*.sanjacinto.k12.ca.us

- San Jacinto Unified School District -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 07:e9:2b:85:03:f1:6a:2e:58:d3:93:8a:65:86:4d:d4 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

San Jacinto Unified School District

Organization: San Jacinto Unified School District
State / Province: CA
Locality: San Jacinto
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:e9:2b:85:03:f1:6a:2e:58:d3:93:8a:65:86:4d:d4
Serial Number (int): 10515283820711904944548578868173622740
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 01:c4:4f:30:92:76:d9:23:1f:8c:aa:d9:41:f8:9f:8e:30:eb:55:07
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): 8f:08:33:68:dc:c6:01:7a:ea:36:69:dc:6f:16:da:39:29:7c:13:b9
Fingerprint (sha256): 43:3a:6a:4a:47:2f:ab:63:db:c6:e9:ac:bb:db:4c:fc:af:6f:6a:67:c6:1d:48:a4:90:b9:05:36:96:6e:6a:63

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-g22.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g22.crl

Check the revocation status for certificate *.sanjacinto.k12.ca.us

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sanjacinto.k12.ca.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sanjacinto.k12.ca.us
sanjacinto.k12.ca.us

Other certificates including the domain name sanjacinto.k12.ca.us

(limited to 100 certificates)
kahuluischool.k12.hi.us
daes.sanjacinto.k12.ca.us
5.bellevilleschools.org
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
admin.akinseagles.org
admin.akinseagles.org
sjla.sanjacinto.k12.ca.us
*.sanjacinto.k12.ca.us
carjes.sanjacinto.k12.ca.us
sjhs.sanjacinto.k12.ca.us
whitaker.bpsd.k12.ca.us
jaees.sanjacinto.k12.ca.us
admin.lincolnparkpublicschools.com
*.sanjacinto.k12.ca.us
www.ps229q.org
5.bellevilleschools.org
admin.akinseagles.org
sanjacinto.k12.ca.us
admin.akinseagles.org
www.infinityhs.org
mvms.sanjacinto.k12.ca.us
admin.beatty.bpsd.k12.ca.us
edh.johnadamsacademy.com
5.bellevilleschools.org
*.sanjacinto.k12.ca.us
5.bellevilleschools.org
admin.ps229q.org
adairsvillehigh.bartow.k12.ga.us
5.bellevilleschools.org
*.sanjacinto.k12.ca.us
admin.akinseagles.org
ehes.sanjacinto.k12.ca.us
*.sanjacinto.k12.ca.us
nmms.sanjacinto.k12.ca.us
admin.akinseagles.org
adulted.sanjacinto.k12.ca.us
kahuluischool.k12.hi.us
mces.sanjacinto.k12.ca.us
admin.veritasca.org
dietz.crandall-isd.net
*.sanjacinto.k12.ca.us
admin.newhope-christianschool.org
5.bellevilleschools.org
admin.bpsd.k12.ca.us
ldes.tcs.k12.nc.us
sanjacinto.k12.ca.us
5.bellevilleschools.org
5.bellevilleschools.org
admin.akinseagles.org
*.sanjacinto.k12.ca.us
centralvalley.kernhigh.org
5.bellevilleschools.org
*.sanjacinto.k12.ca.us
sanjacinto.k12.ca.us
tmsa.org
stonecanyon.owassops.org
admin.akinseagles.org
5.bellevilleschools.org
alt.crandall-isd.net
mha.sanjacinto.k12.ca.us
*.sanjacinto.k12.ca.us
www.lasgs.net
admin.akinseagles.org
admin.akinseagles.org
admin.tekoacharterschool.org
admin.akinseagles.org
*.sanjacinto.k12.ca.us
adairsvillemiddle.bartow.k12.ga.us
admin.akinseagles.org
*.sanjacinto.k12.ca.us
www.halb.org
admin.akinseagles.org
*.sanjacinto.k12.ca.us
admin.ddaa.arthuracademy.org
adulted.sanjacinto.k12.ca.us
adulted.sanjacinto.k12.ca.us
5.bellevilleschools.org
adulted.sanjacinto.k12.ca.us
5.bellevilleschools.org
eisner.caminonuevo.org
waa.arthuracademy.org
5.bellevilleschools.org
admin.hilohs.k12.hi.us
sanjacinto.k12.ca.us
www.kalama.k12.hi.us
webmail.sanjacinto.k12.ca.us
www.sanjacinto.k12.ca.us
www.lcelions.net
admin.komarekschool.org
phes.sanjacinto.k12.ca.us
admin.carjes.sanjacinto.k12.ca.us
*.sanjacinto.k12.ca.us
www.cpdlf.org
admin.bpjh.bpsd.k12.ca.us
sanjacinto.k12.ca.us
adulted.sanjacinto.k12.ca.us
*.sanjacinto.k12.ca.us
*.sanjacinto.k12.ca.us
*.sanjacinto.k12.ca.us

