acquia-sites.com

- Acquia Inc. -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 0f:de:2b:2c:6a:02:ff:85:29:e3:02:3e:24:f7:f1:fa was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Acquia Inc.

Organization: Acquia Inc.
Organization unit: Acquia Hosting
State / Province: Massachusetts
Locality: Woburn
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:de:2b:2c:6a:02:ff:85:29:e3:02:3e:24:f7:f1:fa
Serial Number (int): 21091985501829613029140118684307026426
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 07:d4:3a:88:e1:3a:ff:ab:3a:f6:ad:f6:02:53:c7:5e:8d:ea:3c:58
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): a3:d7:ab:68:d9:09:8c:9f:24:5d:5f:dc:d2:de:31:90:4e:3f:56:d1
Fingerprint (sha256): 42:2b:63:0d:b0:c3:4c:2c:53:39:54:6e:d2:0b:fd:d1:92:40:92:12:3c:7f:df:b8:84:f7:cd:5d:47:d5:fe:b2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-2011d.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-2011d.crl

Check the revocation status for certificate acquia-sites.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquia-sites.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acquia-sites.com
acquia.com
aonetwork.com
api.schoology.com
cms.news-gazette.com
jaspan.com
mysmartrend.com
schoology.com
sloanconsortium.org
theirc.org
www.aonetwork.com
www.chicagodrupalcamp.org
www.historytoday.com
www.mysmartrend.com
www.news-gazette.com
www.schoology.com
www.starkist.com
www.theirc.org
www.thesource.pdma.org
edit.restorethegulf.gov
globalccsinstitute.com
www.globalccsinstitute.com
insider.vancouversun.com
insider.ottawacitizen.com
customers.unica.com
rosicrucianegyptianmuseum.org
www.rosicrucianegyptianmuseum.org
insider.calgaryherald.com
insider.edmontonjournal.com
insider.leaderpost.com
insider.montrealgazette.com
insider.theprovince.com
insider.thestarphoenix.com
insider.timescolonist.com
insider.windsorstar.com
www.friendfactor.org
customer.unica.com
customercentral.unica.com
imbee.com
prod.imbee.com
stage.imbee.com
www.resumebear.com
luthierbuilt.net
trainlikeanastronaut.org
www.molnmyndigheten.se
demo.molnmyndigheten.se
www.journal-republican.com
www.mcitizen.com
motherjones.com
www.motherjones.com
www2.wwt.com
www2-test.wwt.com
www.pega.com
staging.pega.com
www.leaderlandnews.com
www.county-star.com
www.nokiasiemensnetworks.com
industryanalyst.nokiasiemensnetworks.com
info.nokiasiemensnetworks.com
iptv.nokiasiemensnetworks.com
sdm.partners.nokiasiemensnetworks.com
training-wiki.nokiasiemensnetworks.com
twc.nokiasiemensnetworks.com
br.nokiasiemensnetworks.com
lat.nokiasiemensnetworks.com
inside.nokiasiemensnetworks.com
www.carepackage.org
stage.carepackage.org
welcome-to.nokiasiemensnetworks.com
www.taleo.com
www.taleo.fr
fr.taleo.ca
now-staging.tufts.edu
now.tufts.edu
thenewsfunnel.com
www.thenewsfunnel.com
relationshipmastersacademy.com
www.sanduskyregister.com
www.norwalkreflector.com
www.rifftrax.com
www.idonowidont.com
www.einstruction.com
www.wales.ac.uk
www.grandhaventribune.com
www.cymru.ac.uk
support.epocratesehr.com
www.ise.gov
www.sporton.com
www.joshgroban.com
my.precise.com
www.globalacademy.org.uk
frontier.levi.com
staging.frontier.levi.com
www.daily.newlook.com
www.audubon.org
houseandhome.com
911memorial.org
auth.rcmusictemp.com
daily.newlook.com

Other certificates including the domain name acquia-sites.com

(limited to 100 certificates)
acquia-sites.com
acquia-sites.com
acquia-sites.com
datamedicaid.prod.acquia-sites.com
acquia-sites.com
staging.ensco.com
www-stage.anzacmemorial.nsw.gov.au
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
achievesdtcgjdnbrbp.devcloud.acquia-sites.com
mbrdev.prod.acquia-sites.com
www.stg.solocal.com
