ww1.vin65.com

- WD Canada Ecommerce, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 01:9a:05:f5:92:eb:f1:f3:14:3a:b9:9e:0b:88:c7:eb was issued on by DigiCert Inc.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

WD Canada Ecommerce, Inc.

Organization: WD Canada Ecommerce, Inc.
State / Province: British Columbia
Locality: Vancouver
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:9a:05:f5:92:eb:f1:f3:14:3a:b9:9e:0b:88:c7:eb
Serial Number (int): 2128962580417165156677014553153292267
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 40:a8:0a:e1:14:42:60:32:6d:1c:c0:60:85:64:7d:01:65:31:2c:78
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): e9:bf:a4:e2:21:9f:84:c1:8f:d0:6b:a4:b9:13:33:92:55:1f:5f:b8
Fingerprint (sha256): 58:81:53:ec:9f:13:7e:2f:7e:80:4a:a2:18:a6:82:de:3f:5c:c3:66:c9:c8:ac:a0:79:0b:a0:0c:e2:75:56:98

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl

Check the revocation status for certificate ww1.vin65.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ww1.vin65.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ww1.vin65.com
bc.jacksontriggswinery.com
mobile.lightheartcellars.com
on.jacksontriggswinery.com
store.skipstoneranch.com
www.armaninofamilycellars.com
www.cdonatiello.com
www.deavervineyards.com
www.epiphanycellars.com
www.gothicwine.com
www.greatestatesokanagan.com
www.henrisreserve.com
www.kellerestate.com
www.ottimino.com
www.steinbeckwines.com
www.terrienwines.com
www.uncorkedventures.com
www.villacreekstore.com
mobile.calerawine.com
www.calerawine.com
www.wineofthemonthclub.ca
www.lightheartcellars.com
mobile.atwatervineyards.com
retailer.rjscraftwinemaking.com
mobile.wineofthemonthclub.ca
fr.retailer.rjscraftwinemaking.com
mobile.henrisreserve.com
mobile.vineyard511.com
www.vineyard511.com
www.somerstonwineco.com
www.broadsidewines.com
wine.envolvewinery.com
shop.okapiwines.com
mobile.okapiwines.com
mobile.anthemwinery.com
wineshop.vinesofmendoza.com
mobile.vinesofmendoza.com
store.anthemwinery.com
mobile.kenzoestate.com
shop.gloriaferrer.com
www.envolvewinery.com
www.atwatervineyards.com
m.greatestatesokanagan.com
shop.liebcellars.com
www.passaggiowines.com
www.napadistillery.com
store.kenzoestate.com
store.missionhillwinery.com
www.brew65.com
www.domaineserene.com

