dev-portal-lynx.dss.opower.it

- Oracle Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:70:19:69:d4:c9:98:5f:c5:4f:e4:ab:eb:83:8d:fc was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oracle Corporation

Organization: Oracle Corporation
Organization unit: Oracle UGBU AMER-US
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:70:19:69:d4:c9:98:5f:c5:4f:e4:ab:eb:83:8d:fc
Serial Number (int): 17862016638411498069892565573837229564
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 39:b7:cd:95:12:67:6b:37:01:f0:da:db:73:7a:ff:f5:f5:2b:14:a3
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 22:bc:0c:d1:02:9f:42:24:db:d8:79:77:a2:fe:60:6e:f3:0f:17:a2
Fingerprint (sha256): 4c:a2:c3:dc:7b:ca:5f:d0:d7:67:c8:06:5b:eb:84:22:11:7b:74:c8:67:78:e0:6f:3b:61:82:64:6b:02:af:3a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate dev-portal-lynx.dss.opower.it

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev-portal-lynx.dss.opower.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-portal-lynx.dss.opower.it
dev-cat-1005.dss.opower.it
dev-cat-1004.dss.opower.it

Other certificates including the domain name opower.it

(limited to 100 certificates)
proxmox-2301.ca.opower.it
stage-redis-cluster.on.opower.it
sunfire-x7-hadoop-1058.va.opower.it
dev-portal-lynx.dss.opower.it
sunfire-x7-hadoop-1026.va.opower.it
sunfire-hadoop-worker-1002.va.opower.it
stage-portal-demo.dss.opower.it
prod-keysecure-1001.va.opower.it
sunfire-x7-hadoop-1055.va.opower.it
proxmox-2301.ca.opower.it
bi-superset.va.opower.it
prod-omatrix-master-1001.va.opower.it
dss-test-qa.dss.opower.it
*.va.opower.it
dev-nomad-consul.va.opower.it
dev-cat-6001.iad.opower.it
dev-ccb-1001.dss.opower.it
demo.dss.opower.com
proxmox-3201.on.opower.com
dss-util-prod.dss.opower.it
dev-nexus-6001.iad.opower.it
vm-hadoop-idc-gateway-3001.on.opower.it
sunfire-x7-hadoop-1006.va.opower.it
stage-cat-nes-imp-1001.dss.opower.it
stage-rabbitmq-da-1001.va.opower.it
sunfire-x7-hadoop-1064.va.opower.it
chef-provisioner.iad.opower.it
omatrix.va.opower.it
proxmox-3201.on.opower.it
prod-nexus-6001.iad.opower.it
vm-hadoop-kafka-3002.on.opower.it
vault-dev.iad.opower.it
test-consul-lb.aws.opower.it
*.on.opower.it
dev-nexus-6001.iad.opower.it
pen-test-nomad-consul.iad.opower.it
prod-cat-demo-1001.dss.opower.it
dev-hadoop-manager.va.opower.it
spacewalk.iad.opower.it
prod-carte-1001.va.opower.it
prod-smtp-us-east.opower.com
prod-vault-lb.aws.opower.it
sunfire-hadoop-worker-3010.on.opower.it
ei-pge-qa.va.opower.it
sunfire-x7-hadoop-1027.va.opower.it
birdman-prod.iad.opower.it
dss-test-qa.dss.opower.it
prod-rabbitmq-da-1001.va.opower.it
hadoop-dac-nav-6001.hadoopnonprod.vcniadlsprd.oraclevcn.com
sunfire-x7-hadoop-1007.va.opower.it
hadoop-dac-master-6001.hadoopnonprod.vcniadlsprd.oraclevcn.com
sunfire-x7-hadoop-1025.va.opower.it
prod-nomad-consul.va.opower.it
prod-chef-1001.dsspayments.opower.it
ops-jenkins.iad.opower.it
sunfire-x7-hadoop-1005.va.opower.it
stage-portal-coa-imp.dss.opower.it
sunfire-x7-hadoop-1056.va.opower.it
prod-hadoop-manager-2001.ca.opower.it
net-firewall-2151.ca.opower.it
prod-nexus-6001.iad.opower.it
dev-portal-puma.dss.opower.it
sunfire-x7-hadoop-1023.va.opower.it
hdp-dac-dr-master-6002.hadoopnonprod.vcniadlsprd.oraclevcn.com
net-firewall-2121.ca.opower.it
github.va.opower.it
qa-redis-cluster-client.va.opower.it
dev-portal-lynx.dss.opower.it
ssoadm.va.opower.it
docker-test-2001.dss.opower.it
sunfire-hadoop-worker-1008.va.opower.it
prod-nexus-6001.iad.opower.it
stage-nomad-consul.on.opower.it
chef-provisioner.va.opower.it
bi-superset-dev.va.opower.it
sunfire-x7-hadoop-1008.va.opower.it
sunfire-hadoop-worker-1009.va.opower.it
prod-odst-rabbitmq-gold.aws.opower.it
dev-portal-cheetah.dss.opower.it
*.va.opower.it
dev-outbound-redis-1001.va.opower.it
test-wiki.iad.opower.it
prod-chef-1001.dsspayments.opower.it
stage-portal-nes-imp.dss.opower.it
dev-carte-1002.va.opower.it
dev-outbound-redis-client.va.opower.it
dev-portal-puma.dss.opower.it
prod-smtp-canada.opower.com
net-firewall-1222.va.opower.it
stage-cat-demo-1001.dss.opower.it
prod-service-discovery-1001.va.opower.it
dev-portal-panther.dss.opower.it
sunfire-x7-hadoop-1039.va.opower.it
dev-nomad-consul.va.opower.it
dev-spacewalk.iad.opower.it
pssc-hadoop-master-1020.va.opower.it
sunfire-hadoop-worker-3012.on.opower.it
vm-hadoop-kafka-3001.on.opower.it
proxmox-3201.on.opower.it
vault.fra.opower.it

