worm.verkstad.net

- Ericsson -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:e6:a3:b6:47:92:c0:de:7d:20:a9:b4:15:29:e7:c4 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ericsson

Organization: Ericsson
Organization unit: IT Services
State / Province: Stockholm
Locality: Stockholm
Country: SE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:e6:a3:b6:47:92:c0:de:7d:20:a9:b4:15:29:e7:c4
Serial Number (int): 13160600713969075694622347244480358340
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3f:61:d7:8f:79:66:f4:3c:7e:87:ab:02:f6:6c:e5:ef:a2:10:91:6f
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): e0:8a:17:2a:02:ed:e4:50:44:85:dd:c6:ae:30:e9:54:3d:99:22:a3
Fingerprint (sha256): 4a:a4:7b:27:d7:f5:72:4f:43:23:16:96:d2:4b:85:0b:6b:5d:85:6b:b8:ae:30:83:4f:1c:50:1e:f9:75:43:5b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate worm.verkstad.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for worm.verkstad.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

worm.verkstad.net

Other certificates including the domain name verkstad.net

(limited to 100 certificates)
kafka.verkstad.net
hilton.ilik.net
wiki.verkstad.net
bscw.verkstad.net
spaces-services.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
wiki.verkstad.net
area.verkstad.net
kafka.verkstad.net
worm.verkstad.net
kafka.verkstad.net
pink.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
sail.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
edsp.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
chansurf-external.acke.verkstad.net
hilton.ilik.net
edsp.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
kafka.verkstad.net
flower.verkstad.net
kafka.verkstad.net
subversion.verkstad.net
kafka.verkstad.net
ergocoll.verkstad.net
spaces.verkstad.net
bscw.verkstad.net
kafka.verkstad.net
edsp.verkstad.net
spaces.verkstad.net

