www.ifood.com.br

- IFOOD.COM AGENCIA DE RESTAURANTES ONLINE S.A. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:58:5c:e6:65:13:9a:b4:86:92:e8:ec:7e:6b:58:7f was issued on by DigiCert Inc.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

IFOOD.COM AGENCIA DE RESTAURANTES ONLINE S.A.

Organization: IFOOD.COM AGENCIA DE RESTAURANTES ONLINE S.A.
State / Province: Sao Paulo
Locality: Osasco
Country: BR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:58:5c:e6:65:13:9a:b4:86:92:e8:ec:7e:6b:58:7f
Serial Number (int): 8434174333703160460288069839597820031
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b5:9e:56:92:18:10:85:bd:12:a7:32:32:17:d8:18:bd:01:de:e2:a8
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 51:a1:e8:c8:a8:89:81:81:ae:9b:98:d0:62:1e:6f:35:fc:4d:58:98
Fingerprint (sha256): 5a:db:9c:19:cc:9a:6d:9a:cb:f6:22:b3:41:c3:da:f0:ff:52:28:58:da:d1:59:ac:96:7f:ac:66:e9:9f:65:9a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate www.ifood.com.br

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ifood.com.br

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.comeya.co
*.fstr.rocks
*.ifood-prod.com.br
*.ifood-sandbox.com.br
*.ifood-staging.com.br
*.ifood.com.ar
*.ifood.com.br
*.ifood.com.co
*.ifood.delivery
*.ifoodcorp.com.br
*.ifoodentregadores.com.br
*.ifoodnext.com.br
*.ifoodsystems.com.br
*.mercado.ifood.com.br
*.movilepay.com
*.movilepay.com.br
*.portal.ifood.com.br
*.sindelantal.mx
*.sitemercado.com.br
*.spoonrocket.com.br
ifood-prod.com.br
ifood.com.br
ifoodsystems.com.br
movilepay.com
movilepay.com.br
www.ifood.com.br

Other certificates including the domain name ifood.com.br

(limited to 100 certificates)
paymentwidget.ifood.com.br
entrega.ifood.com.br
akamai-san234.exacttarget.com
*.ifood.com.br
ifood.com.br
qrcode.ifood.com.br
san.cloudinary.com
tls.automattic.com
nexus.internal-services-production.dc-ifood.com
*.news.ifood.com.br
w42.ifood.com.br
e.ifood.com.br
fastdag.se
tls.automattic.com
blog.ifood.com.br
vpn-saopaulo.dc.ifood.com.br
san.cloudinary.com
trabalhoremoto.ifood.com.br
api.homolog.carreiras.ifood.com.br
incapsula.com
pop.ifood.com.br
tls.automattic.com
api.carreiras.ifood.com.br
api.carreiras.ifood.com.br
entrega.ifood.com.br
entrega.ifood.com.br
jenkins-data-platform1.dc.ifood.com.br
lp.news.ifood.com.br
incapsula.com
api.carreiras.ifood.com.br
api.news.ifood.com.br
secmonitor.dc.ifood.com.br
s2-cloudinary-pin.map.fastly.net
*.ifood.com.br
blog-parceiros.ifood.com.br
portal-negocios.ifood.com.br
blog-parceiros.ifood.com.br
news.ifood.com.br
www.ifood.com.br
contrate-beneficios.ifood.com.br
api-homolog.sira.ifood.com.br
homolog.ifood.com.br
news.ifood.com.br
lp.news.ifood.com.br
blog-parceiros.ifood.com.br
contrate-beneficios.ifood.com.br
*.ifood.com.br
s2-cloudinary-pin.map.fastly.net
bqvndd.ifood.com.br
tracker-empresas.ifood.com.br
password.dc.ifood.com.br
*.ifood.com.br
ldap-server-replica-us-east-2.dc.ifood.com.br
www.ifood.com.br
www.ifood.com.br
*.ifood.com.br
nexus.yolo-02-dr.dr-ifood.com
ifood.com.br
jenkins-data-platform1.dc.ifood.com.br
mail.news.ifood.com.br
incapsula.com
s2-cloudinary-pin.map.fastly.net
maminha3.dc.ifood.com.br
s2-san.cloudinary.com
homolog.ifood.com.br
maminha3.dc.ifood.com.br
diogo-santos.com
trabalhoremoto.ifood.com.br
s2-cloudinary-pin.map.fastly.net
*.ifood.com.br
s2-cloudinary-pin.map.fastly.net
incapsula.com
contrate-beneficios.ifood.com.br
tools.dc.ifood.com.br
*.ifood.com.br
developer-deprecated.ifood.com.br
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.ifood.com.br
ldap-server-replica-us-east-2.dc.ifood.com.br
*.ifood.com.br
incapsula.com
incapsula.com
maminha3.dc.ifood.com.br
*.ifood.com.br
san.cloudinary.com
incapsula.com
click.relacionamento-empresas.ifood.com.br
w42.ifood.com.br
rocambole3.dc.ifood.com.br
chef.dc.ifood.com.br
vpn-dev.dc.ifood.com.br
*.ifood.com.br
blog-parceiros.ifood.com.br
ldap-aws-uswest2.dc.ifood.com.br
www.ifood.com.br
developer-deprecated.ifood.com.br
jenkins-financial.dc.ifood.com.br

Certificate

The complete raw certificate details for www.ifood.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEXvFrTRJ+upB/NzFbCj/Fnfj2IYG+
VtPsiMwzo9y8DJ7XhGuCP6UmvHLVASiFPxgJu7wk61UWNmO/0DW3R4zw9A==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8434174333703160460288069839597820031
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sao Paulo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Osasco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IFOOD.COM AGENCIA DE RESTAURANTES ONLINE S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ifood.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00045ef16b4d127eba907f37315b0a3fc59df8f62181be56d3ec88cc33a3dcbc0c9ed7846b823fa526bc72d50128853f1809bbbc24eb55163663bfd035b7478cf0f4
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b59e5692181085bd12a7323217d818bd01dee2a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (508 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comeya.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fstr.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifood-prod.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifood-sandbox.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifood-staging.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifood.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifood.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifood.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifood.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifoodcorp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifoodentregadores.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifoodnext.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifoodsystems.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mercado.ifood.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movilepay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movilepay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal.ifood.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sindelantal.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sitemercado.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spoonrocket.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifood-prod.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifood.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifoodsystems.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movilepay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movilepay.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifood.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00bcb06dec333a692c48aebc0daf20a60d7e983ef59482628a2aa7425cd38466467ec80d5bfc6632aa59075ea757ef8ff3ffcb97f872ffdc838543f19874156741d50b4eb9c0be931b219ed265c6dfa35d3f2b81f0d582ed2d8e29880ffda1cd0ed69e3bab239daea1d66ba1cb64d7169b5d59a108a4b502212df673d1977a62b6eeae0562cbc1228057cdd4a9f16f32bb28b968507f29633222a1ed944a09fbade43d6f051c491a25ddafb3de98946f36f5cb96b50d6a764fa7b2d47352c425110d9b1cc8cac4ac6857ae0eb770b0ccefbdd7eff05cd72cfd00d688a131a222f6e7402c02e8ed7fb29d0905da0b2c75837758e417c2c3ef126eb3a00e1fd42180