pki-search.symauth.com

- DigiCert, Inc. -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 0f:b7:40:b3:b5:0d:df:98:05:e8:b7:0b:4e:b9:b7:d7 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DigiCert, Inc.

Company registration number: 5299537-0142
Organization: DigiCert, Inc.
Organization unit: Infrastructure Operation
State / Province: Utah
Locality: Lehi
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:b7:40:b3:b5:0d:df:98:05:e8:b7:0b:4e:b9:b7:d7
Serial Number (int): 20889922573974894015176766778072741847
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ab:a7:3d:f9:0d:6a:bd:c3:b7:0b:d5:15:a0:8e:5b:68:34:11:99:3d
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): a8:fb:02:e0:ac:1e:11:b9:82:68:b0:34:9a:d6:78:fd:b6:41:4a:21
Fingerprint (sha256): 48:26:11:e8:cf:ca:ab:50:7e:e1:cb:e9:02:f8:3f:15:d1:c6:79:f7:1d:c7:c9:9a:6c:77:09:db:8f:35:d6:91

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl

Check the revocation status for certificate pki-search.symauth.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pki-search.symauth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pki-search.symauth.com

Other certificates including the domain name symauth.com

(limited to 100 certificates)
pki-scep.symauth.com
gateway-syd5.symauth.com
pki-ws-test.symauth.com
pki-cbo.symauth.com
gateway-syd.symauth.com
testdrive-pki-idp.symauth.com
pki-internal-svc.symauth.com
pki-search.symauth.com
pki-reporting.symauth.com
pkiservices-test.symauth.com
pki-scep.symauth.com
gateway-syd5.symauth.com
userservices.vip.symantec.com
signing.pki-idp.symauth.com
origin-seal.symauth.com
pki-scep.symauth.com
pki-cbo.symauth.com
testdrive-pki-manager.symauth.com
pki.symauth.com
gateway.symauth.com
pki-cbo.symauth.com
pki.symauth.com
pki-mobile.symauth.com
wss-client.symauth.com
forms.ws.symantec.com
pki-ws-test.symauth.com
pilot-commercial-client.symauth.com
userservices.vip.symantec.com
pki-ws.symauth.com
pki-reporting.symauth.com
gateway-east.symauth.com
gateway-west.symauth.com
maintenance.verisign.net
pki-scep.symauth.com
pki-search.symauth.com
gateway-east.symauth.com
pki.symauth.com
pki-cmp.symauth.com
pki.symauth.com
pilot-pkiservices-test.symauth.com
pki-cbo.symauth.com
browser-extension.symauth.com
commercial-client.symauth.com
pki-mobile.symauth.com
pki-search.symauth.com
authmail-mtv.symauth.com
pki-manager.symauth.com
pki-search.symauth.com
userservices.vip.symantec.com
gateway-east.symauth.com
pki-search.symauth.com
userservices.vip.symantec.com
pki-cmp.symauth.com
pki-scep.symauth.com
pkiservices.symauth.com
pki.symauth.com
gateway-syd.symauth.com
pki-ws.symauth.com
vipia.symauth.com
pki-idp.symauth.com
wss-client.symauth.com
pki-cmp.symauth.com
browser-extension.symauth.com
pki-idp.symauth.com
pki-ws.symauth.com
browser-extension.symauth.com
pki-ws.symauth.com
pki-scep.symauth.com
origin-seal.symauth.com
ia-auth.vip.symantec.com
d.symcb.com
www.verisign.com
pki-reporting.symauth.com
pki-search.symauth.com
browser-extension.symauth.com
userservices.vip.symantec.com
pilot-pkiservices.symauth.com
pilot-pkiservices-test.symauth.com
gateway-syd.symauth.com
pkiservices-test.symauth.com
pki.symauth.com
pkiservices.symauth.com
userservices.vip.symantec.com
pki-manager.symauth.com
pki-search.symauth.com
testdrive-pki-manager.symauth.com
vipia.symauth.com
pkiservices-test.symauth.com
pki.symauth.com
testdrive-pki-idp.symauth.com
forms.ws.symantec.com
userservices.vip.symantec.com
gateway-west.symauth.com
testdrive-pki-manager.symauth.com
testdrive-pki-manager.symauth.com
ia-auth.vip.symantec.com
pki-idp.symauth.com
pki.symauth.com
userservices.vip.symantec.com
pki-reporting.symauth.com

