vocento.com

- vocento -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0b:28:39:a1:55:3f:b6:70:74:92:3d:73:52:8e:92:f1 was issued on by DigiCert Inc.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

vocento

Organization: vocento
Organization unit: Infraestructuras
Locality: Bilbao
Country: ES

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:28:39:a1:55:3f:b6:70:74:92:3d:73:52:8e:92:f1
Serial Number (int): 14830368707440290355440729901178458865
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a0:7d:a0:d1:87:fc:32:29:f3:4d:e7:59:ed:41:dc:ae:1a:25:0f:86
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 33:92:f0:74:c6:5b:ad:de:c9:ac:3e:0e:9d:33:07:c4:c5:23:a4:50
Fingerprint (sha256): 42:b9:c5:74:08:e5:37:fe:51:7f:cf:1f:63:d3:c9:d4:51:34:8f:34:70:08:83:95:41:92:71:27:c8:f4:94:6d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate vocento.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vocento.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vocento.com
*.eldiariomontanes.es
*.guapabox.com
*.autocasion.com
*.hoy.es
*.elnortedecastilla.es
*.vocento.com
*.diariosur.es
*.diariovasco.com
*.ideal.es
*.finanzas.com
*.laverdad.es
*.lavozdigital.es
*.oferplan.com
*.elcorreo.com
*.mujerhoy.com
*.elcomercio.es
*.abc.es
*.eslang.es
*.larioja.com
*.pisos.com
*.burgosconecta.es
*.leonoticias.com
*.lasprovincias.es

Other certificates including the domain name vocento.com

(limited to 100 certificates)
*.vocento.com
vocento.com
vocento.com
vocento.com
vocento.com
nets.vocento.com
trabajaconnosotros.vocento.com
san-14-s50.tlsprovisioning.exacttarget.com
shipo.vocento.com
owa.vocento.com
methodessl.vocento.com
static.vocento.com
owa.vocento.com
*.vocento.com
owa.vocento.com
vocento.com
nets.vocento.com
*.vocento.com
vocento.com
san-14-s50.tlsprovisioning.exacttarget.com
static.vocento.com
portal.elcorreo.vocento.com
vocento.com
vocento.itbid.org
san-14-s50.tlsprovisioning.exacttarget.com
trabajaconnosotros.vocento.com
agencias.vocento.com
vocento.com
static.vocento.com
vocento.com
vocento.com
static.vocento.com
san-14-s50.tlsprovisioning.exacttarget.com
entretenimiento.vocento.com
vocento.com
static.vocento.com
vocento.com
nets.vocento.com
*.vocento.com
vocento.com
static.vocento.com
vocento.com
san-14-s50.tlsprovisioning.exacttarget.com
nets.vocento.com
san-14-s50.tlsprovisioning.exacttarget.com
nets.vocento.com
accesovirtual.vocento.com
www.pisos.com
vocento.itbid.org
san-14-s50.tlsprovisioning.exacttarget.com
vocento.com
vocento.com
entretenimiento.vocento.com
san-14-s50.tlsprovisioning.exacttarget.com
vocento.com
vocento.com
san-14-s50.tlsprovisioning.exacttarget.com
vocento.com
vocento.com
vocento.itbid.org
san-14-s50.tlsprovisioning.exacttarget.com
nets.vocento.com
*.vocento.com
vocento.com
vocento.itbid.org
san-14-s50.tlsprovisioning.exacttarget.com
san-14-s50.tlsprovisioning.exacttarget.com
vocento.com
owa.vocento.com
static.vocento.com
extranet.vocento.com
vocento.com
vocento.itbid.org
entretenimiento.vocento.com
san-14-s50.tlsprovisioning.exacttarget.com
*.vocento.com
methode.vocento.com
vocento.com
san-14-s50.tlsprovisioning.exacttarget.com
nets.vocento.com
san-14-s50.tlsprovisioning.exacttarget.com
nets.vocento.com
vocento.com
static.vocento.com
san-14-s50.tlsprovisioning.exacttarget.com
vocento.com
san-14-s50.tlsprovisioning.exacttarget.com
san-14-s50.tlsprovisioning.exacttarget.com
nets.vocento.com
vocento.com
vocento.com
*.itbid.org
static.vocento.com
static.vocento.com
owa.vocento.com
*.vocento.com
*.vocento.com
salesforce.vocento.com
vocento.com
*.vocento.com

Certificate

The complete raw certificate details for vocento.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAxZD9NC8FQzdrYdeXAn
wX8xLqbdFyzbEj+OV6onqjOYhNYJ4NeThildEGdD8/0VQjcnIoYOZrbtuO+gsPCD
ZuZP3aNLuNh7FGldm8Pasf6IPIaGzrIlYz6KXdGoKKAqxm0Xb1j92jpCmhHH/0f/
kuJj5cffHfQIdn754sB09dJweLssdkGqzCuq/yQ6Ssu7byC3DjLP5mw8cC4W8P2x
kHnGfIh6rd0nYZE0yYgUF6rsk1yCnWA3kGU9KCsTZkj3Eujr7oi1OCG/Qv53H9JA
2abMlZCn2+0dsYFLCo0OdcUgUHdVeyCK95HA73Wtw6p8d1BXMFla7QgLRNAuVGD+
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14830368707440290355440729901178458865
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bilbao'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vocento'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Infraestructuras'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vocento.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24748796748654412574208163441605212987168604912428337035540194201906214863104733698190357330161811754830656314623883238572858271270983876961531531052663764645012549550352385117090269558126508487991734296114236341071748864709449323024180105601731291647745609919575007636164643158986281929381732265117490884965287144004730669166320776133759205768049260205053370223149532128788045745721798027932439030367861349617026887667977845287630790806146313343695535189392653482150918205006351838293755839010175007393581383638774537816002588302627741099756044845830363301880916179795429244038330481964872336589311195905278989106769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a07da0d187fc3229f34de759ed41dcae1a250f86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (395 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vocento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eldiariomontanes.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guapabox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autocasion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoy.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elnortedecastilla.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vocento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diariosur.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diariovasco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ideal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finanzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laverdad.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lavozdigital.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oferplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elcorreo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mujerhoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elcomercio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abc.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eslang.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.larioja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pisos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burgosconecta.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leonoticias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lasprovincias.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001622eb0ee1200000403004630440220113ae69f9ce3b1c6367d22fbc2ef9d1d18f6a2773ec43b427088810ecfd7c54f02207c059e0abbe7304eb84f16fde6221d680a8ab822b2af7e058a2480edbfb76d8c0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001622eb0ef870000040300473045022036e8274e40cf6d49129729fd17a0affa7f43d86af1ed6f3eda5502e0168541ed022100cd09e1dd124175673eba17820dedbc4c1b0cc5aa6d9844c846490c49270b9ee5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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