dev-portal-puma.dss.opower.it

- Oracle Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 02:09:31:94:a0:0f:11:e4:61:fc:67:c6:2a:af:c2:dd was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oracle Corporation

Organization: Oracle Corporation
Organization unit: Oracle UGBU AMER-US
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:09:31:94:a0:0f:11:e4:61:fc:67:c6:2a:af:c2:dd
Serial Number (int): 2706192276671096189295046287300739805
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 85:ef:d4:55:db:71:9a:5e:84:57:0d:f0:03:4d:90:6c:82:6a:9b:a3
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): d4:30:19:ae:29:23:e2:d9:cb:7f:83:49:f5:2b:1f:34:a9:37:0b:f2
Fingerprint (sha256): 47:0e:96:06:92:42:f5:7c:b8:8f:11:8a:dc:12:1c:59:6f:2a:c3:ae:c3:ce:b5:c8:c2:97:0c:2d:af:14:4d:ae

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate dev-portal-puma.dss.opower.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev-portal-puma.dss.opower.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-portal-puma.dss.opower.it
dev-cat-1001.dss.opower.it

Other certificates including the domain name opower.it

(limited to 100 certificates)
proxmox-2301.ca.opower.it
stage-redis-cluster.on.opower.it
sunfire-x7-hadoop-1058.va.opower.it
dev-portal-lynx.dss.opower.it
sunfire-x7-hadoop-1026.va.opower.it
sunfire-hadoop-worker-1002.va.opower.it
stage-portal-demo.dss.opower.it
prod-keysecure-1001.va.opower.it
sunfire-x7-hadoop-1055.va.opower.it
proxmox-2301.ca.opower.it
bi-superset.va.opower.it
prod-omatrix-master-1001.va.opower.it
dss-test-qa.dss.opower.it
*.va.opower.it
dev-nomad-consul.va.opower.it
dev-cat-6001.iad.opower.it
dev-ccb-1001.dss.opower.it
demo.dss.opower.com
proxmox-3201.on.opower.com
dss-util-prod.dss.opower.it
dev-nexus-6001.iad.opower.it
vm-hadoop-idc-gateway-3001.on.opower.it
sunfire-x7-hadoop-1006.va.opower.it
stage-cat-nes-imp-1001.dss.opower.it
stage-rabbitmq-da-1001.va.opower.it
sunfire-x7-hadoop-1064.va.opower.it
chef-provisioner.iad.opower.it
omatrix.va.opower.it
proxmox-3201.on.opower.it
prod-nexus-6001.iad.opower.it
vm-hadoop-kafka-3002.on.opower.it
vault-dev.iad.opower.it
test-consul-lb.aws.opower.it
*.on.opower.it
dev-nexus-6001.iad.opower.it
pen-test-nomad-consul.iad.opower.it
prod-cat-demo-1001.dss.opower.it
dev-hadoop-manager.va.opower.it
spacewalk.iad.opower.it
prod-carte-1001.va.opower.it
prod-smtp-us-east.opower.com
prod-vault-lb.aws.opower.it
sunfire-hadoop-worker-3010.on.opower.it
ei-pge-qa.va.opower.it
sunfire-x7-hadoop-1027.va.opower.it
birdman-prod.iad.opower.it
dss-test-qa.dss.opower.it
prod-rabbitmq-da-1001.va.opower.it
hadoop-dac-nav-6001.hadoopnonprod.vcniadlsprd.oraclevcn.com
sunfire-x7-hadoop-1007.va.opower.it
hadoop-dac-master-6001.hadoopnonprod.vcniadlsprd.oraclevcn.com
sunfire-x7-hadoop-1025.va.opower.it
prod-nomad-consul.va.opower.it
prod-chef-1001.dsspayments.opower.it
ops-jenkins.iad.opower.it
sunfire-x7-hadoop-1005.va.opower.it
stage-portal-coa-imp.dss.opower.it
sunfire-x7-hadoop-1056.va.opower.it
prod-hadoop-manager-2001.ca.opower.it
net-firewall-2151.ca.opower.it
prod-nexus-6001.iad.opower.it
dev-portal-puma.dss.opower.it
sunfire-x7-hadoop-1023.va.opower.it
hdp-dac-dr-master-6002.hadoopnonprod.vcniadlsprd.oraclevcn.com
net-firewall-2121.ca.opower.it
github.va.opower.it
qa-redis-cluster-client.va.opower.it
dev-portal-lynx.dss.opower.it
ssoadm.va.opower.it
docker-test-2001.dss.opower.it
sunfire-hadoop-worker-1008.va.opower.it
prod-nexus-6001.iad.opower.it
stage-nomad-consul.on.opower.it
chef-provisioner.va.opower.it
bi-superset-dev.va.opower.it
sunfire-x7-hadoop-1008.va.opower.it
sunfire-hadoop-worker-1009.va.opower.it
prod-odst-rabbitmq-gold.aws.opower.it
dev-portal-cheetah.dss.opower.it
*.va.opower.it
dev-outbound-redis-1001.va.opower.it
test-wiki.iad.opower.it
prod-chef-1001.dsspayments.opower.it
stage-portal-nes-imp.dss.opower.it
dev-carte-1002.va.opower.it
dev-outbound-redis-client.va.opower.it
dev-portal-puma.dss.opower.it
prod-smtp-canada.opower.com
net-firewall-1222.va.opower.it
stage-cat-demo-1001.dss.opower.it
prod-service-discovery-1001.va.opower.it
dev-portal-panther.dss.opower.it
sunfire-x7-hadoop-1039.va.opower.it
dev-nomad-consul.va.opower.it
dev-spacewalk.iad.opower.it
pssc-hadoop-master-1020.va.opower.it
sunfire-hadoop-worker-3012.on.opower.it
vm-hadoop-kafka-3001.on.opower.it
proxmox-3201.on.opower.it
vault.fra.opower.it

