*.nanaimo.ca

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate


This digital certificate with serial number 09:65:82:c2:48:41:92:d2:c1:31:1f:4c:83:e9:a1:4f was issued on by DigiCert Inc .

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

City of Nanaimo

Organization: City of Nanaimo
State / Province: British Columbia
Locality: Nanaimo
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
State / Province: British Columbia
Locality: Nanaimo
Country: CA

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 09:65:82:c2:48:41:92:d2:c1:31:1f:4c:83:e9:a1:4f
Serial Number (int): 12490126050650457169707942590385070415
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 49:ff:17:c6:98:d5:f0:e1:b6:42:db:ac:aa:e8:d9:0a:53:ae:9c:71
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): e0:d4:aa:79:19:f3:9f:4c:7d:a6:6c:f0:3b:4b:68:74:0c:46:53:be
Fingerprint (sha256): a5:3e:71:bd:51:eb:ec:b3:fd:40:54:7b:40:8b:46:cd:c0:78:51:e3:d7:c8:11:ee:96:84:1d:9e:c3:d9:4d:38

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g4.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g4.crl

Check the revocation status for the current certificate on *.nanaimo.ca
4
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nanaimo.ca
nanaimo.ca
ireg.nanaimo.ca
iregtest.nanaimo.ca

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGdDCCBVygAwIBAgIQCWWCwkhBktLBMR9Mg+mhTzANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xNDA3MjMwMDAwMDBaFw0xNzExMjkxMjAwMDBa MGsxCzAJBgNVBAYTAkNBMRkwFwYDVQQIExBCcml0aXNoIENvbHVtYmlhMRAwDgYD VQQHEwdOYW5haW1vMRgwFgYDVQQKEw9DaXR5IG9mIE5hbmFpbW8xFTATBgNVBAMM DCoubmFuYWltby5jYTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMBo f6l0P9ibK8GLXsyTdCrzG7IZojLc+mftehusrbvzqAURhmBCzEDfx0ZKmBKnLfOu W0WNyGxDLglAEIhaBUi83o1vqllTdm160F9s1CZ2EK+l+cH4qjc7l0oMNH4tX4bR XQpqjX4oTltn4fZFk80D8UvD58d8J14kbreDwPh/OTTG8QqKM3Rsr28CGkPAnYAZ /UwUg+NXWmgCdxGmXWfJx0TyTVF8ulPBxm6HZeHDxOAE2m1IcWYpXx8pDnMV4Pf+ ibc+SOgHVLoZw1V3QkkxR117aNH0Helv6Dorv9FCFRmULTsSR7uHVlQdXrcJa2lg NX9AmSINiNrEi9tpqOSaJJa0dCkGc9KbrMO8caCrPrMc2UBv6oyTJjxLdXFqapI3 p5JOQQrOcqc8hoH/rCMqGKx8mr/nceUtKKY/bKv4HZEaB6iPWBVDgSJjKr5mK9aX /v8nbTr+MplcQ/TmOCHG/NEzzuvqLL4SJJKVFgsJ7fnJKxnxmNPY8s14R+usc6+P BQU82Ryo+Zu8EMDK1HI4ld3cQ70UHRO69khaWAjTdpEQeZMzZbeAO4GzcUoYYAtY M3qfPCVn8/kNq/e/q/2plS8HEkGSMBcQsWtALAuv5H0qMzrjs5cxu0Mw+yMJQWF1 Ndq3dUi0Y4KxedP70uVHQ1wfUsFaKTLodWzp+tZXAgMBAAGjggINMIICCTAfBgNV HSMEGDAWgBRRaP+QrwIHdTzM2WVkYqISuFlyOzAdBgNVHQ4EFgQUSf8XxpjV8OG2 QtusqujZClOunHEwSQYDVR0RBEIwQIIMKi5uYW5haW1vLmNhggpuYW5haW1vLmNh gg9pcmVnLm5hbmFpbW8uY2GCE2lyZWd0ZXN0Lm5hbmFpbW8uY2EwDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8EbjBs MDSgMqAwhi5odHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXIt ZzQuY3JsMDSgMqAwhi5odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1oYS1z ZXJ2ZXItZzQuY3JsMEIGA1UdIAQ7MDkwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUH AgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYMGCCsGAQUFBwEBBHcw dTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME0GCCsGAQUF BzAChkFodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEySGln aEFzc3VyYW5jZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEB CwUAA4IBAQCFcagDWdl4OfICIcZU8KfI3eHbzPo86FiaQXAGn7VZ7BoCXuNeXchs aTma0WwF+CiBUbPWC96nuxwz3AuRLsZBpwC5vYSrHNG6amLmUPZFODvM3EN9PrAN XbcRFYea6ckrNhVbURksHZbaGSAXAk+0oJscnGsjJtP/cZO98eK5O2S3y4/B69+H 3Gli6uc8Mjdovnk4LmMldi4m4AUJA2Hc4+/MD2Y/5qm9L8/YTsg9Eva6ATO8DDqE 