*.opx.janrain.ws

- JanRain, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 07:0b:ee:e7:96:79:53:c1:57:68:58:9d:df:90:da:11 was issued on by DigiCert Inc.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

JanRain, Inc.

Organization: JanRain, Inc.
State / Province: OR
Locality: Portland
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:0b:ee:e7:96:79:53:c1:57:68:58:9d:df:90:da:11
Serial Number (int): 9366556797698931127176564795356797457
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3e:ef:ae:2f:d7:33:86:db:3f:ea:79:18:85:97:2c:e8:91:19:86:88
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 49:06:a2:98:db:15:94:fe:39:60:b8:df:ce:22:52:a5:f8:39:2f:f1
Fingerprint (sha256): 43:64:bb:1a:14:ee:eb:cb:ed:3d:71:ff:be:e3:c0:08:95:55:2b:59:de:5b:56:2b:ab:06:a0:90:f8:c5:b6:80

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl

Check the revocation status for certificate *.opx.janrain.ws

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.opx.janrain.ws

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eval.janrainfederate.com
*.janrainfederate.com
*.opx.janrain.ws
cue-api-stjude-org-dev.janrainfederate.com
cue.api.stjude.org
eopenid-intel.uc11.janrainfederate.com
eopenid-pre.intel.com
eopenid.gianteagle.com
eopenid.intel.com
eval.janrainfederate.com
federatesso.telstra.com
idp.idecosystem.org
intel-dev.janrainfederate.com
janrainfederate.com
monitor.janrainfederate.com
nsticid.opx.janrain.ws
openid-api-stjude-org-dev.janrainfederate.com
openid-api-stjude-org.uc11.janrainfederate.com
openid-auth.luxsci.com
openid-identity-net.production.janrainfederate.com
openid.api.stjude.org
openid.bizjournals.com
openid.foxnews.com
openid.pfizer.com
openid.yellowpages.ca
opx-test.janrain.com
opx.janrain.ws
opx1.janrainfederate.com
pfizer.uc11.janrainfederate.com
signin.physiciansonline.ca
sso.lifeway.com
sso.post-gazette.com
telstra-dev.janrainfederate.com
telstra.uc11.janrainfederate.com
uc11.janrainfederate.com

Other certificates including the domain name janrain.ws

(limited to 100 certificates)
truelocal.client.janrain.com
visiple.client.janrain.com
findmeoutside.client.janrain.com
sanoma.client.janrain.com
ccna.client.janrain.com
542digital.client.janrain.com
enthusiastnetwork.client.janrain.com
*.opx.janrain.ws
*.opx.janrain.ws
mediaqmi.client.janrain.com
adoptapet.client.janrain.com
scholastic.client.janrain.com
oreilly.janrain.com
newton-software.client.janrain.com
*.opx.janrain.ws
mris.client.janrain.com
hillsvet.client.janrain.com
cnhi.client.janrain.com
slate.client.janrain.com
surfstitch.client.janrain.com
accounts.oreilly.com
usta.cleint.janrain.com
strategyand.client.janrain.com
aia.client.janrain.com
Bosch.client.janrain.com
guitarcenter.client.janrain.com
ccna.client.janrain.com
Bosch.client.janrain.com
nestleusa.client.janrain.com
scholastic.client.janrain.com
salesforce.client.janrain.com
mediaqmi.client.janrain.com
adoptapet.client.janrain.com
theatlantic.client.janrain.com
login.france24.com
docusign.client.janrain.com
eatclean.client.janrain.com
visiple.client.janrain.com
surfstitch.client.janrain.com
auth.edocr.com
mris.client.janrain.com
consumerist.client.janrain.com
Bosch.client.janrain.com
adoptapet.client.janrain.com
mediaqmi.client.janrain.com
oreilly.janrain.com
flight-centre.client.janrain.com
wawanesa.client.janrain.com
biscience.client.janrain.com
sanoma.client.janrain.com
enthusiastnetwork.client.janrain.com
nestleusa.client.janrain.com
*.opx.janrain.ws
mris.client.janrain.com
ccna.client.janrain.com
oncourselearning.client.janrain.com
iselect.client.janrain.com
adoptapet.client.janrain.com
*.opx.janrain.ws
srf.client.janrain.com
salesforce.client.janrain.com
newton-software.client.janrain.com
salesforce.client.janrain.com
ksfmedia.client.janrain.com
wingtai.client.janrain.com
melbournestorm.client.janrain.com
adoptapet.client.janrain.com
accounts.oreilly.com
atkearney.client.janrain.com
hillsvet.client.janrain.com
srf.client.janrain.com
salesforce.client.janrain.com
*.janrainfederate.com
aia.client.janrain.com
consumerist.client.janrain.com
nvidia.client.janrain.com
truelocal.client.janrain.com
cavs.client.janrain.com
mtg.client.janrain.com
*.opx.janrain.ws
*.opx.janrain.ws
usatoday.client.janrain.com
*.opx.janrain.ws
docusign.client.janrain.com
mediaqmi.client.janrain.com
findmeoutside.client.janrain.com
scholastic.client.janrain.com
cavs.client.janrain.com
Bosch.client.janrain.com
docusign.client.janrain.com
*.opx.janrain.ws
atkearney.client.janrain.com
koss.client.janrain.com
auth.edocr.com
salesforce.client.janrain.com
ccna.client.janrain.com
rtbf.client.janrain.com
ksfmedia.client.janrain.com
authenticate.globe.com.ph
authenticate.globe.com.ph

