nerptsp01.1stcomp.com

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate


This digital certificate with serial number 04:1d:fa:93:12:25:7d:52:7c:5d:47:03:86:4e:0d:55 was issued on by DigiCert Inc .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

FirstComp Insurance Company

Organization: FirstComp Insurance Company
Organization unit: FirstComp Insurance
State / Province: Nebraska
Locality: Omaha
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
State / Province: Nebraska
Locality: Omaha
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1d:fa:93:12:25:7d:52:7c:5d:47:03:86:4e:0d:55
Serial Number (int): 5472570846594028256820947878796987733
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e6:f3:8c:c2:b8:35:ed:b4:d5:6f:6b:ee:53:2d:00:82:11:db:d5:dd
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): e4:6a:f7:41:f6:a4:c8:9f:98:38:3b:c2:94:56:3a:70:0d:74:22:bc
Fingerprint (sha256): 34:2a:29:fb:2e:b7:ea:f9:03:4b:da:ad:77:01:c7:d3:5e:56:79:59:cc:a4:9b:03:a0:c6:e4:ae:02:d8:7e:b0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g3.crl

Check the revocation status for the current certificate on nerptsp01.1stcomp.com
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: nerptsp01.1stcomp.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgIQBB36kxIlfVJ8XUcDhk4NVTANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xNTAyMDUwMDAwMDBaFw0xNjAzMTExMjAwMDBa MIGUMQswCQYDVQQGEwJVUzERMA8GA1UECBMITmVicmFza2ExDjAMBgNVBAcTBU9t YWhhMSQwIgYDVQQKExtGaXJzdENvbXAgSW5zdXJhbmNlIENvbXBhbnkxHDAaBgNV BAsTE0ZpcnN0Q29tcCBJbnN1cmFuY2UxHjAcBgNVBAMTFW5lcnB0c3AwMS4xc3Rj b21wLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAN4/Kixy0Shb ElEVUzFKPbM87ZH9GKDbm3WXKiPDLdVptVBHYRsT1mg7ZeRigr1UXBtl+6L+yMlY ehiW3YXXBRSDe+U3c6zun8PwGCW4YCt2JLSSwvtSrqTuTmhVWize0bDJTseuZehC xUrYOYbf2p6dD67VN7Z8es5HFszJ80EZPU9C9JulrGCQ5JgBl6KMoZ5pjo3k9IQI 0KhjGd7znyYa/6EosTzrt+1l9KnNvLxMoXWiv6pLoX9O1XVjeE8axCWob4dVYvol ofMeVf2PzAv4DtcpZ4BbVUA3bM3HtAllT7NTpWzcM06ADe73BlMQ2yk9se51cug6 wJTmrOuam/5iZbvbhiZWZ1yPuBnxQRiVu+wXUylug3BDeBPpUbjTBobAQNkLbaqX x5dscuRCP85oJYV+tjh6raVBGKBE0xMJYFe7f/rLo40HMnImu0NZHsNspofKrpSc eegK24QDWhrCkBUUUfgbOvdD2REanYUSofQRDhDEpLaSl8d7cabdgP5MCoxe1XQs EYCbiJHxpV9HRLue4yDRFp3+TgmHY5B6X2otYTtYGCsxNffIJGDaUx/ECZPlzjb4 tL4QxJ8DdcOKo+vnxgWiBnytvsTt5tnlmgSmipHfXQOzjDt23XTyvXjQD0pXV2yF g/x+L7CzHW2ui1JRc1BXpn50uaHwml9NAgMBAAGjggHkMIIB4DAfBgNVHSMEGDAW gBRRaP+QrwIHdTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQU5vOMwrg17bTVb2vuUy0A ghHb1d0wIAYDVR0RBBkwF4IVbmVycHRzcDAxLjFzdGNvbXAuY29tMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4w bDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NoYTItaGEtc2VydmVy LWczLmNybDA0oDKgMIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NoYTItaGEt c2VydmVyLWczLmNybDBCBgNVHSAEOzA5MDcGCWCGSAGG/WwBATAqMCgGCCsGAQUF BwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMIGDBggrBgEFBQcBAQR3 MHUwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBNBggrBgEF BQcwAoZBaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkhp Z2hBc3N1cmFuY2VTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0B AQsFAAOCAQEAMrN8QHL9IxX0RUyJLF/1G/sW9H3/KnlvG6iqas3pmMRb4zw8JCgV