Certificate

The complete raw certificate details for dev-portal-lynx.dss.opower.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxPcoO52QjtL6ZpTlaozJ
wL8hYd5LsDZIW13VteXSm7I2DhgHZPIBeT9ToOJN/f//UO6NSWONq7nZtbxTEjDw
xiuyYqZwc8Mvo/OPWGYFf6sUN5G8o/JL0ayUUPfmEDs7umPE8R0Vrd/C2zA1Efb0
qaCgIbrAmj+rTHy2WLC4FMlZgodMosoW56QOpB5v6PHmvPIhiuFlAdiiI4LWAzGA
adLoWtU9lw7NZsfueD66nZ6Q+0UE73royVWzDp6MhVju+4ard82umzqqSHoOznca
OGRCr1CfxKFk7cDblRw8JbijiXY3YfKWlfwBJkxhpnx27Y4WZEofkyhESkkhaUfF
+2HZ6TaNk5wXt12t/1ldox6A43GwB2Kf7b1a/Alcm4daYChkZAsfB5hoelDBcSiz
fJe7sTe3CpUTB+apRIeDu64guIZg+ZodB31X/r58RRXSXJsuziWX4HBXbse8MKCU
i9khFTunUmpTf90Ximkd3ozBJBoYdEFVDn73p5Qbt5H2VyYxgJYozVpDS45uw+hD
mD0HohRJatSRiNWL+kyURJy5BpXCQ8UUArt6rgiUYm3pQB7beLt/czbBeBj6c9mh
ZY7VbRkl03K1UHQtee0VVmhB9nZgqX4bx/OFC06KMLjAd6Eea8R5ykTIwMmKawRj
N2B3/SrNzPoKZMFFYX4ST0kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17862016638411498069892565573837229564
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle UGBU AMER-US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-portal-lynx.dss.opower.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803548960926773791836834942207635402261093217446777877635515422111196501973862020097184719847540593779164405017259097906085468850913633128926652094446362392928732120907938635956936698604455987214471720286515982830329700566737494106557930953980740672280621600143414634428533712937067854845410083543422191987769590470982946659060584931416327295378594614917017352169663322435292127037755022683945402051335840226179744005944423205881929677099251249668237682798492464461562457273980585172149848532938084846524079100023522880493380763105691315897828305049334872237246024984764523394492718722226274955126474794813920461784867087368707764366055785593451692123729589247380082403760958234963000178437383474109756430192675115960420747605690118154869055315537855298306226321747395503537921580499744896211258752936609532677091339251544161593472397035466506836553646621054787489880168471910293418645442451402020755769283751192853717038797571933111305216288044784393339072645636272453399148926166753275242691518440024943622014420849026327880633384387288401107127284021003431540494858879049188080460098363707352838858078129834337048305757520583433024962760419645599652411243948429450012996314333940941629582765854717045030869015945815889058257325897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39b7cd9512676b3701f0dadb737afff5f52b14a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-portal-lynx.dss.opower.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cat-1005.dss.opower.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cat-1004.dss.opower.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00cecd14f534b073ea91aead62ede0b72f89853aca601b50010943e3e08f968acb93bd713e110dfd33218adc1b4aebb38db2ac9ab2ca27a2d9abe979174d46feb6b77580d14df56998787d753783707d25fd83dd25cec7e61a2467739790abedbd9ad6115825a2b1d6d74f87d24eb72d51c72cad6313d30803048282afdc6b09527423dadccaf9b9a62b075edca2ef79d1fc1ad907e5ec6e155adff564c434561d44a83aec99188b88791d08e9ee9c0ef143ed5f7e9538d9fd3a851582dabde2f2d922e7482710b52c885f4742a38d884d2aa235e0f4b0e84600343726eecdba7f23da7b835af4f61bf677a57c2e9eefe9f2d412c6ea2410f95ef9e4a3a717ede9