secure.accurint.com

- LexisNexis Risk Solutions Inc -

Issued by DigiCert EV RSA CA G2

About this certificate

This digital certificate with serial number 0c:5c:dc:46:11:d4:2b:ba:44:34:0d:6f:c8:cf:51:72 was issued on by DigiCert Inc.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

LexisNexis Risk Solutions Inc

Company registration number: J214903
Organization: LexisNexis Risk Solutions Inc
State / Province: Georgia
Locality: Alpharetta
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:5c:dc:46:11:d4:2b:ba:44:34:0d:6f:c8:cf:51:72
Serial Number (int): 16432894942006117921156286854221222258
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 50:ff:07:a4:d5:b7:ae:40:af:89:33:9d:60:75:74:7e:80:7d:a9:da
AuthorityKeyId: 6a:4e:50:bf:98:68:9d:5b:7b:20:75:d4:59:01:79:48:66:92:32:06

Fingerprint (sha1): ca:65:88:77:90:1f:27:b2:76:23:8a:5d:ff:8a:28:4e:0c:ba:83:f5
Fingerprint (sha256): 47:f7:5e:9e:5e:3f:20:9a:b8:db:fe:01:31:cd:a7:fa:71:c2:49:68:51:11:c1:10:d0:57:a1:3a:f0:ad:88:7f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertEVRSACAG2.crl

Check the revocation status for certificate secure.accurint.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.accurint.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.accurint.com
accurint.com
www.accurint.com
secure3.accurint.com
secure2.accurint.com
prod.secure.accurint.com
dr.secure.accurint.com
prod.accurint.com
dr.accurint.com

Other certificates including the domain name accurint.com

(limited to 100 certificates)
fips-secure.accurint.com
secure.accurint.com
knowx.accurint.com
aac.accurint.com
cdnfp.accurint.com
rmprod.accurint.com
rmcert.accurint.com
rmcert.accurint.com
chat.accurint.com
chat.accurint.com
cdnfp.accurint.com
securedev.accurint.com
billing.accurint.com
rmcert.accurint.com
secure.accurint.com
chat.accurint.com
rmcert.accurint.com
chat.accurint.com
secure-emsi.accurint.com
xmld.accurint.com
billing.accurint.com
secure.accurint.com
mari.accurint.com
chat.accurint.com
aac.accurint.com
secure.accurint.com
billing.accurint.com
secureipv6.accurint.com
mari.accurint.com
aig.accurint.com
maprod.accurint.com
chat.accurint.com
secure.accurint.com
secure.accurint.com
batch.accurint.com
aac.accurint.com
billing2.accurint.com
chat.accurint.com
secure.accurint.com
maprod.accurint.com
billing.accurint.com
aac.accurint.com
secure.accurint.com
xmld.accurint.com
aig.accurint.com
batch.accurint.com
xmld.accurint.com
prod-hsm.accurint.com
billing.accurint.com
bridger.accurint.com
maprod.accurint.com
bridger.accurint.com
rmcert.accurint.com
mari.accurint.com
securedev.accurint.com
billing.accurint.com
mari.accurint.com
secure.accurint.com
billing.accurint.com
secure.accurint.com
billing.accurint.com
mari.accurint.com
aesqa.accurint.com
secure.accurint.com
rmprod.accurint.com
secure2.accurint.com
rmprod.accurint.com
rmprod.accurint.com
knowx.accurint.com
chat2.accurint.com
aac.accurint.com
maprod.accurint.com
secure.accurint.com
secure.accurint.com
secure.accurint.com
batch.accurint.com
secure.accurint.com
rmcert.accurint.com
aac.accurint.com
chat2.accurint.com
billing.accurint.com
xmld.accurint.com
bridger.accurint.com
aig.accurint.com
xmld.accurint.com
prod-hsm.accurint.com
rmprod.accurint.com
rmcert.accurint.com
secure-emsi.accurint.com
billing.accurint.com
xmld.accurint.com
secureipv6.accurint.com
xmld.accurint.com
aac.accurint.com
knowx.accurint.com
securedev.accurint.com
billing.accurint.com
rmprod.accurint.com
rmcert.accurint.com
xmld.accurint.com

Certificate

The complete raw certificate details for secure.accurint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAred7xRegvnHX+Plsig9/
roS3VHRPwQ9SKlHA+tNwx2+Y3PMWpVhGAfMExY42FS+WeElE336t/a1HqrxLSDH+
qb7dHz/ukQYEMKIv2EuGMZ7qNrkOoehuorr6ViLIMCcc2Wo/HPZx70i7XA4a6dpv
awpQktKVV1lm9u+v9kS8jR3rz9VvtUpCN5gZnnzteXa5uqBjiOx1HWekmzC3Lt/K
wo5Jtc4x4xy5/tqAGL01C0+5oweu/DrtvCz2108vqog8dBAt3VMO0BD6eJbFidnE
nCzrTx3MjC+XOizlEtheHFYM1QTjyipvHKdr2gK0Rm7Q0zXHk3dpGPEUU1413uU1
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16432894942006117921156286854221222258
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'J214903'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alpharetta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LexisNexis Risk Solutions Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.accurint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21953375515595081815440035453587842232616121285860125922366815329651174554544460523192988789927576968288916649759373372419726060442666956174997138899620085244819793644350372252634385159699637358826630931959706434681317830014077385134782516659539992158771780289368735697798893200592817248518228228959703646797340835651441289142692076691015925659266228850473599606506998765418402585360920719278760179904790878301526609796740830111805014046270744365830149476318750303581494703235532153336448486639369277645411780448646610168312466321965175827094695828417965024342420087300628837730882193762748203297092266971067108898279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6a4e50bf98689d5b7b2075d45901794866923206
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50ff07a4d5b7ae40af89339d6075747e807da9da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.accurint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accurint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accurint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure3.accurint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure2.accurint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.secure.accurint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr.secure.accurint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.accurint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr.accurint.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001870a124ff30000040300473045022017110f819e86953ebd6e6e8fa1250a41357bb0d27c9cac2b894ad82e8326c6e1022100c19567cf2c5aef0460faab01f2b02f6e27742d10f073904091f0b798505558cc00760073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b5000001870a125032000004030047304502205582c2d0359d311207402ed4f4197275c7d94db8c55adf227e99c23fa7c08ad2022100e444f7dc52da9cf73a57cbb64fe0691578c49bb3ddd7ddcd3cc7aa563f71b5ae00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001870a1250150000040300473045022100bb9fd4341a20fa00c9921c006981772fcf7b220f6c16bf8a2c85a557a1ac85f302202cb2787ca6c999d6f35ff654b3cabf5b03460bd3ce630425bf989b5d71136cfd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a2bf136f0e2418382477da87cbd76962ec1d0eed9a6bec2b511d8c204ebeb7a60a2415d5513ceb2ef8808e37f40371b49bc291b495312d6804b2fd46a2aa7df43901e85cdba1cf9285939660b23b5eea836666da7b0b28ae72a5e91e24f6c5ef30e6eda35e38951d0d4f0ed9112fbbc347ed0bab17a93f3f7a2c2d17e424e8537199fe503f276e465271687a1146df04837844e8dc40097ea3952718447e3c3904be54ffc49d9af47eff84a9aa07b5ca849690ff7785b505671992cb35f4d7df39ac64bbd2ad9422bcea4e03dba84d0eec9fe7d8eb73530762b291a473fe7e0cb49fb8e2fedc33884f3832ea25d9735c45ef022998f6546169dad4efb8cd1941