Certificate

The complete raw certificate details for pki-search.symauth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHYDCCBkigAwIBAgIQD7dAs7UN35gF6LcLTrm31zANBgkqhkiG9w0BAQsFADB1
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk
IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTE4MDYxOTAwMDAwMFoXDTIwMDYxOTEy
MDAwMFowgeoxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYB
BAGCNzwCAQMTAlVTMRUwEwYLKwYBBAGCNzwCAQITBFV0YWgxFTATBgNVBAUTDDUy
OTk1MzctMDE0MjELMAkGA1UEBhMCVVMxDTALBgNVBAgTBFV0YWgxDTALBgNVBAcT
BExlaGkxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMSEwHwYDVQQLExhJbmZyYXN0
cnVjdHVyZSBPcGVyYXRpb24xHzAdBgNVBAMTFnBraS1zZWFyY2guc3ltYXV0aC5j
b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz2ieSxyy4cr2RDbsQ
IZT9I0WEdck7vdmLcpSdTTnaoqJM7O4UthtqDZoKgl+g36WB5regISvMWdebVHhX
IfEGbHSBW6XUdKqC9zVZribd/q7mTAQZmEB6TVYKqkR1rS2zQsVKlDrQLtAoEg01
WwoPTpRd86dI/o68l9SJr8sBlBgvVhDCZiWrf4/NYRWHH/6o6/5J+kABp3tRJ0/M
cAYPjvfQ4bGyg0Mlgj+PjVvS6U2oqJhp8V5wgAdPY9BgM5vXby39074g0M/kn37v
HwHHDpAo3o3cEFOlXQ2dk5OnvCniXUEEQi0HuThGe0uBEuYazL8Zq+TpMQBxXOxw
vo8RAgMBAAGjggN0MIIDcDAfBgNVHSMEGDAWgBQ901Cl1qCt7vNKYApl0yHU+PjW
DzAdBgNVHQ4EFgQUq6c9+Q1qvcO3C9UVoI5baDQRmT0wIQYDVR0RBBowGIIWcGtp
LXNlYXJjaC5zeW1hdXRoLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwz
LmRpZ2ljZXJ0LmNvbS9zaGEyLWV2LXNlcnZlci1nMi5jcmwwNKAyoDCGLmh0dHA6
Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEyLWV2LXNlcnZlci1nMi5jcmwwSwYDVR0g
BEQwQjA3BglghkgBhv1sAgEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGln
aWNlcnQuY29tL0NQUzAHBgVngQwBATCBiAYIKwYBBQUHAQEEfDB6MCQGCCsGAQUF
BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wUgYIKwYBBQUHMAKGRmh0dHA6
Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJFeHRlbmRlZFZhbGlk
YXRpb25TZXJ2ZXJDQS5jcnQwCQYDVR0TBAIwADCCAYAGCisGAQQB1nkCBAIEggFw
BIIBbAFqAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFkFcCt
JQAABAMARzBFAiEApw+YEKPf9OT/1YMuJuOIxXRDKKodfwrGWWZfNS53vdsCIEcr
3jlLN7DbzmtVwsOJDLb1klBSCYZ7705I0zmYuCWgAHcAVhQGmi/XwuzT9eG9RLI+
x0Z2ubyZEVzA75SYVdaJ0N0AAAFkFcCtgAAABAMASDBGAiEA5EHPAfypMBLFxKkP
jfUQJbsPXEf4J0GICBcnjfOlmBcCIQCDZwlEPPxiECtg39HCWqyjeZX4FprUi6aB
nkye6kUzFQB3ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABZBXA
rUoAAAQDAEgwRgIhAKZ12JIuxXaDENfgmiQuYbrT7wx6AvsdWqRV0pdvIaTxAiEA
xBR40VY+NKrvlVi1KwuzHFR/YZ6SB3PvMyEn37cIMxUwDQYJKoZIhvcNAQELBQAD
ggEBAMv5r8B1R6Iqix7HM1xm8loQliP6jy55GU8if/1DLE1k/ccPiBVVuzoxq/QU
DoFBF7CIOJAQm80hDLwLWoUwcRHZNu2KafpHWuf+XICc/2+DnbdCCUvW0bnFS6wr
90zgPB49W7nf8aRWjxkG0nYsRuyy3hbSATAzpnRf8pzqt/wmo4f38/7bv6zbOe1i
T99m3PiymJZ29PvnvWApkJjryeq4fCk3EUSaoe9w1US9f2KTS7VVWlt/0K7m0beh
NsOvZxczTeHwzJ97uAZ7d985RPUh4xstyzcXVRiEKDxy7RcowY6rLQT31Ecc6w33
5uI2C6qU6QNSpepVNuqIG3r6wiA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9onkscsuHK9kQ27ECGU
/SNFhHXJO73Zi3KUnU052qKiTOzuFLYbag2aCoJfoN+lgea3oCErzFnXm1R4VyHx
Bmx0gVul1HSqgvc1Wa4m3f6u5kwEGZhAek1WCqpEda0ts0LFSpQ60C7QKBINNVsK
D06UXfOnSP6OvJfUia/LAZQYL1YQwmYlq3+PzWEVhx/+qOv+SfpAAad7USdPzHAG
D4730OGxsoNDJYI/j41b0ulNqKiYafFecIAHT2PQYDOb128t/dO+INDP5J9+7x8B
xw6QKN6N3BBTpV0NnZOTp7wp4l1BBEItB7k4RntLgRLmGsy/Gavk6TEAcVzscL6P
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20889922573974894015176766778072741847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5299537-0142'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lehi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Infrastructure Operation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pki-search.symauth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22704232623415181878505687272368164124385733674300992500937232390707715918684313573440721619674521193241236248979620035281475656656165634032345118823882864678229954539796054866453560613984168557493851642086439082914789795942612720166063777469208779159098017829407185649792595643523279111509531580468127229480412702979387263567879806698693567515601398678675970661599286540725631014495099236824262303715998443412608597170035193664412046283901231185302629727737227853579462908541285111746318434916214908480967695700129425018958950754988865547064862348816702494650505344480728711136572547556174814073627063535968169398033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aba73df90d6abdc3b70bd515a08e5b683411993d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pki-search.symauth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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