tplwebsitestg.prod.acquia-sites.com
raritanvalstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
batterseadev.prod.acquia-sites.com
aupairworld.prod.acquia-sites.com
www.dev.solocal.com
www.stg.solocal.com
premiereprep.com
acquia-sites.com
ee.dustindev.com
cloudapi.enterprise-g1.acquia-sites.com
batterseadev.prod.acquia-sites.com
stewardcommunity.prod.acquia-sites.com
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
planetpaymentprod.prod.acquia-sites.com
trocairestg.prod.acquia-sites.com
tsysitesdev.prod.acquia-sites.com
tplwebsitestg.prod.acquia-sites.com
acquia-sites.com
milgardstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
rrd8multidev.prod.acquia-sites.com
pnwdsstg.prod.acquia-sites.com
www.dev.solocal.com
acquia-sites.com
useastucc5.acquia.com
www.anzacmemorial.nsw.gov.au
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
newhousedev.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
firstnamesgrouptest.devcloud.acquia-sites.com
acquia-sites.com
jfkldev.prod.acquia-sites.com
acquia-sites.com
cloudapi.trex-prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
quickanddirtytipsdev.prod.acquia-sites.com
acquia-sites.com
stewardcommunity.prod.acquia-sites.com
acquia-sites.com
oitcomms.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
univadisstg.prod.acquia-sites.com
useastucc5.acquia.com
datacms.prod.acquia-sites.com
acquia-sites.com
tplwebsitedev.prod.acquia-sites.com
bmistg.prod.acquia-sites.com

Certificate

The complete raw certificate details for acquia-sites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPYzCCDkugAwIBAgIQD94rLGoC/4Up4wI+JPfx+jANBgkqhkiG9w0BAQUFADBm
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSUwIwYDVQQDExxEaWdpQ2VydCBIaWdoIEFzc3VyYW5j
ZSBDQS0zMB4XDTEwMDkxMzAwMDAwMFoXDTExMDkyMTEyMDAwMFowgYAxCzAJBgNV
BAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNldHRzMQ8wDQYDVQQHEwZXb2J1cm4x
FDASBgNVBAoTC0FjcXVpYSBJbmMuMRcwFQYDVQQLEw5BY3F1aWEgSG9zdGluZzEZ
MBcGA1UEAxMQYWNxdWlhLXNpdGVzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ9Utw3+4yBBpzQ1V7g/qtDvX80S2HOPwGDaVBgPH7T4liv9gUCv
n/K0r/cPPG+GjxDt14mwb7L0Z6Tiq9t0DGot/M8gISXvP06JzHji7fiCt/Yzcbua
G/TDP2b+PpDpfw/VfcPNUqpporeHF2xUTQmopGmEiKWl5CmfupepKk8oLVZAzNDE
y3xuXCEa+T/DapyUV9ZeUzGsPZ1M1v1atm+CuVOW+H5G4T8EjE93w6hQYJ0XBWYC
kgZgph6YWnKo/bTYp08yoyyAfOqsWBcEp/XUZrCMbAxie6tACX8FKh5SMEaG9lWv
TyLBfMK9H5QEyIYleO3UgLL0xN8b5BBYWJ0CAwEAAaOCC/AwggvsMB8GA1UdIwQY
MBaAFFDqc4nbKfsQj57lASDU3nmZSIP3MB0GA1UdDgQWBBQH1DqI4Tr/qzr2rfYC
U8dejeo8WDCCCL8GA1UdEQSCCLYwggiyghBhY3F1aWEtc2l0ZXMuY29tggphY3F1
aWEuY29tgg1hb25ldHdvcmsuY29tghFhcGkuc2Nob29sb2d5LmNvbYIUY21zLm5l
d3MtZ2F6ZXR0ZS5jb22CCmphc3Bhbi5jb22CD215c21hcnRyZW5kLmNvbYINc2No
b29sb2d5LmNvbYITc2xvYW5jb25zb3J0aXVtLm9yZ4IKdGhlaXJjLm9yZ4IRd3d3
LmFvbmV0d29yay5jb22CGXd3dy5jaGljYWdvZHJ1cGFsY2FtcC5vcmeCFHd3dy5o
aXN0b3J5dG9kYXkuY29tghN3d3cubXlzbWFydHJlbmQuY29tghR3d3cubmV3cy1n
YXpldHRlLmNvbYIRd3d3LnNjaG9vbG9neS5jb22CEHd3dy5zdGFya2lzdC5jb22C
Dnd3dy50aGVpcmMub3JnghZ3d3cudGhlc291cmNlLnBkbWEub3JnghdlZGl0LnJl
c3RvcmV0aGVndWxmLmdvdoIWZ2xvYmFsY2NzaW5zdGl0dXRlLmNvbYIad3d3Lmds
b2JhbGNjc2luc3RpdHV0ZS5jb22CGGluc2lkZXIudmFuY291dmVyc3VuLmNvbYIZ
aW5zaWRlci5vdHRhd2FjaXRpemVuLmNvbYITY3VzdG9tZXJzLnVuaWNhLmNvbYId
cm9zaWNydWNpYW5lZ3lwdGlhbm11c2V1bS5vcmeCIXd3dy5yb3NpY3J1Y2lhbmVn
eXB0aWFubXVzZXVtLm9yZ4IZaW5zaWRlci5jYWxnYXJ5aGVyYWxkLmNvbYIbaW5z
aWRlci5lZG1vbnRvbmpvdXJuYWwuY29tghZpbnNpZGVyLmxlYWRlcnBvc3QuY29t
ghtpbnNpZGVyLm1vbnRyZWFsZ2F6ZXR0ZS5jb22CF2luc2lkZXIudGhlcHJvdmlu
Y2UuY29tghppbnNpZGVyLnRoZXN0YXJwaG9lbml4LmNvbYIZaW5zaWRlci50aW1l
c2NvbG9uaXN0LmNvbYIXaW5zaWRlci53aW5kc29yc3Rhci5jb22CFHd3dy5mcmll
bmRmYWN0b3Iub3JnghJjdXN0b21lci51bmljYS5jb22CGWN1c3RvbWVyY2VudHJh
