acquia-sites.com

Issued by DigiCert High Assurance CA-3

About this certificate


This digital certificate with serial number 04:57:67:18:e2:72:6b:14:78:6c:b0:85:50:26:1c:b0 was issued on by DigiCert Inc .

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Acquia, Inc.

Organization: Acquia, Inc.
Organization unit: Acquia Hosting
State / Province: Massachusetts
Locality: Burlington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
State / Province: Massachusetts
Locality: Burlington
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 04:57:67:18:e2:72:6b:14:78:6c:b0:85:50:26:1c:b0
Serial Number (int): 5770732869579205393581256686304631984
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 33:d7:8a:b5:27:af:65:57:e3:4a:44:9f:9a:28:e2:9a:d7:6a:ab:d1
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): 16:d9:ca:3a:94:79:fa:cb:d8:9e:39:9b:8b:ef:27:64:eb:71:43:bd
Fingerprint (sha256): 94:bb:ce:b5:5d:a9:35:57:66:97:f8:57:37:07:80:ed:64:e6:17:02:66:fc:b4:94:6a:32:f0:24:b5:43:a6:f1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-g26.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g26.crl

Check the revocation status for the current certificate on acquia-sites.com
91
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

acquia-sites.com
victory.mittromney.com
secure.mittromney.com
www.mittromney.com
mittromney.com
m.mittromney.com
secure.gop.com
collab.net
www.collab.net
bentley.edu
www.bentley.edu
barnard.edu
www.barnard.edu
api.mittromney.com
www.babymed.com
www.housingwire.com
securefroms.bentley.edu
www.utsystem.edu
ssl.marketplace.org
veterancentral.com
www.mywell-being.com
www.givingcomfort.org
givingcomfort.org
www.givingcomfort.com
givingcomfort.com
www.technologyreview.com
www.rita.dot.gov
www.believeinamerica.gov
www.hurleymc.com
www.commerce.gov
www.ntia.doc.gov
ssl.splendidtable.org
ssl.onbeing.org
myvarian.com
junodev.prod.acquia-sites.com
junostg.prod.acquia-sites.com
www.littler.com
littler.prod.acquia-sites.com
www.legislationsurveys.com
hurleymc.com
www.americorpsconnect.org
cohnreznick.com
www.cohnreznick.com
www.sharedvalue.org
www.nokiasiemensnetworks.com
industryanalyst.nokiasiemensnetworks.com
info.nokiasiemensnetworks.com
iptv.nokiasiemensnetworks.com
sdm.partners.nokiasiemensnetworks.com
training-wiki.nokiasiemensnetworks.com
twc.nokiasiemensnetworks.com
br.nokiasiemensnetworks.com
lat.nokiasiemensnetworks.com
inside.nokiasiemensnetworks.com
welcome-to.nokiasiemensnetworks.com
events.nokiasiemensnetworks.com
www.sfmta.com
beta.sfmta.com
dartmouth.edu
psgw001.saxotech.com
pharmabiotech.mckessonspecialtyhealth.com
www.rocketsoftware.com
healthyessentials.com
www.healthyessentials.com
beta.marketplace.org
www.nsn.com
nsn.com
sharedvalue.org
samsungmediasolutions.com
www.samsungmediasolutions.com
industryanalyst.nsn.com
www.mitre.org
mitre.org
account.universalmusic.com
www.jchs.edu
coloradoc2.prod.acquia-sites.com
coloradoc2stg.prod.acquia-sites.com
coloradoc2dev.prod.acquia-sites.com
nutrientsforlife.org
www.hunterpreferred.com
dev.hunterpreferred.com
stage.hunterpreferred.com
www.nutrientsforlife.org
inside.nsn.com
www.fleetlocate.com
spireonstg.fleetlocate.com
dev.fleetlocate.com
insidecarilion.org
partners.ncga.coop
ncga.coop
