myinstallations-pprd.airliquide.fr

- AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:0e:64:6a:23:a1:a8:a4:67:51:e3:9c:e6:05:2d:63 was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE

Organization: AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE
Organization unit: ALIT
Locality: PARIS
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:0e:64:6a:23:a1:a8:a4:67:51:e3:9c:e6:05:2d:63
Serial Number (int): 13367008764041646785884842005490904419
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d3:e6:ee:f9:b2:f1:41:ff:a9:72:cc:93:2e:c3:66:ba:ec:ee:21:5c
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): ea:31:f4:24:33:71:3f:2b:8b:57:7d:50:e3:76:c1:7d:05:af:4b:16
Fingerprint (sha256): 47:2e:38:a0:33:1a:60:46:b2:d2:ea:ee:8d:8a:eb:85:bc:8c:e0:18:b9:52:ba:30:7c:83:80:80:7e:50:c5:17

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate myinstallations-pprd.airliquide.fr

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for myinstallations-pprd.airliquide.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

myInstallations-medical-pprd.airliquide.de
myinstallations-pprd.airliquide.it
myinstallations-pprd.airliquide.pt
myinstallations-pprd.airliquide.es
myinstallations-pprd.airliquide.nl
myinstallations-pprd.airliquide.lu
myinstallations-pprd.airliquide.be
myinstallations-pprd.airliquide.fr
myinstallations-pprd.airliquide.at
myinstallations-pprd.airliquide.ch
myinstallations-pprd.airliquide.de

Other certificates including the domain name airliquide.fr

(limited to 100 certificates)
www.airliquide.com
alpin.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
www.airliquide.com
myinstallations.airliquide.fr
www.airliquide.com
www.airliquide.com
mygas.airliquide.fr
mygas-qa2.airliquide.fr
www.airliquide.com
sante.airliquide.fr
www.airliquide.com
distributor.airliquide.com
mygas-qa1.airliquide.fr
mixtureguide.airliquide.fr
kergis.airliquide.fr
myinstallations.airliquide.fr
www.macommandegaz.airliquide.fr
pleingaz.airliquide.fr
mygas-qa3.airliquide.fr
mixtureguide.airliquide.fr
mixtureguide.airliquide.fr
www.airliquide.com
mygas-pprd.airliquide.fr
kergis.airliquide.fr
sante-pprd.airliquide.fr
myinstallations.airliquide.fr
mygas-qa2.airliquide.fr
pleingaz.airliquide.fr
distributor.airliquide.com
sante.airliquide.fr
mygas-pprd.airliquide.fr
sante-pprd.airliquide.fr
mygas-pprd.airliquide.fr
mygas.airliquide.fr
kergis.airliquide.fr
www.airliquide.com
myinstallations.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
mygas-qa1.airliquide.fr
try.airliquide.fr
industrie.airliquide.fr
myinstallations-pprd.airliquide.fr
www.airliquide.com
www.airliquide.com
kergis.airliquide.fr
www.airliquide.com
myinstallations.airliquide.fr
alpin.airliquide.fr
mygas-pprd.airliquide.fr
www.airliquide.com
www.airliquide.com
www.airliquide.com
sante-pprd.airliquide.fr
myinstallations-pprd.airliquide.fr
sante-pprd.airliquide.fr
industrie.airliquide.fr
pleingaz-pprd.airliquide.fr
mygas.airliquide.fr
mygas.airliquide.fr
mixtureguide.airliquide.fr
sante-pprd.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
alpin.airliquide.fr
industrie.airliquide.fr
sante-pprd.airliquide.fr
mygas.airliquide.fr
myinstallations-pprd.airliquide.fr
mygas-qa1.airliquide.fr
pleingaz.airliquide.fr
mygas-qa4.airliquide.fr
www.airliquide.com
alpin.airliquide.fr
myinstallations-pprd.airliquide.fr
www.macommandegaz.airliquide.fr
distributor.airliquide.com
mygas-pprd.airliquide.fr
sante-pprd.airliquide.fr
mixtureguide.airliquide.fr
myinstallations-pprd.airliquide.fr
mygas-qa1.airliquide.fr
mygas-pprd.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
myinstallations.airliquide.fr
pleingaz.airliquide.fr
www.macommandegaz.airliquide.fr
try.airliquide.fr
www.airliquide.com
mygas-qa2.airliquide.fr
www.airliquide.com
mediatheque-alfi.airliquide.fr
mygas-qa4.airliquide.fr
alpin.airliquide.fr
sante-pprd.airliquide.fr
mygas.airliquide.fr
myinstallations.airliquide.fr

Certificate

The complete raw certificate details for myinstallations-pprd.airliquide.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGEwyFDwopJzpyuzDKlB
zLfhVKf8yCbl155dyDxToGzmUrXZBbFuyARujI5nQRDK1bEw6erUwt5OdXQbVLqE
rPTRvGf30P+qwQKpH53HoV0PGkVuHgWsoAUDIJ+I6bLNVJzlyy0NocoNxxFxvFcD
ZVhE+bCi0fhYa51u7XEnJcxckoMmu3IcLZdhnF/Rm6lAi8iV5YZLgkbaTvWwGg3H
H09svlxENg1VZP08ultSgjXthMizyTAcE40BdOC9yLGOEScMAqYDaf0jWVZkZQN/
2Z/0n/h07aQVYfvdD1k9T8E8yTwBvDsC9kKz3T1WTnW5S1bIRxsWoMWGuyJEfRT6
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13367008764041646785884842005490904419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ALIT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'myinstallations-pprd.airliquide.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22265868123720247853747644444185954768262877912464737356240461269956961423761627564314891809888215010487147432969000439492484865339752135908885983321676672744583638834402568453046732126749541630110813288314522436468364195320746733952579232903288707837099669783924333539051562398559196997949456488523235922693518698575107883893625549992538416947457862763521391226933601106107232187117624413190967975739545227623034151825137286254114714743487504209750084597868233131722576449575555643765859312590857093779209111064403644505666705374117685103889357617187479951148645187716093206816608705402722645852385097287732458486521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3e6eef9b2f141ffa972cc932ec366baecee215c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (408 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myInstallations-medical-pprd.airliquide.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinstallations-pprd.airliquide.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinstallations-pprd.airliquide.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinstallations-pprd.airliquide.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinstallations-pprd.airliquide.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinstallations-pprd.airliquide.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinstallations-pprd.airliquide.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinstallations-pprd.airliquide.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinstallations-pprd.airliquide.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinstallations-pprd.airliquide.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinstallations-pprd.airliquide.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001682d9afccd000004030047304502204d0f0c3e97a9083aff88f7004ad5775f8cf32846f0c3e1c91f2729240e7c80b1022100f72f3c55324d5db7d8a328e8cef9e1d192133fec594999baa93fcc3142cc65130076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001682d9afd8e0000040300473045022100cbceb6e241015464fc1acfa23f495c53011a85d3f1641a930b2003914fc8918302206a456d2755f341d11954cbe67f788cf8b2dd3af83cd1a4209520d1e316d1cf86
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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