Certificate

The complete raw certificate details for *.sanjacinto.k12.ca.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG0zCCBbugAwIBAgIQB+krhQPxai5Y05OKZYZN1DANBgkqhkiG9w0BAQUFADBm
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSUwIwYDVQQDExxEaWdpQ2VydCBIaWdoIEFzc3VyYW5j
ZSBDQS0zMB4XDTEzMDIxMzAwMDAwMFoXDTE2MDIxODEyMDAwMFowfzELMAkGA1UE
BhMCVVMxCzAJBgNVBAgTAkNBMRQwEgYDVQQHEwtTYW4gSmFjaW50bzEsMCoGA1UE
ChMjU2FuIEphY2ludG8gVW5pZmllZCBTY2hvb2wgRGlzdHJpY3QxHzAdBgNVBAMM
Fiouc2FuamFjaW50by5rMTIuY2EudXMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQC6K80CrLbAywhrfmVoZA0LWhNuywdo2+oNFnvDENTJQ6Q1r10Gg014
Zsv7MCXScnzUtvgbF7lYCl+pkBQMWpM7IKhRGHGmz1RjZjA+kmwHBGhExza2r7y0
DEzGrhcUu3SjazWfeaFmR+K531S0NksBLIcdRVa+Nm7NrqJGr6qgiZE1epfHGemo
02z7QD87oE7aR9YRjjLmIt9kV9BDASr3Ps5Cjh/dfYPuxQ1zYyay+XnKiAm16zVp
98j7Zr7nvxGIwe8l27PuWpMZXra2DtUewA9xnlYXCIuPQoiy1dOgDjYx8cel+GXo
n5mao9jEcnruws38KEWPFIrFW/WjVFcDAgMBAAGjggNiMIIDXjAfBgNVHSMEGDAW
gBRQ6nOJ2yn7EI+e5QEg1N55mUiD9zAdBgNVHQ4EFgQUAcRPMJJ22SMfjKrZQfif
jjDrVQcwNwYDVR0RBDAwLoIWKi5zYW5qYWNpbnRvLmsxMi5jYS51c4IUc2FuamFj
aW50by5rMTIuY2EudXMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjBhBgNVHR8EWjBYMCqgKKAmhiRodHRwOi8vY3JsMy5kaWdp
Y2VydC5jb20vY2EzLWcyMi5jcmwwKqAooCaGJGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0
LmNvbS9jYTMtZzIyLmNybDCCAcQGA1UdIASCAbswggG3MIIBswYJYIZIAYb9bAEB
MIIBpDA6BggrBgEFBQcCARYuaHR0cDovL3d3dy5kaWdpY2VydC5jb20vc3NsLWNw
cy1yZXBvc2l0b3J5Lmh0bTCCAWQGCCsGAQUFBwICMIIBVh6CAVIAQQBuAHkAIAB1
AHMAZQAgAG8AZgAgAHQAaABpAHMAIABDAGUAcgB0AGkAZgBpAGMAYQB0AGUAIABj
AG8AbgBzAHQAaQB0AHUAdABlAHMAIABhAGMAYwBlAHAAdABhAG4AYwBlACAAbwBm
ACAAdABoAGUAIABEAGkAZwBpAEMAZQByAHQAIABDAFAALwBDAFAAUwAgAGEAbgBk
ACAAdABoAGUAIABSAGUAbAB5AGkAbgBnACAAUABhAHIAdAB5ACAAQQBnAHIAZQBl
AG0AZQBuAHQAIAB3AGgAaQBjAGgAIABsAGkAbQBpAHQAIABsAGkAYQBiAGkAbABp
AHQAeQAgAGEAbgBkACAAYQByAGUAIABpAG4AYwBvAHIAcABvAHIAYQB0AGUAZAAg
AGgAZQByAGUAaQBuACAAYgB5ACAAcgBlAGYAZQByAGUAbgBjAGUALjB7BggrBgEF
BQcBAQRvMG0wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBF
BggrBgEFBQcwAoY5aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0
SGlnaEFzc3VyYW5jZUNBLTMuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEF
BQADggEBAFULUov2hMx1fX/I3dUyTBxXaltcoe9ogg5qZDV17p2kqP1oZls0QSNr
+pKXMznMgxo8aht8A5KqTXwgjPAHChOXO+S+/EPa5SI3q8fR7mQc3QAydAcqXdhy
cp2RqEIlVZDVevj6PFCxtcMAeBRkKxq1CBtHEBBxeJaXaoEO4IWcZSP8EE8769GN
