logalty.deutsche-bank.es

- Deutsche Bank AG -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0a:cb:c3:0e:78:c5:6d:6b:e5:80:ff:82:0b:8e:ae:48 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deutsche Bank AG

Company registration number: HRB 30000
Organization: Deutsche Bank AG
Organization unit: Web Infrastructure
State / Province: Hessen
Locality: Frankfurt am Main
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:cb:c3:0e:78:c5:6d:6b:e5:80:ff:82:0b:8e:ae:48
Serial Number (int): 14350272436575592306374395019601555016
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c6:cc:68:49:bc:de:82:cc:dd:df:e5:7f:e8:d7:25:8e:ca:f6:84:9c
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): e7:85:75:e7:de:78:7e:98:14:78:4d:50:67:fe:da:bb:b5:da:a5:b9
Fingerprint (sha256): 43:04:10:db:21:6e:c4:44:e2:f5:79:a7:75:ac:34:36:38:d0:91:68:23:54:ec:eb:30:c5:37:b1:86:b8:2c:3d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate logalty.deutsche-bank.es

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for logalty.deutsche-bank.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

logalty.deutsche-bank.es
staging.logalty.deutsche-bank.intranet.db.com

Other certificates including the domain name deutsche-bank.es

(limited to 100 certificates)
tpvvirtual.deutsche-bank.es
cergf.deutsche-bank.es
uat.www.servicios.deutsche-bank.es
logalty.deutsche-bank.es
grupo.deutsche-bank.es
uat.webtributos.deutsche-bank.es
ules2.dbonline.deutsche-bank.es
staging.webtributos.deutsche-bank.es
db-direct5.deutsche-bank.es
fs-asearch-pre.deutsche-bank.es
uat.logalty.deutsche-bank.es
www.deutsche-bank.es
ww3.deutsche-bank.es
www.deutsche-bank.es
cergf.deutsche-bank.es
gcp-prd.deutsche-bank.es
uat.webtributos.deutsche-bank.es
www.servicios.deutsche-bank.es
uat.logalty.deutsche-bank.es
webtributos.deutsche-bank.es
hles1.dbonline.deutsche-bank.es
www.servicios.deutsche-bank.es
tpvvirtual.deutsche-bank.es
logalty.deutsche-bank.es
deutsche-bank.es
logalty.deutsche-bank.es
uat.tpvvirtual.deutsche-bank.es
webtributos.deutsche-bank.es
logalty.deutsche-bank.es
hles1.dbonline.deutsche-bank.es
webtributos.deutsche-bank.es
logalty.deutsche-bank.es
www.deutsche-bank.es
fs-asearch-pre.deutsche-bank.es
webtributos.deutsche-bank.es
uat.tpvvirtual.deutsche-bank.es
cergf.deutsche-bank.es
www.deutsche-bank.es
ww3.deutsche-bank.es
staging.webtributos.deutsche-bank.es
tpvvirtual.deutsche-bank.es
www.servicios.deutsche-bank.es
staging.webtributos.deutsche-bank.es
ww3.deutsche-bank.es
tpvvirtual.deutsche-bank.es
fs-asearch.deutsche-bank.es
www.servicios.deutsche-bank.es
db-direct.deutsche-bank.es
uat-dwebge.www.deutsche-bank.es
uat.tpvvirtual.deutsche-bank.es
hles1.dbonline.deutsche-bank.es
hles1.dbonline.deutsche-bank.es
www.deutsche-bank.es
psd2.dbonline.deutsche-bank.es
ww2.deutsche-bank.es
click.deutsche-bank.es
ww2.deutsche-bank.es
deutsche-bank.es
db-direct4.deutsche-bank.es
uat.logalty.deutsche-bank.es
dbonline.deutsche-bank.es
ww2.deutsche-bank.es
uat-dwebge.www.deutsche-bank.es
cergf.deutsche-bank.es
tpvvirtual.deutsche-bank.es
www.servicios.deutsche-bank.es
webtributos.deutsche-bank.es
hles1.dbonline.deutsche-bank.es
deutsche-bank.es
tpvvirtual.deutsche-bank.es
www.deutsche-bank.es
dbonline.deutsche-bank.es
uat.webtributos.deutsche-bank.es
db-direct5.deutsche-bank.es
ww2.deutsche-bank.es
tpvvirtual.deutsche-bank.es
staging.uat.webtributos.deutsche-bank.es
staging.uat.webtributos.deutsche-bank.es
dbonline.deutsche-bank.es
ww3.deutsche-bank.es
tpvvirtual.deutsche-bank.es
ww3.deutsche-bank.es
uat.webtributos.deutsche-bank.es
dbonline.deutsche-bank.es
www.servicios.deutsche-bank.es
hles1.dbonline.deutsche-bank.es
tpvvirtual.deutsche-bank.es
www.deutsche-bank.es
logalty.deutsche-bank.es
cergf.deutsche-bank.es
ww3.deutsche-bank.es
www.servicios.deutsche-bank.es
fs-asearch-pre.deutsche-bank.es
hles1.dbonline.deutsche-bank.es
uat.logalty.deutsche-bank.es
ww2.deutsche-bank.es
uat.tpvvirtual.deutsche-bank.es
cergf.deutsche-bank.es
dbonline.deutsche-bank.es
hles1.dbonline.deutsche-bank.es

