bdo.bw

- BDO Services (Pty) Ltd -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:18:70:73:1e:44:3e:d2:1c:b2:02:de:93:46:7d:fb was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BDO Services (Pty) Ltd

Organization: BDO Services (Pty) Ltd
Locality: Gaborone
Country: BW

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:18:70:73:1e:44:3e:d2:1c:b2:02:de:93:46:7d:fb
Serial Number (int): 9431491845580599013877745260087901691
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d0:43:42:1d:d6:38:a0:f6:42:3a:5b:fe:3c:64:52:f3:12:f4:35:e4
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 13:f9:6f:c7:2c:42:fc:ff:07:38:95:95:67:87:9b:2c:78:8b:00:5c
Fingerprint (sha256): 45:92:fd:ae:ce:d9:fb:98:eb:01:0c:dc:72:26:c2:08:35:cf:f2:37:8d:02:3b:75:c0:28:4d:a8:ca:d6:21:1e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bdo.bw

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bdo.bw

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bdo.bw
www.bdo.bw

Other certificates including the domain name bdo.bw

(limited to 100 certificates)
kingsway.co.bw
www.bdo.bw
kingsway.co.bw
kingsway.co.bw
servicedesk.bdo.bw
bdo.bw
kingsway.co.bw
www.bdo.bw
bdo.bw
servicedesk.bdo.bw
kingsway.co.bw
kingsway.co.bw
www.bdo.bw
bdo.bw
kingsway.co.bw
kingsway.co.bw
kingsway.co.bw
www.bdo.bw
bdo.bw
kingsway.co.bw
www.bdo.bw
kingsway.co.bw
kingsway.co.bw

Certificate

The complete raw certificate details for bdo.bw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHnjCCBoagAwIBAgIQBxhwcx5EPtIcsgLek0Z9+zANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjEwMDMwMDAwMDBa
Fw0yMzA5MjcyMzU5NTlaMFIxCzAJBgNVBAYTAkJXMREwDwYDVQQHEwhHYWJvcm9u
ZTEfMB0GA1UEChMWQkRPIFNlcnZpY2VzIChQdHkpIEx0ZDEPMA0GA1UEAxMGYmRv
LmJ3MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAm3c3iA3qgN/Yeap4
X3g9CVX37dx6wbsJDf+8x9zNnt5wGpgxjvX4avQcAmEFa23fHl7n32q9QLYDqFcG
NZqHw9Wm0YZBMorDb9Q2oNfPaj1eMZFTIWP5c9R3HxQHRgfXIYEdyLt4zsw8FrFF
PXG66Uwr70AEgtYFouH8eO2C81wayFYtKppp+bEmfrklwHS/c9WaMsV32kW/BKf4
yA7PItdGD3+Z5RSslze+J/D8T040Gk/1IweQVtn2QTCTkJx/aMjGju0OMLQhzpDT
Gz7Ap3wnoSuUfahzz2SCrl4n8rQstUdmEiBQ214eCtlIN/h4+4X7mYxpIx+BEB3T
0hcbfWwThMeub8I62VZQsv1vjXMLRZWjAVSSAVwpGoDpKuYyrVIvlteaqrVJxsIw
rq0NRlERv4TFWY+pVgccf5UGc+dX2MJYZhzILOwPJC6StIfWafdr+rlY9TTSrIkQ
hwEzCj0MLqHCZrtBV2wsFl6wMKf/ZyAGlUgr9O1j7U9PHcRgsECxvtY3/ENUF/Ur
ER2xT5Vg9qn3a1O1MTHM8e8iYpXiqOelRjPdsRvpUt/5AXjdC297Hq8JOxWNJ8b4
PgoDuvzxxFD68ox8b4LfW65C/ZUFuJIe9+aHcDo8TTU2ZCQZKjgRfYvxWY80Xf/4
vJxi6zI4bUVaZTqwRlffDV50sT0CAwEAAaOCA3EwggNtMB8GA1UdIwQYMBaAFLdr
ouqoqoSMeeq02g+YssWVdrn0MB0GA1UdDgQWBBTQQ0Id1jig9kI6W/48ZFLzEvQ1
5DAdBgNVHREEFjAUggZiZG8uYneCCnd3dy5iZG8uYncwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBjwYDVR0fBIGHMIGEMECg
PqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEy
NTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20v
RGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMD4GA1UdIAQ3MDUwMwYG
Z4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQ
UzB/BggrBgEFBQcBAQRzMHEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2lj
ZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29t
L0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS0xLmNydDAJBgNVHRMEAjAAMIIB
fQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdQDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr
7Otp4Xd9bQa9bgAAAYOc9f6fAAAEAwBGMEQCIBcpeWn/sLWf+oXli7GbF1Ddhogj
XjBcx3un8isk8/2AAiBOWgbZwQPp4E0gq37unE6MtLmhoUWLszivQmeEzP4UewB1
ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWaAAABg5z1/tkAAAQDAEYw
RAIgEMRHCkU6SzJch2sK+3EQpjW1xpaYT05qelVqSr8WUFACIC1UZB6RRisHNJK9
n4Bjj+G+fWgdT7I9pPTPK/aVokbXAHcAtz77JN+cTbp18jnFulj0bF38Qs96nzXE
nh0JgSXttJkAAAGDnPX+tAAABAMASDBGAiEAhcVE3AqOIgfmoJoIVQJJGmBqt67K
LqNI1zXMPmep2VgCIQDCzPf/4WqrhpH8cSRio5nKSeF76fyM9wo9uqUnPiFYkTAN
BgkqhkiG9w0BAQsFAAOCAQEAimzplAenGKGZls/3+TlGbnHsLhF4KjpC4l11vuNS
MbezthVkjviOq0qNALCdsRXSVOB7NXj2shdZu6VPVBdyBZqtM+2pkeq6NxJI3UcT
j848gcWoQom54VFdl9W5Y3L9MV01ek/q/43n3CLCEQviQ8jsToONToys5LG2sDJ3
WYI2UoTuGT6hoZYKoMsSh1u7uEbKu7+VjoD3VLhqH8SD+jitrC9SY7KPrRoOQNDW
kqKXB+hXrkLDna0My90uH6Z3MUWB2eIcB8AccYXRSJCc3zr8pgNBQs87jP9Jk+T+
KCc/UZ48FcDh6+dPjaUbmh27a0/vCATRfNX8wrryO0ERYw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9431491845580599013877745260087901691
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gaborone'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BDO Services (Pty) Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bdo.bw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 634244684447677423396674647747063875874663130012249912422794076716337056511740933024400976558934985987050794609915531187460650772883295283074707853398281782391035638166207074641689640559118593739143993252977196810084345486954027084167899742738860821956828734701567098344901607198433856063538689073533157691785027464241281739337090386501877310028192152692785733825518996316195943191739825080433874889328589233562795635194015196582325958456150822437856074804020029052739144388585387318130017395316233760982063129956253905996755789932536160304341194430943639741972750701371022410374332926223207864640030186208056328824724960249331436700107714960571877110982695143652329334192114300601493385862117408615142751424340982500108944532247778359561384444430381216222335676307322955771669293202509427796377687097134544611306195838148577487171733056745416306783791108550046037054253710367477317143608968510321061179919551430051110913311061054432692010954438396154988055728142768317031466561451375400377135922126132205535809415891967213685614312088051495362058060175883405880622371458510975489914708146317466930393164441497737026810508420903243975343076789984352148521405977593739254043121882940304390696425390285032395965617962761249112833962301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d043421dd638a0f6423a5bfe3c6452f312f435e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdo.bw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bdo.bw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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