa124gl.wpc.edgecastcdn.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17799486655328079395825645300788393545367354717305079338956974235565020498459153852794178553437965049454889015250572649436668821701830227505724630369943676876735318455983049825966817643100835224009925393449237859152271447429664142122663737221629421389378741141703010085337301518979002837470075760976541095354587883444160343309450355065744678219160370195887636244766400590866035547740319632118874412116128559776992630534884332949063635489122559255793379727009776116813501326932763209786851370098999012166662413389165288207273068717422321249386913334180872359239601293722555661145466516991398718436076704672021753399057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85c35e072f3b34c622d9a410dfb172803bfa163f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (225 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'az718207.vo.msecnd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'az765165.vo.msecnd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'az857794.vo.msecnd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.october.codes'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa122gl.wpc.edgecastcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa124gl.wpc.edgecastcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa124gl.wpc.kappacdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.playposit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webchat-a.helpshift.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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