ccintranet.prod.acquia-sites.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIP3zCCDsegAwIBAgIQBFdnGOJyaxR4bLCFUCYcsDANBgkqhkiG9w0BAQUFADBm MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSUwIwYDVQQDExxEaWdpQ2VydCBIaWdoIEFzc3VyYW5j ZSBDQS0zMB4XDTEzMDQyNjAwMDAwMFoXDTE0MDcwMjEyMDAwMFowgYUxCzAJBgNV BAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNldHRzMRMwEQYDVQQHEwpCdXJsaW5n dG9uMRUwEwYDVQQKEwxBY3F1aWEsIEluYy4xFzAVBgNVBAsTDkFjcXVpYSBIb3N0 aW5nMRkwFwYDVQQDExBhY3F1aWEtc2l0ZXMuY29tMIICIjANBgkqhkiG9w0BAQEF AAOCAg8AMIICCgKCAgEAu2AUPnBzAryG2kuJRvcaLy7I4Bx628tXHr3emf+MHMKb ERCTi4QQZx10s2LprGjsUjr9xkiL5G9ZcrWfbbregsqtHTZQzBj9+0Qztu+u4sEw foDzfIitaWEZ1gc6WoRpsu8gQiqlHUImLvxq24l84AZUJDtDJTaik+zE93ed63YI qT1Ei0ccPi2pg05tFTYF0nabKnamTwEDqXrAmXq9SFBbKw19dEiDN82oMJ2gHRRy t9gqBk6/ernnLuuPPEok6DZAFqgjSbKPQfJ8EnEmxt0HLMxPXpN3K/HzXalHSU6i fBftfgwn9gm1YXSwFbZoSUz8SOpEdULI+osqcP3FjqE93cloYHYlFLDb7bOe+5na q75SO9z4EOztQcLdt6F5ubOMvOl0BLxusl+Ry8LzqTPbc1GJ1V5eBC0l81fecC26 DWFZBz+9WxXVgqVY9q9mcibr9HBfThrhyacytV15djMO2Lf3bLrhHSshiTt6tndN pzAZbxbIpWuvaEkCCX9uS61QiokbIDNli5PQqUCc/nlBuoGfxTE06tGD+ZBg1Wat 3hxqJHsw1lixbarb6cLNa2KZPaJxN7dUNIF4jTw/rzP4uDj6cSJyxhNzC4Zl117n wxpkUHdkpo9x5UlrBp6SQ3v28WhzSQ2YHuu9t0aGjUByVUXTc0q2PentPXxia/cC AwEAAaOCC2cwggtjMB8GA1UdIwQYMBaAFFDqc4nbKfsQj57lASDU3nmZSIP3MB0G A1UdDgQWBBQz14q1J69lV+NKRJ+aKOKa12qr0TCCCDoGA1UdEQSCCDEwgggtghBh Y3F1aWEtc2l0ZXMuY29tghZ2aWN0b3J5Lm1pdHRyb21uZXkuY29tghVzZWN1cmUu bWl0dHJvbW5leS5jb22CEnd3dy5taXR0cm9tbmV5LmNvbYIObWl0dHJvbW5leS5j b22CEG0ubWl0dHJvbW5leS5jb22CDnNlY3VyZS5nb3AuY29tggpjb2xsYWIubmV0 gg53d3cuY29sbGFiLm5ldIILYmVudGxleS5lZHWCD3d3dy5iZW50bGV5LmVkdYIL YmFybmFyZC5lZHWCD3d3dy5iYXJuYXJkLmVkdYISYXBpLm1pdHRyb21uZXkuY29t gg93d3cuYmFieW1lZC5jb22CE3d3dy5ob3VzaW5nd2lyZS5jb22CF3NlY3VyZWZy b21zLmJlbnRsZXkuZWR1ghB3d3cudXRzeXN0ZW0uZWR1ghNzc2wubWFya2V0cGxh Y2Uub3JnghJ2ZXRlcmFuY2VudHJhbC5jb22CFHd3dy5teXdlbGwtYmVpbmcuY29t ghV3d3cuZ2l2aW5nY29tZm9ydC5vcmeCEWdpdmluZ2NvbWZvcnQub3JnghV3d3cu Z2l2aW5nY29tZm9ydC5jb22CEWdpdmluZ2NvbWZvcnQuY29tghh3d3cudGVjaG5v bG9neXJldmlldy5jb22CEHd3dy5yaXRhLmRvdC5nb3aCGHd3dy5iZWxpZXZlaW5h bWVyaWNhLmdvdoIQd3d3Lmh1cmxleW1jLmNvbYIQd3d3LmNvbW1lcmNlLmdvdoIQ d3d3Lm50aWEuZG9jLmdvdoIVc3NsLnNwbGVuZGlkdGFibGUub3Jngg9zc2wub25i ZWluZy5vcmeCDG15dmFyaWFuLmNvbYIdanVub2Rldi5wcm9kLmFjcXVpYS1zaXRl cy5jb22CHWp1bm9zdGcucHJvZC5hY3F1aWEtc2l0ZXMuY29tgg93d3cubGl0dGxl ci5jb22CHWxpdHRsZXIucHJvZC5hY3F1aWEtc2l0ZXMuY29tghp3d3cubGVnaXNs YXRpb25zdXJ2ZXlzLmNvbYIMaHVybGV5bWMuY29tghl3d3cuYW1lcmljb3Jwc2Nv bm5lY3Qub3Jngg9jb2hucmV6bmljay5jb22CE3d3dy5jb2hucmV6bmljay5jb22C E3d3dy5zaGFyZWR2YWx1ZS5vcmeCHHd3dy5ub2tpYXNpZW1lbnNuZXR3b3Jrcy5j b22CKGluZHVzdHJ5YW5hbHlzdC5ub2tpYXNpZW1lbnNuZXR3b3Jrcy5jb22CHWlu Zm8ubm9raWFzaWVtZW5zbmV0d29ya3MuY29tgh1pcHR2Lm5va2lhc2llbWVuc25l dHdvcmtzLmNvbYIlc2RtLnBhcnRuZXJzLm5va2lhc2llbWVuc25ldHdvcmtzLmNv bYImdHJhaW5pbmctd2lraS5ub2tpYXNpZW1lbnNuZXR3b3Jrcy5jb22CHHR3Yy5u b2tpYXNpZW1lbnNuZXR3b3Jrcy5jb22CG2JyLm5va2lhc2llbWVuc25ldHdvcmtz LmNvbYIcbGF0Lm5va2lhc2llbWVuc25ldHdvcmtzLmNvbYIfaW5zaWRlLm5va2lh c2llbWVuc25ldHdvcmtzLmNvbYIjd2VsY29tZS10by5ub2tpYXNpZW1lbnNuZXR3 b3Jrcy5jb22CH2V2ZW50cy5ub2tpYXNpZW1lbnNuZXR3b3Jrcy5jb22CDXd3dy5z Zm10YS5jb22CDmJldGEuc2ZtdGEuY29tgg1kYXJ0bW91dGguZWR1ghRwc2d3MDAx LnNheG90ZWNoLmNvbYIpcGhhcm1hYmlvdGVjaC5tY2tlc3NvbnNwZWNpYWx0eWhl YWx0aC5jb22CFnd3dy5yb2NrZXRzb2Z0d2FyZS5jb22CFWhlYWx0aHllc3NlbnRp YWxzLmNvbYIZd3d3LmhlYWx0aHllc3NlbnRpYWxzLmNvbYIUYmV0YS5tYXJrZXRw bGFjZS5vcmeCC3d3dy5uc24uY29tggduc24uY29tgg9zaGFyZWR2YWx1ZS5vcmeC GXNhbXN1bmdtZWRpYXNvbHV0aW9ucy5jb22CHXd3dy5zYW1zdW5nbWVkaWFzb2x1 dGlvbnMuY29tghdpbmR1c3RyeWFuYWx5c3QubnNuLmNvbYINd3d3Lm1pdHJlLm9y Z4IJbWl0cmUub3JnghphY2NvdW50LnVuaXZlcnNhbG11c2ljLmNvbYIMd3d3Lmpj aHMuZWR1giBjb2xvcmFkb2MyLnByb2QuYWNxdWlhLXNpdGVzLmNvbYIjY29sb3Jh ZG9jMnN0Zy5wcm9kLmFjcXVpYS1zaXRlcy5jb22CI2NvbG9yYWRvYzJkZXYucHJv