*.mktgcdn.com

- Yext Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:ba:19:c3:a4:01:8c:c5:7f:34:54:b0:23:ff:a6:00 was issued on by DigiCert Inc.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Yext Inc.

Organization: Yext Inc.
Organization unit: Technology
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:ba:19:c3:a4:01:8c:c5:7f:34:54:b0:23:ff:a6:00
Serial Number (int): 19575481717165497043868835011763348992
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fc:7e:3a:10:15:ed:57:89:ad:47:e4:40:db:60:bf:70:25:a0:46:af
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): a5:a3:64:4c:01:e4:c7:56:65:a1:fc:81:69:92:bf:aa:28:c9:ff:01
Fingerprint (sha256): 5d:ee:59:4d:90:5d:9b:50:77:71:52:79:a8:ab:7b:09:71:c0:98:4d:f7:62:61:d2:be:b9:44:bc:1a:0c:2d:16

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl

Check the revocation status for certificate *.mktgcdn.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.mktgcdn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.mktgcdn.com
mktgcdn.com
eccdn.yext.com
locations.key.com
api.yextreviews.com
analytics.yext-static.com
local.tdecu.org
locatorapi.yallst.com
a.cdnmktg.com
agents.allstateinsurancecampaign.com
local.bankonus.net
stores.rue21.com
stores.godiva.com
locations.dennys.com
advisors.bankofthewest.com
stores.macysbackstage.com
locations.huddlehouse.com
locations.boscovs.com
stores.guitarcenter.com
standorte.carglass.de
locations.whataburger.com
columbiabankonline.com
locations.xfinity.com
*.yextdemos.com
locations.massageenvy.com
locations.adp.ca
locations.cititrends.com
stores.sleepnumber.com
stores.bedbathandbeyond.com
stores.bedbathandbeyond.ca
stores.buybuybaby.com
stores.guess.ca
stores.guess.com
stores.finishline.com
stores.christopherandbanks.com
locations.tacobell.com
locations.sonicdrivein.com
residence.xfinity.com
stores.bestbuy.com

Other certificates including the domain name mktgcdn.com

(limited to 100 certificates)
dynm.mktgcdn.com
dynl.mktgcdn.com
ssl918209.cloudflaressl.com
*.mktgcdn.com
ssl918211.cloudflaressl.com
dynl.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
dynm.mktgcdn.com
*.mktgcdn.com
a.mktgcdn.com
ssl918209.cloudflaressl.com
*.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
ssl918210.cloudflaressl.com
*.mktgcdn.com
*.mktgcdn.com
ssl918211.cloudflaressl.com
*.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.mktgcdn.com
dynm.mktgcdn.com
sni.cloudflaressl.com
*.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
sni.cloudflaressl.com
dynl.mktgcdn.com
dynl.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
ssl918211.cloudflaressl.com
*.mktgcdn.com
ssl918210.cloudflaressl.com
*.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
*.mktgcdn.com
a.mktgcdn.com
ssl918211.cloudflaressl.com
dynl.mktgcdn.com
*.mktgcdn.com
dynl.mktgcdn.com
dynm.mktgcdn.com
*.mktgcdn.com
dynm.mktgcdn.com
*.mktgcdn.com
ssl918210.cloudflaressl.com

Certificate

The complete raw certificate details for *.mktgcdn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTCzpFlUMonkhpIIIPOX
+3A1AwCrjW5D22Jss7nYAWHQJUjwMfaI7Gd5q46bfTgHLV3yqPY5LfsdslcqZull
FWDMo7wZ4dKbLd2l5jHySneu6h17ZwtQl9YtjksPALtBazJNlJAxvbA+tw4l8PAG
99ydRDqOEjgFAm1XjXGopVDHGIAs/Mk1UBkzw8nKwBOwIK+t4cNlNxGxGF4qDqFd
6mfW2NFj/BOb4/gAe2Pam/xzUJq9FNgs/OfWAnp+VEHKnfT0C7uX/WF+xG4Do1oj
XetJamiJtEoYIqMgtDsxfGThae+BNUkM61/mkenY8dPopAn83Vxzievl8fIE3tsR
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19575481717165497043868835011763348992
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Yext Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mktgcdn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21358289255686868470706480950440557792878407999979720310693007540378133365728693885391886338155593470544559272533625590552354470256150920245203022677068492384693081835412955637639049459125280916422291779102935670982545595063820403609305952522778074883638613405247031983501843279923372059320628708168890612583597681802371041928471956190065292168144394823443525597075641840456032204187606305168679102337941280244791216603138084468553695090962538289980047887140374532537210821151839952737763627320527367015433748208944665717884746012749629895954066156274885962286431890326901613152083325722236800755281028627963049611761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc7e3a1015ed5789ad47e440db60bf7025a046af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (891 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mktgcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mktgcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eccdn.yext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.key.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.yextreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.yext-static.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tdecu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locatorapi.yallst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.cdnmktg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.allstateinsurancecampaign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.bankonus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.rue21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.godiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.dennys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.bankofthewest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.macysbackstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.huddlehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.boscovs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.guitarcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standorte.carglass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.whataburger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiabankonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yextdemos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.massageenvy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.adp.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.cititrends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.sleepnumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.bedbathandbeyond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.bedbathandbeyond.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.buybuybaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.guess.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.guess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.finishline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.christopherandbanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.tacobell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.sonicdrivein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'residence.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.bestbuy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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