Certificate

The complete raw certificate details for worm.verkstad.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGPTCCBSWgAwIBAgIQCeajtkeSwN59IKm0FSnnxDANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwOTE0MDAwMDAwWhcN
MjAwOTE0MTIwMDAwWjB6MQswCQYDVQQGEwJTRTESMBAGA1UECBMJU3RvY2tob2xt
MRIwEAYDVQQHEwlTdG9ja2hvbG0xETAPBgNVBAoTCEVyaWNzc29uMRQwEgYDVQQL
EwtJVCBTZXJ2aWNlczEaMBgGA1UEAxMRd29ybS52ZXJrc3RhZC5uZXQwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQD6/tpc9Pc+I0QpZGpdD9TUP56/kE4F
yOU9yuBWsDd4qNOszP4uyWgII3cVFcrjFf23KZ3uSkRJEsjL4J2kQKwVdNwXUoSE
/twYk9NbUy2WKxXjAQWyIodDrk9AJa/o8I+WWzxnQ3SURATnprlMZ3QnMnsdTzIU
cOHmWCkZjQ8oCNFH3ZqxAZnLrmJQNebdntC0VtkYtSw0g7tQSRVtsQmUQ2SeZJeU
V6MuUaaQD6+bS9d1vJ7Ts81pkv64QAObQZhcTJrt5ub6Zw/3MQBV6GMNZ9eJcyMA
sX4JHXOQC7L348/ZcGNpLIcbc9pz9vhaihWo1ieFt3YGeXBd7qpDxmaTyrQma9ah
McVnYy0qQv9/WYUUjGc1qmdS1MgPMjrAoFt3vbLCzdLb0WTSS2vKcACo9CKsNYiN
sRz0EpPqJ4fCHFAALthp+I5xPCcX6T2sj3C428YIgiM9S1ileqT6EJFlpJ/WYnkq
I9j51nCgQFGI+xGdILeVZXlE+r9INQmCcG/gCBEedw1ICuW4pRaYPw22QqGiBhgz
7EDS1Kj8nnVBwWqtJTIyPoZtaYK4a5NVQdFrafa+F9hQAZb7qbfoBJ6oNHOQKZyd
wDcZgMIwnH7y7mEP0yziXPY/k15H+7nakH1pCZAsoXaqwb/JjGgnKpLOlKKks23K
sMDRTH6Dcu13lQIDAQABo4IB6jCCAeYwHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeN
Rji0LOHG2eIwHQYDVR0OBBYEFD9h1495ZvQ8foerAvZs5e+iEJFvMBwGA1UdEQQV
MBOCEXdvcm0udmVya3N0YWQubmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2Ny
bDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6Ly9j
cmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARFMEMwNwYJ
YIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNv
bS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0
cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0
cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAkG
A1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB
AAll/ImKyLjGNLwccM3O4cMZiSZhTmc/s2FIUKoGE5syewwZPkmaiDP5yGi2Jesc
tOfHKNjv+CZ7m5o9PDCZB8v8EJNpRTHIQTs8+Cx/+WnO2hKbLABDDOxAByOSdFzr
mk9SCydou5K++kEXokohzo1rCbmeQr5IFav6lcUhWCwPgL8f7M1pdVsFgS5XqurC
VqkrZrkCn1hG9Kr5mHsqt71TchF6eFPCSGg5UDlRf2mJCmICIyOd3IYjCiiaCzTl
2QxSSq7ayr9nUz9o71Noi06MTQAxEY7ijT0l6tCEPfrvgXKIwBi/JqiPkiii9+TC
Qq7WdmRIhgGE6MAUj/mFpHE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA+v7aXPT3PiNEKWRqXQ/U
1D+ev5BOBcjlPcrgVrA3eKjTrMz+LsloCCN3FRXK4xX9tymd7kpESRLIy+CdpECs
FXTcF1KEhP7cGJPTW1MtlisV4wEFsiKHQ65PQCWv6PCPlls8Z0N0lEQE56a5TGd0
JzJ7HU8yFHDh5lgpGY0PKAjRR92asQGZy65iUDXm3Z7QtFbZGLUsNIO7UEkVbbEJ
lENknmSXlFejLlGmkA+vm0vXdbye07PNaZL+uEADm0GYXEya7ebm+mcP9zEAVehj
DWfXiXMjALF+CR1zkAuy9+PP2XBjaSyHG3Pac/b4WooVqNYnhbd2BnlwXe6qQ8Zm
k8q0JmvWoTHFZ2MtKkL/f1mFFIxnNapnUtTIDzI6wKBbd72yws3S29Fk0ktrynAA
qPQirDWIjbEc9BKT6ieHwhxQAC7YafiOcTwnF+k9rI9wuNvGCIIjPUtYpXqk+hCR
ZaSf1mJ5KiPY+dZwoEBRiPsRnSC3lWV5RPq/SDUJgnBv4AgRHncNSArluKUWmD8N
tkKhogYYM+xA0tSo/J51QcFqrSUyMj6GbWmCuGuTVUHRa2n2vhfYUAGW+6m36ASe
qDRzkCmcncA3GYDCMJx+8u5hD9Ms4lz2P5NeR/u52pB9aQmQLKF2qsG/yYxoJyqS
zpSipLNtyrDA0Ux+g3Ltd5UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13160600713969075694622347244480358340
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stockholm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stockholm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ericsson'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'worm.verkstad.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1023972382051068755461132321009622890748134325681932318963905199299237224232860340317516745926750804548171929122257075214175700642260080025523175190443034833296312405980178312321433082921200360810775084097463079089425137014397074595361427123370581761211993696385578603657162336076989758584968559563505301215376661698164845571373764799024159486640372488269359572903358280864782505394308577670913299319163089382086073137317673467157976561132044011675511190175905148154307301833671260285360484491494882486385786632140526404026005158254756009422008117640845581395543826552522599450811761814137534789742834565462448182138159065499514619788349928472748129189974041713318132598662609183662059589063449149187481024680357757706447848115021707658071568724916390791234723954377507832650126191377224434647584720084227571918344036088169499885359229344117816224668946791413538048524641358271962932151154997733096401188625250664514348158765536276201530780316964871308004740875210408123205502983376604348192803307795434349950542821444834229038680991220074505999530906465720620521205995178866077480663000965336496361595415354543113546047344258239726823367869567452458231469891837426199717127721156557294482740434728026109426492415285940496345452083093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f61d78f7966f43c7e87ab02f66ce5efa210916f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worm.verkstad.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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