9ddkUgYEl1yCexsPZvbupE/gZxJWPxXSzDCcFAvTrkWPT2DwGbkyXfnacfVz91o9 yOgNPB8TmDBMQGWZBRJFy8emDz+fuWGl -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwGh/qXQ/2JsrwYtezJN0 KvMbshmiMtz6Z+16G6ytu/OoBRGGYELMQN/HRkqYEqct865bRY3IbEMuCUAQiFoF SLzejW+qWVN2bXrQX2zUJnYQr6X5wfiqNzuXSgw0fi1fhtFdCmqNfihOW2fh9kWT zQPxS8Pnx3wnXiRut4PA+H85NMbxCoozdGyvbwIaQ8CdgBn9TBSD41daaAJ3EaZd Z8nHRPJNUXy6U8HGbodl4cPE4ATabUhxZilfHykOcxXg9/6Jtz5I6AdUuhnDVXdC STFHXXto0fQd6W/oOiu/0UIVGZQtOxJHu4dWVB1etwlraWA1f0CZIg2I2sSL22mo 5JoklrR0KQZz0pusw7xxoKs+sxzZQG/qjJMmPEt1cWpqkjenkk5BCs5ypzyGgf+s IyoYrHyav+dx5S0opj9sq/gdkRoHqI9YFUOBImMqvmYr1pf+/ydtOv4ymVxD9OY4 Icb80TPO6+osvhIkkpUWCwnt+ckrGfGY09jyzXhH66xzr48FBTzZHKj5m7wQwMrU cjiV3dxDvRQdE7r2SFpYCNN2kRB5kzNlt4A7gbNxShhgC1gzep88JWfz+Q2r97+r /amVLwcSQZIwFxCxa0AsC6/kfSozOuOzlzG7QzD7IwlBYXU12rd1SLRjgrF50/vS 5UdDXB9SwVopMuh1bOn61lcCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12490126050650457169707942590385070415 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-29 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nanaimo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'City of Nanaimo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nanaimo.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 784956963472320290737372014389413511500997138588203834804687779105428046366297607638313128457358333440131542241113974292123537820789436151671282561226236136553141513905417607718682728944418138399583939246295375998841794106277224002851495542372917288840750080030744452819279460142607490995452219331449823359611170179640674749661814100246178034881979353316135661549938213578606753912516104751607707996049825132186631190718339454668794140235220852184381259066725261344249377933688665825989638023388009559291851682994667296478732703575431690742615983987511902840273383334614098853789997006007763710708721495872240197164165180887336400695515104064280062272089424299144389926262779987052689249493359958202476574861535349833742526542984654470968946941162298954936933811231979562390416935537595766775855691133687559435419610340146879915383974594942528861091488622818913094787892302395379816395513887357818996069723865848421741695051223374130140172149455801171511912188672342193564941892703665007834226934571986001388245430440846815971270032718132949199671686935861621183840274721946544415534720986341364513620751127728594265893913240252534123631057908571134315619908624897554454861116337997135270690346261915369795158653474627552369109030487 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 49ff17c698d5f0e1b642dbacaae8d90a53ae9c71 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanaimo.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanaimo.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ireg.nanaimo.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iregtest.nanaimo.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008571a80359d97839f20221c654f0a7c8dde1dbccfa3ce8589a4170069fb559ec1a025ee35e5dc86c69399ad16c05f8288151b3d60bdea7bb1c33dc0b912ec641a700b9bd84ab1cd1ba6a62e650f645383bccdc437d3eb00d5db71115879ae9c92b36155b51192c1d96da192017024fb4a09b1c9c6b2326d3ff7193bdf1e2b93b64b7cb8fc1ebdf87dc6962eae73c323768be79382e6325762e26e005090361dce3efcc0f663fe6a9bd2fcfd84ec83d12f6ba0133bc0c3a84f5d764520604975c827b1b0f66f6eea44fe06712563f15d2cc309c140bd3ae458f4f60f019b9325df9da71f573f75a3dc8e80d3c1f1398304c406599051245cbc7a60f3f9fb961a5