Certificate

The complete raw certificate details for logalty.deutsche-bank.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20suJ0EvvDMfiEWw1twU
Qye8JAaxa0kOP3Xq4vIgdlpl4//porD6tOi6O72XMqzmFwHHz54QshsLcYEQdl5d
A6s8dk9IJKAy9GNZpxL7ZOru99Waxu5F1pPqnQkpg8l7LAEr9YrkiBzndSfoL6iz
nRk/WLsL34xiHqPXapRiQDNoYJXpdmcF6nlIsu8LUoBpBD5Xm4iwehjWoprH2YIr
KFStA4pjKRk7XOYx7W1GImD44m/VeM9ndY5oBqq2KKjSQ8o9zZ2sk/K+mKp3sB5P
DXQP6cZec5MR2HZ/wXYMM8VLu8pluSi+Rr/Ng3K5f8jHk+YwccmiMaLa3vMreWqg
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14350272436575592306374395019601555016
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt Am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 30000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Bank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Web Infrastructure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'logalty.deutsche-bank.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27683261568550702911014156600573988233869088139272974211054838843900475123191055348358495954653800549035466182885717100111319293510530047020142033434993746381117056290612245916284956429889954033349654577892238600029199079110126461192297203290951968386243584386401481070458825623059992039556597239784627687800965458577281480219271850702185398766445024035337715410997266396724901177967607207531822413235427362517445570057906548890160107709407725176662627446363794100521903908067716608757922826081394204560400523560760920079652602713236488151815484457813211146608366360342871891456828934174658977268155271168553327960289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6cc6849bcde82ccdddfe57fe8d7258ecaf6849c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logalty.deutsche-bank.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.logalty.deutsche-bank.intranet.db.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008f7d34f17ce420f5f8282a7e361e20d303374fdb64ffe5a69df0c0d58f2a0c08d4481d73758e246611cf167145780f40e8c7fd8a760516698a579825dc265f21f7c105498fd8ac97f4845d63cb4c79967aa677cf6c3822097594f6c3d32798e063ce385e8aacbd3c9f7f6b3fe8c1895bb4699bd9055205d91b0086981df6e6c1a799e3a1888ad243d12412284910eaa345f3880ee6ebe157ced1cbdb644e3a718f625ab31a88dae0d830d31b6e141ae6e448fa0b96dd48d904a4bc5eefac8cf3127b6b69613b6050cb02e11437a6b5f8c1699239370539f713858b7b1c31fc8d96d34c7954ab3ce548f5824d0d68f285f278bf3b060132e5079d534a3bf3ca64