bC51bmljYS5jb22CCWltYmVlLmNvbYIOcHJvZC5pbWJlZS5jb22CD3N0YWdlLmlt
YmVlLmNvbYISd3d3LnJlc3VtZWJlYXIuY29tghBsdXRoaWVyYnVpbHQubmV0ghh0
cmFpbmxpa2VhbmFzdHJvbmF1dC5vcmeCFnd3dy5tb2xubXluZGlnaGV0ZW4uc2WC
F2RlbW8ubW9sbm15bmRpZ2hldGVuLnNlghp3d3cuam91cm5hbC1yZXB1YmxpY2Fu
LmNvbYIQd3d3Lm1jaXRpemVuLmNvbYIPbW90aGVyam9uZXMuY29tghN3d3cubW90
aGVyam9uZXMuY29tggx3d3cyLnd3dC5jb22CEXd3dzItdGVzdC53d3QuY29tggx3
d3cucGVnYS5jb22CEHN0YWdpbmcucGVnYS5jb22CFnd3dy5sZWFkZXJsYW5kbmV3
cy5jb22CE3d3dy5jb3VudHktc3Rhci5jb22CHHd3dy5ub2tpYXNpZW1lbnNuZXR3
b3Jrcy5jb22CKGluZHVzdHJ5YW5hbHlzdC5ub2tpYXNpZW1lbnNuZXR3b3Jrcy5j
b22CHWluZm8ubm9raWFzaWVtZW5zbmV0d29ya3MuY29tgh1pcHR2Lm5va2lhc2ll
bWVuc25ldHdvcmtzLmNvbYIlc2RtLnBhcnRuZXJzLm5va2lhc2llbWVuc25ldHdv
cmtzLmNvbYImdHJhaW5pbmctd2lraS5ub2tpYXNpZW1lbnNuZXR3b3Jrcy5jb22C
HHR3Yy5ub2tpYXNpZW1lbnNuZXR3b3Jrcy5jb22CG2JyLm5va2lhc2llbWVuc25l
dHdvcmtzLmNvbYIcbGF0Lm5va2lhc2llbWVuc25ldHdvcmtzLmNvbYIfaW5zaWRl
Lm5va2lhc2llbWVuc25ldHdvcmtzLmNvbYITd3d3LmNhcmVwYWNrYWdlLm9yZ4IV
c3RhZ2UuY2FyZXBhY2thZ2Uub3JngiN3ZWxjb21lLXRvLm5va2lhc2llbWVuc25l
dHdvcmtzLmNvbYINd3d3LnRhbGVvLmNvbYIMd3d3LnRhbGVvLmZyggtmci50YWxl
by5jYYIVbm93LXN0YWdpbmcudHVmdHMuZWR1gg1ub3cudHVmdHMuZWR1ghF0aGVu
ZXdzZnVubmVsLmNvbYIVd3d3LnRoZW5ld3NmdW5uZWwuY29tgh5yZWxhdGlvbnNo
aXBtYXN0ZXJzYWNhZGVteS5jb22CGHd3dy5zYW5kdXNreXJlZ2lzdGVyLmNvbYIY
d3d3Lm5vcndhbGtyZWZsZWN0b3IuY29tghB3d3cucmlmZnRyYXguY29tghN3d3cu
aWRvbm93aWRvbnQuY29tghR3d3cuZWluc3RydWN0aW9uLmNvbYIPd3d3LndhbGVz
LmFjLnVrghl3d3cuZ3JhbmRoYXZlbnRyaWJ1bmUuY29tgg93d3cuY3ltcnUuYWMu
dWuCGHN1cHBvcnQuZXBvY3JhdGVzZWhyLmNvbYILd3d3LmlzZS5nb3aCD3d3dy5z
cG9ydG9uLmNvbYISd3d3Lmpvc2hncm9iYW4uY29tgg5teS5wcmVjaXNlLmNvbYIY
d3d3Lmdsb2JhbGFjYWRlbXkub3JnLnVrghFmcm9udGllci5sZXZpLmNvbYIZc3Rh
Z2luZy5mcm9udGllci5sZXZpLmNvbYIVd3d3LmRhaWx5Lm5ld2xvb2suY29tgg93
d3cuYXVkdWJvbi5vcmeCEGhvdXNlYW5kaG9tZS5jb22CDzkxMW1lbW9yaWFsLm9y
Z4IUYXV0aC5yY211c2ljdGVtcC5jb22CEWRhaWx5Lm5ld2xvb2suY29tMIIBxAYD
VR0gBIIBuzCCAbcwggGzBglghkgBhv1sAQEwggGkMDoGCCsGAQUFBwIBFi5odHRw
Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9zc2wtY3BzLXJlcG9zaXRvcnkuaHRtMIIBZAYI
KwYBBQUHAgIwggFWHoIBUgBBAG4AeQAgAHUAcwBlACAAbwBmACAAdABoAGkAcwAg
AEMAZQByAHQAaQBmAGkAYwBhAHQAZQAgAGMAbwBuAHMAdABpAHQAdQB0AGUAcwAg
AGEAYwBjAGUAcAB0AGEAbgBjAGUAIABvAGYAIAB0AGgAZQAgAEQAaQBnAGkAQwBl
AHIAdAAgAEMAUAAvAEMAUABTACAAYQBuAGQAIAB0AGgAZQAgAFIAZQBsAHkAaQBu
AGcAIABQAGEAcgB0AHkAIABBAGcAcgBlAGUAbQBlAG4AdAAgAHcAaABpAGMAaAAg
AGwAaQBtAGkAdAAgAGwAaQBhAGIAaQBsAGkAdAB5ACAAYQBuAGQAIABhAHIAZQAg
AGkAbgBjAG8AcgBwAG8AcgBhAHQAZQBkACAAaABlAHIAZQBpAG4AIABiAHkAIABy
AGUAZgBlAHIAZQBuAGMAZQAuMHsGCCsGAQUFBwEBBG8wbTAkBggrBgEFBQcwAYYY
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEUGCCsGAQUFBzAChjlodHRwOi8vY2Fj
ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRIaWdoQXNzdXJhbmNlQ0EtMy5jcnQw
DAYDVR0TAQH/BAIwADBlBgNVHR8EXjBcMCygKqAohiZodHRwOi8vY3JsMy5kaWdp
Y2VydC5jb20vY2EzLTIwMTFkLmNybDAsoCqgKIYmaHR0cDovL2NybDQuZGlnaWNl
cnQuY29tL2NhMy0yMDExZC5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMA4GA1UdDwEB/wQEAwIFoDANBgkqhkiG9w0BAQUFAAOCAQEAmLyDCRy/O2sA
uSMzuSiRklIQ/1MWSudV+AEyG9qWOjsfGjFlROJTaY2gK3g3tjSfmG8WxoByPdGW
uPgkkdj/ROVsRW3h6BkkDYrXmyGru6rKS24HO/Ufbd/G8migC5xZXtUZ3y7CAt1E
fKjwfJMmBjfYvqroRqENrMNfVNq28d6CvBTE1d3p8D7dTdMHHN2qQMpj9mfy+b3g
I/i8tiA5DqXTPZB8y+2OGstq872PTuouxyPjjpt1IT+Ca7/AOq2KzJQYiShjoiiZ
K3aMsRSsgMxOstZtNlX2vDK33k8pk4S5PzBvfC8GjWADLDOM3j6DVcaajMEkBeMo
JMeB/CABfg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1S3Df7jIEGnNDVXuD+q
0O9fzRLYc4/AYNpUGA8ftPiWK/2BQK+f8rSv9w88b4aPEO3XibBvsvRnpOKr23QM
ai38zyAhJe8/TonMeOLt+IK39jNxu5ob9MM/Zv4+kOl/D9V9w81Sqmmit4cXbFRN
CaikaYSIpaXkKZ+6l6kqTygtVkDM0MTLfG5cIRr5P8NqnJRX1l5TMaw9nUzW/Vq2
