imi.kdev.services
- KPMG LLP -
Issued by DigiCert Global CA G2
About this certificate
This digital certificate with serial number 09:c3:32:e4:c9:77:aa:9d:65:56:9d:0e:4a:66:a1:b9 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
KPMG LLP
Organization:
KPMG LLP
Organization unit: IT
Organization unit: IT
Locality:
London
Country: GB
Country: GB
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:c3:32:e4:c9:77:aa:9d:65:56:9d:0e:4a:66:a1:b9Serial Number (int): 12976582096330924931855482645394137529
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 98:c3:de:10:24:5b:31:48:6c:c6:69:d9:a1:fd:96:41:60:c3:e9:ad
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20
Fingerprint (sha1): 57:b5:f8:be:73:d3:83:48:b4:d9:b2:92:15:a0:38:66:38:ae:84:01
Fingerprint (sha256): 4f:2e:f2:1b:70:8a:d4:67:10:5c:b0:5d:cf:fb:04:f1:2d:49:d1:44:18:b7:fd:f9:e3:58:ee:a9:69:bd:fa:c8
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl
Check the revocation status for certificate imi.kdev.services
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for imi.kdev.services
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
imi.kdev.services
Other certificates including the domain name kdev.services
(limited to 100 certificates)
imi.kdev.services
imi-uatreporting.kdev.services
fts004.kdev.services
fed01.kaccess.kdev.services
sites.kpmg.kdev.services
kpmgcollab.kpmg.kdev.services
apicp001.kdev.services
officewebapps.kpmg.kdev.services
kpmgcollab.kpmg.kdev.services
imi.kdev.services
fed02.kaccess.kdev.services
dp001.kdev.services
search.kpmg.kdev.services
tokensigning.kaccess.kdev.services
kpmgcollab.kpmg.kdev.services
sites.kpmg.kdev.services
collab.kpmg.kdev.services
sbsites.kpmg.kdev.services
fed01.kaccess.kdev.services
sites.kpmg.kdev.services
search.kpmg.kdev.services
tokensigning02.kaccess.kdev.services
collab.kpmg.kdev.services
tokendecrypting.kaccess.kdev.services
kpmgcollab.kpmg.kdev.services
officewebapps.kpmg.kdev.services
officewebapps.kpmg.kdev.services
fed02.kaccess.kdev.services
search.kpmg.kdev.services
kpmgcollab.kpmg.kdev.services
officewebapps.kpmg.kdev.services
search.kpmg.kdev.services
tokendecrypting02.kaccess.kdev.services
collab.kpmg.kdev.services
tokensigning.kacess.kdev.services
me-ema.staging.kpmg.com
me-staging.kpmg.com
collab.kpmg.kdev.services
uatdealcom.kdev.services
me-ema.staging.kpmg.com
imi-uatreporting.kdev.services
fts004.kdev.services
fed01.kaccess.kdev.services
sites.kpmg.kdev.services
kpmgcollab.kpmg.kdev.services
apicp001.kdev.services
officewebapps.kpmg.kdev.services
kpmgcollab.kpmg.kdev.services
imi.kdev.services
fed02.kaccess.kdev.services
dp001.kdev.services
search.kpmg.kdev.services
tokensigning.kaccess.kdev.services
kpmgcollab.kpmg.kdev.services
sites.kpmg.kdev.services
collab.kpmg.kdev.services
sbsites.kpmg.kdev.services
fed01.kaccess.kdev.services
sites.kpmg.kdev.services
search.kpmg.kdev.services
tokensigning02.kaccess.kdev.services
collab.kpmg.kdev.services
tokendecrypting.kaccess.kdev.services
kpmgcollab.kpmg.kdev.services
officewebapps.kpmg.kdev.services
officewebapps.kpmg.kdev.services
fed02.kaccess.kdev.services
search.kpmg.kdev.services
kpmgcollab.kpmg.kdev.services
officewebapps.kpmg.kdev.services
search.kpmg.kdev.services
tokendecrypting02.kaccess.kdev.services
collab.kpmg.kdev.services
tokensigning.kacess.kdev.services
me-ema.staging.kpmg.com
me-staging.kpmg.com
collab.kpmg.kdev.services
uatdealcom.kdev.services
me-ema.staging.kpmg.com
Certificate
