shop.prevention.com

- Hearst Communications, Inc -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:4f:7c:40:53:c4:0c:a9:5a:bd:da:97:56:23:74:3b was issued on by DigiCert Inc.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Hearst Communications, Inc

Organization: Hearst Communications, Inc
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:4f:7c:40:53:c4:0c:a9:5a:bd:da:97:56:23:74:3b
Serial Number (int): 17692675512345676518705849932213089339
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 46:3b:1f:69:63:aa:ce:db:aa:1f:c7:e3:86:63:af:8a:f5:2c:e6:48
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 37:07:74:37:f8:bb:2e:42:17:af:b7:18:a6:51:88:d3:8d:21:d7:62
Fingerprint (sha256): 44:2c:98:41:b4:c3:1d:3e:44:88:df:e4:53:6d:2e:93:91:b5:d7:9b:22:77:a3:54:cc:a7:1f:ad:9f:b8:c7:1f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate shop.prevention.com

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.prevention.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.prevention.com
shop.bestproducts.com
shop.bicycling.com
store.caranddriver.com
shop.cosmopolitan.com
shop.countryliving.com
store.delish.com
shop.elle.com
shop.elledecor.com
shop.esquire.com
shop.thefoodnetworkmag.com
shop.goodhousekeeping.com
store.harpersbazaar.com
shop.thehgtvmag.com
shop.housebeautiful.com
shop.menshealth.com
shop.oprahdaily.com
shop.thepioneerwoman.com
shop.popularmechanics.com
store.runnersworld.com
shop.townandcountrymag.com
shop.veranda.com
shop.womansday.com
shop.womenshealthmag.com
shop.roadandtrack.com

Other certificates including the domain name prevention.com

(limited to 100 certificates)
*.25ans.jp
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
secure.prevention.com
ssl447428.cloudflaressl.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-prod.actioniq.mr-in.com
dns-vetting1-mims-pawel.map.fastly.net
b2.shared.global.fastly.net
magentocloud42.map.fastly.net
b2.shared.global.fastly.net
hearst-prod.actioniq.mr-in.com
shop.elle.com
sli.esquire.com
dns-vetting1-mims-pawel.map.fastly.net
join.housebeautiful.com
cosmopolitan.com
hearst-uk.map.fastly.net
mcstaging-shop.elle.com
magentocloud42.map.fastly.net
hearst-prod.actioniq.mr-in.com
hearst-hdm.map.fastly.net
mcstaging-shop.elle.com
ssl447427.cloudflaressl.com
service.prevention.com
link.prevention.com
b2.shared.global.fastly.net
secure.menshealth.com
shop.elle.com
link.prevention.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-hdm.map.fastly.net
ssl447429.cloudflaressl.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-uk.map.fastly.net
link.prevention.com
hearst-uk.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
shop.elle.com
cosmopolitan.com
shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-hdm.map.fastly.net
hearst-uk.map.fastly.net
b2.shared.global.fastly.net
store.caranddriver.com
hearst-hdm.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
sli.esquire.com
sli.esquire.com
mcstaging-shop.elle.com
shop.elle.com
link.prevention.com
dns-vetting1-mims-pawel.map.fastly.net
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
www.rodales.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
shop.cosmopolitan.com
b2.shared.global.fastly.net
shop.elle.com
www62.prevention.com
b2.shared.global.fastly.net
hearst-hdm.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
magentocloud42.map.fastly.net
hearst-uk.map.fastly.net
hearst-hdm.map.fastly.net
hearst-uk.map.fastly.net
sli.esquire.com
hearst-uk.map.fastly.net
cosmopolitan.com
b2.shared.global.fastly.net
customerservice.prevention.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
b2.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
cosmopolitan.com
mcstaging-store.delish.com
b2.shared.global.fastly.net
shop.elle.com
shop.elle.com
hearst-prod.actioniq.mr-in.com
shop.elledecor.com
chrwc.com
link.prevention.com
mcstaging-shop.elle.com
hearst-uk.map.fastly.net
b2.shared.global.fastly.net
hearst-hdm.map.fastly.net
b2.shared.global.fastly.net
mcstaging-shop.elle.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.hearstmags.com
sli.esquire.com
secure.menshealth.com
hearst-hdm.map.fastly.net

Certificate

The complete raw certificate details for shop.prevention.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkmc1CBh653NNTvWhFm0
145pWh3iCDUP3nkekcMEMB5lcXlEVhb2u/KDVD1o64zeH5QTpVpcTIq7NRDyFUrk
WN3h/SwLHO5TaZSesk002OF4uFgZAlbdTpIc2dm83Jk844PNbfuhRhsAhUexxhrc
Br1+VMJoFpX4m2oTlToYfM5IvbXra9FI0iQEdzKUR7x9fx1sR2Xjbm/CGpjfGk5+
JKYdU+AcKuAjs4X6UQtSkQnbnt+ZDzY0eEdTyy5fkrp3H6EhkGYfCNof3cpLpwWv
1vxkcHcQt5BuDS489vkpN22hDcfWMZYWV5WgtKZdAFcjAKPMHohpV8YUJQb5LdgV
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17692675512345676518705849932213089339
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hearst Communications, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.prevention.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23011671235607540118917356240356239848394104026679642757167865323734762539758766780061531941735914295177630912061876401258371040453009133088695927369503053296446376130376785002153272117241126567328181704544698988355878364329747477723741584479183613392546532866810350581031012018970904384629433474453640607135531708824648590780618840753682767078979862436090356880180057765195959765831444893967726692336782781867998515677278760829684678654791348846277637931122412888477304045702749560859730206140426091579645700655321104390517011010499772287421403966503355180947640743846443997257156456200047267019903024423995960726871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							463b1f6963aacedbaa1fc7e38663af8af52ce648
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (570 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.prevention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bestproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bicycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.caranddriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cosmopolitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.countryliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.delish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.elle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.elledecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.esquire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thefoodnetworkmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goodhousekeeping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.harpersbazaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thehgtvmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.housebeautiful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.menshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.oprahdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thepioneerwoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.popularmechanics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.runnersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.townandcountrymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.veranda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.womansday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.womenshealthmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.roadandtrack.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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