Certificate

The complete raw certificate details for *.opx.janrain.ws in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53T+huGXy6PI+09QWozc
fUucwMAz/2MJbWh5lpyFd+xOeq2WLhUnntMDDOaHUa3B5TVdcvRJLDhRvKeS+I/i
AHBKPUkrIoF56QuYXXlw35kLRvJ0XPNmJbS9wIZNFblZTl+yBma9ujQVWKY9bwz0
2HCW/l6M4MvSJpzUzq2zfu86YoeT6p+xs4Ncdsi8G/lzT9T+gCY7IzPEnFs2flcr
GrE7+5uZr3sHn2oOMl2qLflHdvmKKcxfEiUTGa7PqYbNZcQ3g+2xbbRlpYNQ+Ern
7sqsQV+EPPApMqjCQykgL7JQ6gO73bwfVq6q2bPTVlbTZRR85C7UcvtA80+UOdTr
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9366556797698931127176564795356797457
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JanRain, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.opx.janrain.ws'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29218740459887556952448111429406455853787953973528796311032916211468503273055813648086766038143056797741912247892192119864324887776304681527473968579050297656839145770981699992253542917665469975309568525809991752871859624232194095494044392275494149207990825208575153289068936712500877155522447203968437346245398443590348907347290305565044568362961762439401581764121252684617826630127188684115265304518143265870220568394617382649887949855577317591882838101658907954579090843610807108234134179444438303762619027585898794229459406801307790870773296076240098384416595822794775734010290024988572713768490438707403658947567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3eefae2fd73386db3fea791885972ce891198688
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (957 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eval.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opx.janrain.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cue-api-stjude-org-dev.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cue.api.stjude.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eopenid-intel.uc11.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eopenid-pre.intel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eopenid.gianteagle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eopenid.intel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eval.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federatesso.telstra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.idecosystem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intel-dev.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsticid.opx.janrain.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid-api-stjude-org-dev.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid-api-stjude-org.uc11.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid-auth.luxsci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid-identity-net.production.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid.api.stjude.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid.bizjournals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid.foxnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid.pfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openid.yellowpages.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opx-test.janrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opx.janrain.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opx1.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfizer.uc11.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.physiciansonline.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.lifeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.post-gazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telstra-dev.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telstra.uc11.janrainfederate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uc11.janrainfederate.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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