*.vng.com.vn

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate


This digital certificate with serial number 02:0c:75:83:1e:f4:99:94:3d:61:98:ac:7d:d4:6d:2d was issued on by DigiCert Inc .

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: stateOrProvinceName is required if organizationName is set

VNG Corporation

Organization: VNG Corporation
Locality: Ho Chi Minh
Country: VN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Locality: Ho Chi Minh
Country: VN

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 02:0c:75:83:1e:f4:99:94:3d:61:98:ac:7d:d4:6d:2d
Serial Number (int): 2723146984265419742657114379939769645
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 98:ae:00:42:9b:5f:48:00:ad:24:b3:28:00:25:c9:8f:20:18:e3:f7
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 3b:e4:64:21:44:13:3d:4a:10:b6:79:47:d5:92:e8:27:2b:c7:0a:aa
Fingerprint (sha256): 06:36:3c:e2:4e:94:cb:7e:49:e2:95:13:de:fb:ed:39:0f:68:cb:dd:5e:ee:d3:3b:da:8a:90:39:1f:e3:17:aa

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl

Check the revocation status for the current certificate on *.vng.com.vn
3
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vng.com.vn
vng.com.vn
click.vng.com.vn

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIQAgx1gx70mZQ9YZisfdRtLTANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xNTEyMjMwMDAwMDBaFw0xOTAzMjIxMjAwMDBa MFQxCzAJBgNVBAYTAlZOMRQwEgYDVQQHEwtIbyBDaGkgTWluaDEYMBYGA1UEChMP Vk5HIENvcnBvcmF0aW9uMRUwEwYDVQQDDAwqLnZuZy5jb20udm4wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCyXnsNmaBTj6uTrRgu5DXn6rjoyM4yOsJf 9x3qQf/o3gm5VyGa+GSR6lbnmRFuZBQTWJCcpFSqvKCvGxrglnqDwlxtHUW7h200 SyW87P99mYJieO/kz9M5G+BFJEfTbXxndLXendk4U9Roc5xiA4F26un9ScQZYg6+ ZSY6QWVMSPKb6iQUIoV3ofTkJ8zGsXYhfpPzVeoqRFYqi4Pds9Gt2/I+krFTkmFT +/dplDc6/zumHQr4AsQ6bdNFMyjvvbtULymh5OXJs7Or0Cc5+RH4/Kl2B/LpMhq/ vbeOYV85h5fUEOjMxg9A3M4XHtqalWjM6KaHc4kkx7bVPerOU7D/99T5uiF7h102 8sVTP9EmlARy+HZqGidTK5rwu/qXnetBd/Rxwdu/HJCqhoCrzQBQ+9JCl6rF+w/8 vCSJBXZdJztvg5cC2RQj2/F14y55NjuaQ/NBWOfcVbbJaLHAKd9AK5RZOnj6I57w RTgp2XEo4Jc/tX+I2ZMbI5LCTKox28BVyFJnB4e4NyJ+F5h1JDeDdQUaMfJ0NfIA R+F5M8HVEGg//veZA2KXQpGRd4/lDgDnb1Vz+UcK1i6rI8sv7dopIrtMHpUZOMU4 5cc0RvvSYpcW6woCnrgQ0yo2Xwh4tfKLS9F+S5W9hEVObL/eOIh+/EDe5441jWR8 KFWaDfbLJQIDAQABo4ICAzCCAf8wHwYDVR0jBBgwFoAUUWj/kK8CB3U8zNllZGKi ErhZcjswHQYDVR0OBBYEFJiuAEKbX0gArSSzKAAlyY8gGOP3MDUGA1UdEQQuMCyC DCoudm5nLmNvbS52boIKdm5nLmNvbS52boIQY2xpY2sudm5nLmNvbS52bjAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHUGA1Ud HwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zaGEyLWhhLXNl cnZlci1nNS5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zaGEy LWhhLXNlcnZlci1nNS5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggr BgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIw gYMGCCsGAQUFBwEBBHcwdTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNl cnQuY29tME0GCCsGAQUFBzAChkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20v RGlnaUNlcnRTSEEySGlnaEFzc3VyYW5jZVNlcnZlckNBLmNydDAMBgNVHRMBAf8E AjAAMA0GCSqGSIb3DQEBCwUAA4IBAQAIsUDzkHwMI2Yk9s3Ef9b9K0SL1H5bJa8o