ZC5hY3F1aWEtc2l0ZXMuY29tghRudXRyaWVudHNmb3JsaWZlLm9yZ4IXd3d3Lmh1 bnRlcnByZWZlcnJlZC5jb22CF2Rldi5odW50ZXJwcmVmZXJyZWQuY29tghlzdGFn ZS5odW50ZXJwcmVmZXJyZWQuY29tghh3d3cubnV0cmllbnRzZm9ybGlmZS5vcmeC Dmluc2lkZS5uc24uY29tghN3d3cuZmxlZXRsb2NhdGUuY29tghpzcGlyZW9uc3Rn LmZsZWV0bG9jYXRlLmNvbYITZGV2LmZsZWV0bG9jYXRlLmNvbYISaW5zaWRlY2Fy aWxpb24ub3JnghJwYXJ0bmVycy5uY2dhLmNvb3CCCW5jZ2EuY29vcIIgY2NpbnRy YW5ldC5wcm9kLmFjcXVpYS1zaXRlcy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBhBgNVHR8EWjBYMCqgKKAmhiRodHRw Oi8vY3JsMy5kaWdpY2VydC5jb20vY2EzLWcyNi5jcmwwKqAooCaGJGh0dHA6Ly9j cmw0LmRpZ2ljZXJ0LmNvbS9jYTMtZzI2LmNybDCCAcQGA1UdIASCAbswggG3MIIB swYJYIZIAYb9bAEBMIIBpDA6BggrBgEFBQcCARYuaHR0cDovL3d3dy5kaWdpY2Vy dC5jb20vc3NsLWNwcy1yZXBvc2l0b3J5Lmh0bTCCAWQGCCsGAQUFBwICMIIBVh6C AVIAQQBuAHkAIAB1AHMAZQAgAG8AZgAgAHQAaABpAHMAIABDAGUAcgB0AGkAZgBp AGMAYQB0AGUAIABjAG8AbgBzAHQAaQB0AHUAdABlAHMAIABhAGMAYwBlAHAAdABh AG4AYwBlACAAbwBmACAAdABoAGUAIABEAGkAZwBpAEMAZQByAHQAIABDAFAALwBD AFAAUwAgAGEAbgBkACAAdABoAGUAIABSAGUAbAB5AGkAbgBnACAAUABhAHIAdAB5 ACAAQQBnAHIAZQBlAG0AZQBuAHQAIAB3AGgAaQBjAGgAIABsAGkAbQBpAHQAIABs AGkAYQBiAGkAbABpAHQAeQAgAGEAbgBkACAAYQByAGUAIABpAG4AYwBvAHIAcABv AHIAYQB0AGUAZAAgAGgAZQByAGUAaQBuACAAYgB5ACAAcgBlAGYAZQByAGUAbgBj AGUALjB7BggrBgEFBQcBAQRvMG0wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRp Z2ljZXJ0LmNvbTBFBggrBgEFBQcwAoY5aHR0cDovL2NhY2VydHMuZGlnaWNlcnQu Y29tL0RpZ2lDZXJ0SGlnaEFzc3VyYW5jZUNBLTMuY3J0MAwGA1UdEwEB/wQCMAAw DQYJKoZIhvcNAQEFBQADggEBADY4SjEC6kvowZJ32CxbeZFHqgNhza79ynupKn+w 2I0HBMeNCEQnuCRM9SxwoAabYWyzRVic8oy/8BuAAelhmpOQeX7NMaRPeKhCZCrO 5s5xPcoXb3AmzBLlKU88gwPqCa88NWl51RAZtsgHvEk2JcPURAs24vi9Dz6AVoze JDkdveX3m73R1MEc1PPzNzVMQ5ei242LVOgXtaKQZo12ihKnVrtgx/jshSzps5Z6 k/2NcJvXKMM0f4nL09lsYvKhAARcb6zOGXc7EGKzLFRPezmnC0yQxkhcecs7JUdx qsK43B5hPgNrycQgqg94IY7Ge+L1AkJYTJW45T4sK8uZUrY= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu2AUPnBzAryG2kuJRvca Ly7I4Bx628tXHr3emf+MHMKbERCTi4QQZx10s2LprGjsUjr9xkiL5G9ZcrWfbbre gsqtHTZQzBj9+0Qztu+u4sEwfoDzfIitaWEZ1gc6WoRpsu8gQiqlHUImLvxq24l8 4AZUJDtDJTaik+zE93ed63YIqT1Ei0ccPi2pg05tFTYF0nabKnamTwEDqXrAmXq9 SFBbKw19dEiDN82oMJ2gHRRyt9gqBk6/ernnLuuPPEok6DZAFqgjSbKPQfJ8EnEm xt0HLMxPXpN3K/HzXalHSU6ifBftfgwn9gm1YXSwFbZoSUz8SOpEdULI+osqcP3F jqE93cloYHYlFLDb7bOe+5naq75SO9z4EOztQcLdt6F5ubOMvOl0BLxusl+Ry8Lz qTPbc1GJ1V5eBC0l81fecC26DWFZBz+9WxXVgqVY9q9mcibr9HBfThrhyacytV15 djMO2Lf3bLrhHSshiTt6tndNpzAZbxbIpWuvaEkCCX9uS61QiokbIDNli5PQqUCc /nlBuoGfxTE06tGD+ZBg1Wat3hxqJHsw1lixbarb6cLNa2KZPaJxN7dUNIF4jTw/ rzP4uDj6cSJyxhNzC4Zl117nwxpkUHdkpo9x5UlrBp6SQ3v28WhzSQ2YHuu9t0aG jUByVUXTc0q2PentPXxia/cCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5770732869579205393581256686304631984 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-02 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burlington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Hosting' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquia-sites.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764424567436924319363211265831200005524650460368461411872597993596728193733838856547734771983502248880329204288744762214611400585983561794931339949723108642988084827618188108180822180635363914966075361611182354252065493061790474183836602190786933426071647287327955028762845539163823213817763568742553032290260000749216501629653989986150670946160964096617580379311266092010452987517359706989466621307108212935038346125456305066485494952122452078620110029122720595091610041912950063392645234388899755228239175633966423582130509123085627988004572160727471832692616532975449237397217793786917503