Certificate

The complete raw certificate details for dev-portal-puma.dss.opower.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGiDCCBXCgAwIBAgIQAgkxlKAPEeRh/GfGKq/C3TANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgxMjE5MDAwMDAwWhcN
MTkxMjE5MTIwMDAwWjCBnDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3Ju
aWExFTATBgNVBAcTDFJlZHdvb2QgQ2l0eTEbMBkGA1UEChMST3JhY2xlIENvcnBv
cmF0aW9uMRwwGgYDVQQLExNPcmFjbGUgVUdCVSBBTUVSLVVTMSYwJAYDVQQDEx1k
ZXYtcG9ydGFsLXB1bWEuZHNzLm9wb3dlci5pdDCCAiIwDQYJKoZIhvcNAQEBBQAD
ggIPADCCAgoCggIBALJygeIHsTEwA2k5GGoNxjq6d3s61mbdXv9R/15psqF+74wD
OjIsj76+Rx5LYcVUKN/L/c4s4IlNxjCWjDve8LBcTbgSvFjwQpRSEk9FVPPzjyl9
kaVSl+2cPOmUZz1HV75nHjrI6iz8TRiAAc3R0Gd2Hlc9J2PkGYiu4aLzu7mJiPJ0
yL1lZNuSFF5jRSDdGCrbXOgSknKtEp5z4hR/XP49XHeaXchwstNStHko5TJmz1Hz
qofuOlXRKCVup8Tr3d2MwGfAAx48OrQxJovyg5DrFIhldYGhRqP6oQk9RQIS1DVb
nwzltA+xlQMOCavs/cMIE8ZPWL7DCN2ixDszN4kC8Sv43X5DBA3gypEf7u/0w/ie
AoZSyUxZ2juj1k5vDQDjyq9uk8mJ5ufpAR30Lb47i7uSiXZI2jq1EsGDK2jnrCr5
t04egSdjBCiuXU7Teqv2Bmd8jUNUfn2S2bvEbrkSo9jos4nBMw7O4ROmZBoP0sKt
d1GU7Ns/00V+brPiyyBzHvOmDQ02bZX0F9nmxBBFmHOO+2Q3iqxvJowFPkUts4/0
YfmHOpL3lukaEEOHpxvoJFBDIMEp3JmvNnARp1yvyiOTqhwPTVg0s6HMC5gKujzr
v+nCGdfqcsa1tivBCRc0zKBOmselTTwNXV11EmSjDWg3aXet36iJuwAIaw93AgMB
AAGjggISMIICDjAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNV
HQ4EFgQUhe/UVdtxml6EVw3wA02QbIJqm6MwRAYDVR0RBD0wO4IdZGV2LXBvcnRh
bC1wdW1hLmRzcy5vcG93ZXIuaXSCGmRldi1jYXQtMTAwMS5kc3Mub3Bvd2VyLml0
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
awYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Et
c2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2Nh
LXNoYTItZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUH
AgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsG
AQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t
MEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl
cnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIE
AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAKGTpR+ZBdGx0u89CXdZgC8OwZzv
RqONn98Sfyf5mKcnKl20z4BsC2mYc04P0Yaz/xwmvUwD27IiCQZvdHkHpj1m1neZ
NmN/JPdN7TMG44uzacqBHqMRlf31+YL06/T8oAKbsnGi68qRYIamw8FlSXALpv8x
1iiE/qOX9QW3Lu8Asc4+c0h5KiqGUBnk7hGEFW30DUyMMxjbqaQX6GgyI+XzfLE2
5r/h3v7Wv92A0dAqDhy115O9fh59ABNC1RtTYCCNqNNxWIhT9si275+lK9MQs1IG
8y3WQMbHIR/X8Iyq7sHJNUPuy7Sdid6hevOgVJWoEl1TDayI9a4qDY3P8wA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsnKB4gexMTADaTkYag3G
Orp3ezrWZt1e/1H/XmmyoX7vjAM6MiyPvr5HHkthxVQo38v9zizgiU3GMJaMO97w