ZxI8EpZZdlQryyImySK8r6AKCHtfxkVxpKQp6rWzoaexAtEEz9AUERw+tfiB+yGM xPI6tXO+kVErMZfAxuGQIugoFctgnnDXfI522AQ/EIawFtFFkvYXquKr+h8cx/bB aaad008aC7GROcYolQK74WFddoUIWXgXfz2qBGmfA6WNqqKa2LM7Q8eY3NgN/SOp 7LkcL5IrZ8/phxYYPAJwJ+3cSunUJ1D8RhqKOKOqHafoqOf0MmlPsjrjSj5AUsBG yo5dMSLF5UxcNpxplq5/7Ytr8yM93Q0Sod3HormaltusCZr/qtpz -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsl57DZmgU4+rk60YLuQ1 5+q46MjOMjrCX/cd6kH/6N4JuVchmvhkkepW55kRbmQUE1iQnKRUqrygrxsa4JZ6 g8JcbR1Fu4dtNEslvOz/fZmCYnjv5M/TORvgRSRH0218Z3S13p3ZOFPUaHOcYgOB durp/UnEGWIOvmUmOkFlTEjym+okFCKFd6H05CfMxrF2IX6T81XqKkRWKouD3bPR rdvyPpKxU5JhU/v3aZQ3Ov87ph0K+ALEOm3TRTMo7727VC8poeTlybOzq9AnOfkR +Pypdgfy6TIav723jmFfOYeX1BDozMYPQNzOFx7ampVozOimh3OJJMe21T3qzlOw //fU+bohe4ddNvLFUz/RJpQEcvh2ahonUyua8Lv6l53rQXf0ccHbvxyQqoaAq80A UPvSQpeqxfsP/LwkiQV2XSc7b4OXAtkUI9vxdeMueTY7mkPzQVjn3FW2yWixwCnf QCuUWTp4+iOe8EU4KdlxKOCXP7V/iNmTGyOSwkyqMdvAVchSZweHuDcifheYdSQ3 g3UFGjHydDXyAEfheTPB1RBoP/73mQNil0KRkXeP5Q4A529Vc/lHCtYuqyPLL+3a KSK7TB6VGTjFOOXHNEb70mKXFusKAp64ENMqNl8IeLXyi0vRfkuVvYRFTmy/3jiI fvxA3ueONY1kfChVmg32yyUCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2723146984265419742657114379939769645 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-22 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ho Chi Minh' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VNG Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vng.com.vn' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 727682298523566634863594179910164319320818847712486939212934868257363734967356210830095990545753244302073853291766127284403527690768724416794724267306284554412384135037701660468838711236660791654415826050442761630672216129755475429622075468045404454020027943116354957578308925273327289330084538080830809733893266009029166119424915302604599521337724536655196102025642716440381042425891897562188845965048157694048361024572667026017928890058114283959646718055329905907341545994461072406754722892064778533102180953717673590063458224113145578644031907413741835534169461157286291409562630511113584722860342594769165759201439593715265602055063927665994624613002571952405866627504790557968486999388892770956523060058965300525000284183577343168673394561194291093607443035491408486317622310780201032934810197586541771811560794218374517690818580899599592668359022516718173606599402081558529040089131998422760966103892663219055249010320288787039905455816349314633960885675534633922032518748506796763693185955723531893571707985130801983684921285415950117933953664460394890537854006707102730245302817153670196941320180742145279416119878136334932470837726916332298967088540187155396759483044770284453400507583273603797978147068636764034335237393189 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 98ae00429b5f4800ad24b3280025c98f2018e3f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vng.com.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vng.com.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click.vng.com.vn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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