507367352163523383571253427384324413935209265190346925680998288200487085221719147724649103973066522074898740840675418602211012676328968454725349986543412047953789795091769261545832890484909197737905062390510297182946516130247335096804217280512617832147276859195379177355164528648245097038177193447443893655859861562813051166158533062741776352549095463400601293210859770760145540022208528628132010483901073188929138301907649967484103880042891604900071500167295026652580146612281838011447714281803884010332557508516720858188281297090201549274205275118725082837079257775721483332501393370745910497767758052333110583762116273591749113697567665143 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 33d78ab527af6557e34a449f9a28e29ad76aabd1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2097 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquia-sites.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victory.mittromney.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mittromney.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mittromney.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mittromney.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mittromney.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.gop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collab.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bentley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bentley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnard.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barnard.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.mittromney.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.babymed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.housingwire.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securefroms.bentley.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utsystem.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.marketplace.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veterancentral.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mywell-being.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingcomfort.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingcomfort.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givingcomfort.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingcomfort.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technologyreview.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rita.dot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.believeinamerica.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hurleymc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commerce.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntia.doc.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.splendidtable.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.onbeing.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myvarian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junodev.prod.acquia-sites.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junostg.prod.acquia-sites.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littler.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littler.prod.acquia-sites.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legislationsurveys.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hurleymc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americorpsconnect.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cohnreznick.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cohnreznick.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharedvalue.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nokiasiemensnetworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industryanalyst.nokiasiemensnetworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.nokiasiemensnetworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iptv.nokiasiemensnetworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdm.partners.nokiasiemensnetworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training-wiki.nokiasiemensnetworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twc.nokiasiemensnetworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.nokiasiemensnetworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lat.nokiasiemensnetworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.nokiasiemensnetworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome-to.nokiasiemensnetworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.nokiasiemensnetworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfmta.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sfmta.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dartmouth.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psgw001.saxotech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmabiotech.mckessonspecialtyhealth.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rocketsoftware.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyessentials.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyessentials.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.marketplace.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharedvalue.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsungmediasolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samsungmediasolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industryanalyst.nsn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitre.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitre.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.universalmusic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jchs.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoc2.prod.acquia-sites.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoc2stg.prod.acquia-sites.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoc2dev.prod.acquia-sites.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrientsforlife.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hunterpreferred.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.hunterpreferred.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.hunterpreferred.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutrientsforlife.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.nsn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fleetlocate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spireonstg.fleetlocate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.fleetlocate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidecarilion.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.ncga.coop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncga.coop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccintranet.prod.acquia-sites.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g26.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g26.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (443 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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