xrCqy+EfT0x+9O7mz/Ed8lfcPvpafwBruO4+twSTCRsCSmQibGGbwGL9PkFXCmjG cbL0OHHnHFN4y8WbsIhWUfhKhc6+EwFIJ4DCEa7KJ74VNZ+v+6XBeYvzJGPdiT1C 9nzpZz5oy/Fo1/niYi7i63rLTKqbw/Q8YycTAOOJbQ0JgIU5sBEwwNCsBWwDGiTe chPdiMU/MlxBbBTbn3rmiYWQsnPLQPEAhTAkj8Hn/o7MNPDixwwAdBHEJ8vOr7NJ trqACZkrP8+GU0nw0EFYM9ibBP7s30cgNg== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3j8qLHLRKFsSURVTMUo9 szztkf0YoNubdZcqI8Mt1Wm1UEdhGxPWaDtl5GKCvVRcG2X7ov7IyVh6GJbdhdcF FIN75TdzrO6fw/AYJbhgK3YktJLC+1KupO5OaFVaLN7RsMlOx65l6ELFStg5ht/a np0PrtU3tnx6zkcWzMnzQRk9T0L0m6WsYJDkmAGXooyhnmmOjeT0hAjQqGMZ3vOf Jhr/oSixPOu37WX0qc28vEyhdaK/qkuhf07VdWN4TxrEJahvh1Vi+iWh8x5V/Y/M C/gO1ylngFtVQDdszce0CWVPs1OlbNwzToAN7vcGUxDbKT2x7nVy6DrAlOas65qb /mJlu9uGJlZnXI+4GfFBGJW77BdTKW6DcEN4E+lRuNMGhsBA2QttqpfHl2xy5EI/ zmglhX62OHqtpUEYoETTEwlgV7t/+sujjQcycia7Q1kew2ymh8qulJx56ArbhANa GsKQFRRR+Bs690PZERqdhRKh9BEOEMSktpKXx3txpt2A/kwKjF7VdCwRgJuIkfGl X0dEu57jINEWnf5OCYdjkHpfai1hO1gYKzE198gkYNpTH8QJk+XONvi0vhDEnwN1 w4qj6+fGBaIGfK2+xO3m2eWaBKaKkd9dA7OMO3bddPK9eNAPSldXbIWD/H4vsLMd ba6LUlFzUFemfnS5ofCaX00CAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5472570846594028256820947878796987733 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-11 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nebraska' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Omaha' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FirstComp Insurance Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FirstComp Insurance' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nerptsp01.1stcomp.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 906687583334173609926928278753142151308898081981209642267255088784194620468842337685048038227601333718891566704935580051234023298346680136285183571630332088234879845354974954139255583021093702158014369654730750159504874889368502796773824069041416920351070118099834713477196943582884123580781834516321992629185471316331165765244857150346833972669107952340164699344230711788998318387114255448709497613468150494674490357926501097782177098829506110634916261436005514818510440481464195526650297956997839533256631327750136850429777436289359947557697779680689002565983022872852595988364972626085283032217997717140940633143926607629433849478309921848968934692598259880974823244838324945115346112185861274332196561949044670665055961576160556207888455959714492784060917733181857607927699939829204795429867823269339541375967031807506006240680094014384900024371474228520422403608116583735448537596668279776691940597836351436446696565869700149082304425020649345517499939064912655335692879914650425877045536512846001140331737635765809052617340995806961078445058221390462431226793835783636513234117720537990337640632379759486205761922720072720761084290971259742711717481025212249817522767884081811071383648119262105017536923391033730642454047776589 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e6f38cc2b835edb4d56f6bee532d008211dbd5dd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nerptsp01.1stcomp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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