Other certificates including the domain name vin65.com

(limited to 100 certificates)
ww3.vin65.com
lb3.aus.vin65.com
ww13.vin65.com
ww19.vin65.com
foley.vin65.com
ww9.vin65.com
foley.vin65.com
ww21.vin65.com
ww14.vin65.com
ww11.vin65.com
ww21.vin65.com
ww2.vin65.com
*.vin65.com
ww29.vin65.com
ww13.vin65.com
*.staging.vin65.com
lb2.aus.vin65.com
ww11.vin65.com
ww3.vin65.com
ww16.vin65.com
lb2.aus.vin65.com
ww1.vin65.com
ww27.vin65.com
ww34.vin65.com
ww8.vin65.com
ww13.vin65.com
redirector.vin65.com
ww17.vin65.com
ww16.vin65.com
ww10.vin65.com
lb3.aus.vin65.com
vin65.com
ww6.vin65.com
ww6.vin65.com
www.vin65.com.au
ww21.vin65.com
ww15.vin65.com
vin65.com
ww24.vin65.com
lb2.aus.vin65.com
ww24.vin65.com
ww12.vin65.com
ww23.vin65.com
ww14.vin65.com
ww29.vin65.com
ww15.vin65.com
*.vin65.com
ww18.vin65.com
ww7.vin65.com
lb2.aus.vin65.com
*.vin65.com
ww17.vin65.com
lb3.aus.vin65.com
ww22.vin65.com
www.vin65.com
ww10.vin65.com
ww20.vin65.com
lb3.aus.vin65.com
ww20.vin65.com
ww11.vin65.com
ww24.vin65.com
pos.vin65.com
ww29.vin65.com
ww19.vin65.com
ww5.vin65.com
ww21.vin65.com
ww9.vin65.com
ww22.vin65.com
ww19.vin65.com
ww34.vin65.com
vin65.com
ww2.vin65.com
ww17.vin65.com
ww10.vin65.com
lb2.aus.vin65.com
ww4.vin65.com
ww6.vin65.com
ww25.vin65.com
lb2.aus.vin65.com
ww4.vin65.com
ww19.vin65.com
ww7.vin65.com
generic.vin65.com
ww3.vin65.com
ww1.vin65.com
ww31.vin65.com
ww8.vin65.com
ww26.vin65.com
ww18.vin65.com
ww6.vin65.com
ww1.vin65.com
ww23.vin65.com
ww5.vin65.com
ww13.vin65.com
lb2.aus.vin65.com
ww1.vin65.com
ww4.vin65.com
ww5.vin65.com
ww11.vin65.com
ww29.vin65.com

Certificate

The complete raw certificate details for ww1.vin65.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9snbefWDC6/cTYYzG47
iUOER9PA9UEjnWcJkO+oQsfn7pxA6kRWnPNeQ64wu7FSG6UQA7xHyhAWZKXOelNQ
bARh5sj1Ilz8Tw8Z6e/TUe8z10VMNB4QZA611nOrF2i680hmFr4oqzCru+dIxKtq
fN1ljRmjxL4QW1zhyiZw3ICTT0+fP+ejShuQK/GV+Sl/94TBJEPGA7cvV6XW4vmy
02Euw3PR8V/8R3724h5GQoIpk13XNhVNpAQCVS6Tomt9KpiJyydTZCm4vbew17uF
p1mY5I7JlSnVLzmf9A2mVSRdCg+jgR1cCQwNqvZ1LjPlp/pzbqrQcuzaZe+NWh4b
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2128962580417165156677014553153292267
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vancouver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WD Canada Ecommerce, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ww1.vin65.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22704725464351540164913115248915865629953908357298819066775464031467616304126167325455463114601275831897153392557898008629461545390338611116269278634872413510219586394523306897038541710922214624873321223343818067987391524907244347303586527427941042942560263920551528802385052381686090988658741552862758631944053807515907181103773212523050472025969346979447931336304466897176610423485618541165095166555046911259779032310337186588398229358249756947766230833210778897578764994756390228718276808329313697387704195151140607977344034060153959010043431442813465407024416529626575377881597129384682632610890913846287860112347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40a80ae1144260326d1cc06085647d0165312c78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww1.vin65.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bc.jacksontriggswinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.lightheartcellars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'on.jacksontriggswinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.skipstoneranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.armaninofamilycellars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdonatiello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deavervineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epiphanycellars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gothicwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatestatesokanagan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.henrisreserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kellerestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ottimino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steinbeckwines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terrienwines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uncorkedventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villacreekstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.calerawine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calerawine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wineofthemonthclub.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightheartcellars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.atwatervineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailer.rjscraftwinemaking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.wineofthemonthclub.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.retailer.rjscraftwinemaking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.henrisreserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.vineyard511.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vineyard511.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.somerstonwineco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broadsidewines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wine.envolvewinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.okapiwines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.okapiwines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.anthemwinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineshop.vinesofmendoza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.vinesofmendoza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.anthemwinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.kenzoestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gloriaferrer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.envolvewinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atwatervineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.greatestatesokanagan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.liebcellars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passaggiowines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napadistillery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.kenzoestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.missionhillwinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brew65.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domaineserene.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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