The complete raw certificate details for imi.kdev.services in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIQCcMy5Ml3qp1lVp0OSmahuTANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTgwNzA0MDAwMDAwWhcNMTkwNzA1MTIw MDAwWjBaMQswCQYDVQQGEwJHQjEPMA0GA1UEBxMGTG9uZG9uMREwDwYDVQQKEwhL UE1HIExMUDELMAkGA1UECxMCSVQxGjAYBgNVBAMTEWltaS5rZGV2LnNlcnZpY2Vz MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPug1IsgvoweIA1bo7eb hGF5zjrisIesxSq/S8htO4nCXuiPR9GN9zCHglZp8ISM90hvaw9L69CkfvQjdpnZ a/eCwgm6QoAyz3vw1/nC7NR8lt5fbFj/TaXWtSrB0UM+xn3J8DoHNvpa6C0APd0N D/yQYG9X5RSCMQFffZAu7hS0YxxFeKTh+jv+i3gHwdFbB5hxQAW/z2Gt4Lr0vYUW tkeD9RgR1E/5r9LFxevsOSRuGFExOCQx6EWe8ZzfqehExSg6SzyHgOj25C6gA9Bg G4LOc6cDUrHbyLmS94bD7vtwHZfj5IxucS2sDivKq+MQpZQf5tXtC7JCphjPVfy4 TQIDAQABo4IB7jCCAeowHwYDVR0jBBgwFoAUJG4rLdBqklFRJWkBqppHponnQCAw HQYDVR0OBBYEFJjD3hAkWzFIbMZp2aH9lkFgw+mtMBwGA1UdEQQVMBOCEWltaS5r ZGV2LnNlcnZpY2VzMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwdwYDVR0fBHAwbjA1oDOgMYYvaHR0cDovL2NybDMuZGlnaWNl cnQuY29tL0RpZ2lDZXJ0R2xvYmFsQ0FHMi5jcmwwNaAzoDGGL2h0dHA6Ly9jcmw0 LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbENBRzIuY3JsMEwGA1UdIARFMEMw NwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0 LmNvbS9DUFMwCAYGZ4EMAQICMHQGCCsGAQUFBwEBBGgwZjAkBggrBgEFBQcwAYYY aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMD4GCCsGAQUFBzAChjJodHRwOi8vY2Fj ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxDQUcyLmNydDAJBgNVHRME AjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5x+fQ tACkgf0SSHpKDEHe51iHNV8kxi5fd5bYCPeDjyrlqq2ahvJb+JkypyW9IQFvRkjR DPY6fLD/DLMFpZ+o30zeBeb3Qm+Fy8JOagYO4zRV/VqMx52O4A9wW0CJcY5FDNCO AglVyZZtxksW97HOwhd4mI08I079akQKc0VVEIBqtsVxZ8WbJtwgjvhVb6r4YGIH 4AhvPWrEgGSIptZqtT+GsVrR8pt+uJGD72thV/bUJ9cinCIx+PsoqLTJZ7KlwkEH 7jDzotPZreu0oczk1CHH1eDsFfe2u6uOF0Irv+hWApT9MToJX4YnG6IV2MR1Jgko DZHzOnSARSFs2ESY -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPug1IsgvoweIA1bo7eb hGF5zjrisIesxSq/S8htO4nCXuiPR9GN9zCHglZp8ISM90hvaw9L69CkfvQjdpnZ a/eCwgm6QoAyz3vw1/nC7NR8lt5fbFj/TaXWtSrB0UM+xn3J8DoHNvpa6C0APd0N D/yQYG9X5RSCMQFffZAu7hS0YxxFeKTh+jv+i3gHwdFbB5hxQAW/z2Gt4Lr0vYUW tkeD9RgR1E/5r9LFxevsOSRuGFExOCQx6EWe8ZzfqehExSg6SzyHgOj25C6gA9Bg G4LOc6cDUrHbyLmS94bD7vtwHZfj5IxucS2sDivKq+MQpZQf5tXtC7JCphjPVfy4 TQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12976582096330924931855482645394137529 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-05 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KPMG LLP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'imi.kdev.services' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22342024185345045897652291808137444422253281190342601589618073697363190301739568270120823085858480354247063416396164039643375949456308212163461782394828466778894711999656804966730168505132742245268957943887062791300724638412042089957545138680158427649450378932206209005283446253496136356882895661943935570204317045010963555262213812472882644312697712376997344521297722971558875603226338829475776816120609407163006987002487362087209848763731935019739322156479049919660328303492206929973721934846193121674869512760934703449660801274176199703365900703570618397105802856371723410432580676640932889052532434892091285092429 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 98c3de10245b31486cc669d9a1fd964160c3e9ad . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imi.kdev.services' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0039c7e7d0b400a481fd12487a4a0c41dee75887355f24c62e5f7796d808f7838f2ae5aaad9a86f25bf89932a725bd21016f4648d10cf63a7cb0ff0cb305a59fa8df4cde05e6f7426f85cbc24e6a060ee33455fd5a8cc79d8ee00f705b4089718e450cd08e020955c9966dc64b16f7b1cec21778988d3c234efd6a440a73455510806ab6c57167c59b26dc208ef8556faaf8606207e0086f3d6ac4806488a6d66ab53f86b15ad1f29b7eb89183ef6b6157f6d427d7229c2231f8fb28a8b4c967b2a5c24107ee30f3a2d3d9adebb4a1cce4d421c7d5e0ec15f7b6bbab8e17422bbfe8560294fd313a095f86271ba215d8c4752609280d91f33a748045216cd84498