sFxNuBK8WPBClFIST0VU8/OPKX2RpVKX7Zw86ZRnPUdXvmceOsjqLPxNGIABzdHQ
Z3YeVz0nY+QZiK7hovO7uYmI8nTIvWVk25IUXmNFIN0YKttc6BKScq0SnnPiFH9c
/j1cd5pdyHCy01K0eSjlMmbPUfOqh+46VdEoJW6nxOvd3YzAZ8ADHjw6tDEmi/KD
kOsUiGV1gaFGo/qhCT1FAhLUNVufDOW0D7GVAw4Jq+z9wwgTxk9YvsMI3aLEOzM3
iQLxK/jdfkMEDeDKkR/u7/TD+J4ChlLJTFnaO6PWTm8NAOPKr26TyYnm5+kBHfQt
vjuLu5KJdkjaOrUSwYMraOesKvm3Th6BJ2MEKK5dTtN6q/YGZ3yNQ1R+fZLZu8Ru
uRKj2OizicEzDs7hE6ZkGg/Swq13UZTs2z/TRX5us+LLIHMe86YNDTZtlfQX2ebE
EEWYc477ZDeKrG8mjAU+RS2zj/Rh+Yc6kveW6RoQQ4enG+gkUEMgwSncma82cBGn
XK/KI5OqHA9NWDSzocwLmAq6POu/6cIZ1+pyxrW2K8EJFzTMoE6ax6VNPA1dXXUS
ZKMNaDdpd63fqIm7AAhrD3cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2706192276671096189295046287300739805
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle UGBU AMER-US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-portal-puma.dss.opower.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728001445874634189771285165274121156725945912271826762111303811896400231700817367695788262499293630077265812015175159505909725038182133778454372035290439471201687882239209162066738532385082910523330631047282731953626361772282022832956450475707087887946714120854913342246587252528550590508327133324683923664286310997860050798336578850385701482267226505172717057613736782249406724702461643082542106200624803940033782420820237336203059799956891497911127210792092366752234502832498710848552442966039190127058722724842825612895546781266897274485900175623873728901761343006193350710212611191841054649572113912011148113780357585638525771522887109440613816815272583670314677811418448356680001115843121879720185884665609819844125381319391317805835323836015608213225351344572824206757003766370002975017663636413653730064835587716901217885691916872764639034145265272636663517642307929157649178483359071884859217668892542045291488809401253831737492825857928127477424598769409321165916014901416063335465025311036771744042276181066283336577140270889525910016571532562302870881804265402658688775383805904147171050661855611319532797094723950479182768000518307681299345504244452293632740966972706086868234767814260930204296974693943001152086220672887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85efd455db719a5e84570df0034d906c826a9ba3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-portal-puma.dss.opower.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cat-1001.dss.opower.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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