b4K5U5b4fkbhPwSMT3fDqFBgnRcFZgKSBmCmHphacqj9tNinTzKjLIB86qxYFwSn
9dRmsIxsDGJ7q0AJfwUqHlIwRob2Va9PIsF8wr0flATIhiV47dSAsvTE3xvkEFhY
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21091985501829613029140118684307026426
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-09-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-09-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Woburn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquia-sites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20113665041320128699795104837370763514557282242638117268786458719206618697382756334030665366205417463099852476688740649104129886891686872087636539828817290752747853678606911618123780071711801126377923685641160181292277981727546824381626824516259163966328675566851578033997344782081847254232496309510283451390934264261440462600209911085705421607420206006398263124099054775624582346713436185640144400781819929812391898928373889264426390320330050988064908069568713491727212170495072569766889821170416931507899514946626407587489914950762914644487302593447445120550486376821218316029675722446563008535129151241645689690269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07d43a88e13affab3af6adf60253c75e8dea3c58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2230 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aonetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.news-gazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaspan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysmartrend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloanconsortium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theirc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aonetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicagodrupalcamp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historytoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysmartrend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.news-gazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starkist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theirc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesource.pdma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edit.restorethegulf.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalccsinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalccsinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.vancouversun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.ottawacitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.unica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosicrucianegyptianmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosicrucianegyptianmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.calgaryherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.edmontonjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.leaderpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.montrealgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.theprovince.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.thestarphoenix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.timescolonist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.windsorstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendfactor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.unica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customercentral.unica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imbee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.imbee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.imbee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resumebear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luthierbuilt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trainlikeanastronaut.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.molnmyndigheten.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.molnmyndigheten.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journal-republican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motherjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motherjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.wwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2-test.wwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leaderlandnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.county-star.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nokiasiemensnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industryanalyst.nokiasiemensnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.nokiasiemensnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iptv.nokiasiemensnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdm.partners.nokiasiemensnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training-wiki.nokiasiemensnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twc.nokiasiemensnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.nokiasiemensnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lat.nokiasiemensnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.nokiasiemensnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carepackage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.carepackage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome-to.nokiasiemensnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taleo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taleo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.taleo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'now-staging.tufts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'now.tufts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenewsfunnel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thenewsfunnel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relationshipmastersacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanduskyregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwalkreflector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rifftrax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idonowidont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.einstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wales.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandhaventribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cymru.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.epocratesehr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ise.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joshgroban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.precise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalacademy.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontier.levi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.frontier.levi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daily.newlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audubon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseandhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '911memorial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.rcmusictemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daily.newlook.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-2011d.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-2011d.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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