QI8/u6VSP3PbPvGU+ik8SGok1IOr0UgF9GG1cTtHxg9oVzhSw7syU25jVdq3qTDy
UXzWjigO8tFUhSXWKV2a7x9tTbinBOjfcJNysJv8u/Y1gN5IrHsfMsQcSg72Q62t
hb9Eu6DwjGxegrHEGT0kf9aKo8LoHys=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuivNAqy2wMsIa35laGQN
C1oTbssHaNvqDRZ7wxDUyUOkNa9dBoNNeGbL+zAl0nJ81Lb4Gxe5WApfqZAUDFqT
OyCoURhxps9UY2YwPpJsBwRoRMc2tq+8tAxMxq4XFLt0o2s1n3mhZkfiud9UtDZL
ASyHHUVWvjZuza6iRq+qoImRNXqXxxnpqNNs+0A/O6BO2kfWEY4y5iLfZFfQQwEq
9z7OQo4f3X2D7sUNc2Mmsvl5yogJtes1affI+2a+578RiMHvJduz7lqTGV62tg7V
HsAPcZ5WFwiLj0KIstXToA42MfHHpfhl6J+ZmqPYxHJ67sLN/ChFjxSKxVv1o1RX
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10515283820711904944548578868173622740
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jacinto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Jacinto Unified School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sanjacinto.k12.ca.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23501923714051133921937808708176190354506826312078488344642408632355977540249254509834218680349602411763364181492143428496232901173299569717638819497781077890931268916557206109024656918805211831465230446385089564228846224636328273108702380581331877740543608034092364913569508337986605903311987176645897744234790546602838885190422472947189226518672576078031296005893637280680031929586167348750098715141773990909728586381966545657421729605475853753022187208567397625789615186009482001028479661366084438629764820148597903976246617831416956051512988591453371768701117439939466338067901983765908170483578596103491591362307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01c44f309276d9231f8caad941f89f8e30eb5507
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjacinto.k12.ca.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g22.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g22.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00550b528bf684cc757d7fc8ddd5324c1c576a5b5ca1ef68820e6a643575ee9da4a8fd68665b3441236bfa92973339cc831a3c6a1b7c0392aa4d7c208cf0070a13973be4befc43dae52237abc7d1ee641cdd003274072a5dd872729d91a842255590d57af8fa3c50b1b5c3007814642b1ab5081b471010717896976a810ee0859c6523fc104f3bebd18d408f3fbba5523f73db3ef194fa293c486a24d483abd14805f461b5713b47c60f68573852c3bb32536e6355dab7a930f2517cd68e280ef2d1548525d6295d9aef1f6d4db8a704e8df709372b09bfcbbf63580de48ac7b1f32c41c4a0ef643adad85bf44bba0f08c6c5e82b1c4193d247fd68aa3c2e81f2b