signingsoftware.barclayscorporate.com

- Barclays PLC -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 0f:73:a8:e3:50:17:ad:42:c9:db:61:f5:71:f4:69:9a was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Barclays PLC

Company registration number: 00048839
Organization: Barclays PLC
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:73:a8:e3:50:17:ad:42:c9:db:61:f5:71:f4:69:9a
Serial Number (int): 20538959529898971770464684265541233050
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3d:8e:b1:99:a4:0d:ba:33:09:4a:12:b1:ec:d9:6c:82:3f:37:45:23
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): bc:95:6d:a7:65:76:1a:dc:2b:58:69:67:39:4f:26:24:c2:4c:4e:ff
Fingerprint (sha256): 5f:21:0a:28:b3:b2:ad:bc:67:d6:cb:5c:7b:94:b6:16:c6:e2:fa:fe:7d:4e:d4:61:3d:c4:ff:b2:02:0b:f1:ed

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate signingsoftware.barclayscorporate.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for signingsoftware.barclayscorporate.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

signingsoftware.barclayscorporate.com

Other certificates including the domain name barclayscorporate.com

(limited to 100 certificates)
www-uat.barclayscorporate.com
investmentbank-uat.barclays.com
www.sf.barclayscorporate.com
www.twc.barclayscorporate.com
www.barclayscorporate.com
www-uat.barclayscorporate.com
www.1.barclayscorporate.com
investmentbank-uat.barclays.com
signingsoftware.barclayscorporate.com
www-qa.fxrates.uk.barclays
research.barclayscorporate.com
research-uat.barclayscorporate.com
www-qa.barclayscorporate.com
www-qa.fxrates.uk.barclays
www-qa.barclayscorporate.com
www-uat.barclayscorporate.com
www.barclayscorporate.com
international.barclays.com
www-qa.barclayscorporate.com
signingsoftware.barclayscorporate.com
signingsoftware.barclayscorporate.com
www-uat.barclayscorporate.com
www-uat.barclayscorporate.com
www-qa.fxrates.uk.barclays
www.twc.barclayscorporate.com
research.barclayscorporate.com
www.barclayscorporate.com
www.barclayscorporate.com
www.twc.barclayscorporate.com
www.barclayscorporate.com
www.twc.barclayscorporate.com
www.barclayscorporate.com
research-qa.barclayscorporate.com
investmentbank-uat.barclays.com
research-qa.barclayscorporate.com
investmentbank-uat.barclays.com
www.barclayscorporate.com
international.barclays.com
www.barclayscorporate.com
www.barclayscorporate.com
www.media.barclayscorporate.com
international.barclays.com
www-uat.barclayscorporate.com
www-qa.barclayscorporate.com
www.twc.barclayscorporate.com
international.barclays.com
www.media.barclayscorporate.com
signingsoftware.barclayscorporate.com
www.barclayscorporate.com
ask.barclayscorporate.com
www.sf.barclayscorporate.com
research.barclayscorporate.com
contingency.barclayscorporate.com
www-qa.barclayscorporate.com
www.barclayscorporate.com
international.barclays.com
research-uat.barclayscorporate.com
www-qa.barclayscorporate.com
www-qa.barclayscorporate.com
www.sf.barclayscorporate.com
research-uat.barclayscorporate.com
international.barclays.com
investmentbank-uat.barclays.com
www.sf.barclayscorporate.com
www.barclayscorporate.com
signingsoftware.barclayscorporate.com
www-qa.barclayscorporate.com
www-qa.barclayscorporate.com
investmentbank-uat.barclays.com
international.barclays.com
www-uat.barclayscorporate.com
www-qa.fxrates.uk.barclays
www-uat.barclayscorporate.com
signingsoftware.barclayscorporate.com
www.media.barclayscorporate.com
www.sf.barclayscorporate.com
international.barclays.com
www.barclayscorporate.com
www.1.barclayscorporate.com
investmentbank-uat.barclays.com
international.barclays.com
international.barclays.com
research.barclayscorporate.com
www-qa.barclayscorporate.com
investmentbank-uat.barclays.com
www.barclayscorporate.com
www-uat.barclayscorporate.com
investmentbank-uat.barclays.com
www.barclayscorporate.com
www.twc.barclayscorporate.com
signingsoftware.barclayscorporate.com
www.barclayscorporate.com
www.sf.barclayscorporate.com
www.twc.barclayscorporate.com
contingency.barclayscorporate.com
www.barclayscorporate.com
www-uat.barclayscorporate.com
research.barclayscorporate.com
www.twc.barclayscorporate.com
research-qa.barclayscorporate.com

Certificate

The complete raw certificate details for signingsoftware.barclayscorporate.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHLDCCBhSgAwIBAgIQD3Oo41AXrULJ22H1cfRpmjANBgkqhkiG9w0BAQsFADB1
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk
IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTIzMDQyNzAwMDAwMFoXDTI0MDUwMTIz
NTk1OVowgawxEzARBgsrBgEEAYI3PAIBAxMCR0IxHTAbBgNVBA8MFFByaXZhdGUg
T3JnYW5pemF0aW9uMREwDwYDVQQFEwgwMDA0ODgzOTELMAkGA1UEBhMCR0IxDzAN
BgNVBAcTBkxvbmRvbjEVMBMGA1UEChMMQmFyY2xheXMgUExDMS4wLAYDVQQDEyVz
aWduaW5nc29mdHdhcmUuYmFyY2xheXNjb3Jwb3JhdGUuY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgXkOjJ6Jft6YriZoFfwK87RzZa2xMr2H0jP
V7sQem/bit69oA2wL4jp4ujc2XLg6xnjRCcGsz09czfLDPOTX3XkZpDBersrtcvY
Zt5ZwOiJMNoLZKHgR2VyiMHeTd7zJT9i+BGzNfPGeY7OFh1lLE4AwiuyPdHA+Qfa
Mh3n8/bNxvw4MJCnk4pVqTSvOELWpNd9oAz807COGZR7IM42MSR3I58PkHtJwWjN
7PLIfC96OR2FyAMd4d/p/SHJ1Iqw6Zywm8CcXKOttjfKe5OBREbXxAFE7bDkkMON
62+1ajwajgdo3LGbXaOi8WHNTBtqdXXHDlKTmD4NQ8hvg6axeQIDAQABo4IDfjCC
A3owHwYDVR0jBBgwFoAUPdNQpdagre7zSmAKZdMh1Pj41g8wHQYDVR0OBBYEFD2O
sZmkDbozCUoSsezZbII/N0UjMDAGA1UdEQQpMCeCJXNpZ25pbmdzb2Z0d2FyZS5i
YXJjbGF5c2NvcnBvcmF0ZS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5odHRwOi8vY3Js
My5kaWdpY2VydC5jb20vc2hhMi1ldi1zZXJ2ZXItZzMuY3JsMDSgMqAwhi5odHRw
Oi8vY3JsNC5kaWdpY2VydC5jb20vc2hhMi1ldi1zZXJ2ZXItZzMuY3JsMEoGA1Ud
IARDMEEwCwYJYIZIAYb9bAIBMDIGBWeBDAEBMCkwJwYIKwYBBQUHAgEWG2h0dHA6
Ly93d3cuZGlnaWNlcnQuY29tL0NQUzCBiAYIKwYBBQUHAQEEfDB6MCQGCCsGAQUF
BzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wUgYIKwYBBQUHMAKGRmh0dHA6
Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJFeHRlbmRlZFZhbGlk
YXRpb25TZXJ2ZXJDQS5jcnQwCQYDVR0TBAIwADCCAXwGCisGAQQB1nkCBAIEggFs
BIIBaAFmAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGHwgLk
1gAABAMARzBFAiBCoAKNU1io4LyjDFIksUfihUfetE9S5Cg2hwK7r6mmzwIhALyj
5xa0d+cTRJsJSD9HSJbLpwIgMXyEmFDP1K3FvTf/AHUAc9meiRtMlnigIH1Hneay
xhzQUV5xGSqMa4AQesF3crUAAAGHwgLk5gAABAMARjBEAiBuEjOFn6wCvCgDrvl2
h127blhm0euoKz5anTGuTBTwvQIgcwv3R73nJd3mSihYAlnDE1T0sRxCYDKZDFqN
psQpsZMAdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYfCAuSu
AAAEAwBGMEQCICXpNwkumPZff+sxW2uywUd78xaleeoNQ5DcfxpQlm5NAiAhRIXk
csuYP+rDVXam83H7OU+PJIUYimbbXN1fzkElozANBgkqhkiG9w0BAQsFAAOCAQEA
czGvMMVi7vDCx1HyzAlyNQYkO+GBKHcIC2KOm9Cfgfg195tbUJqEGdmVz5IORKzl
h+HLMUNNvytflDikrqqtWlc8XY/WRW4WkNlY3jIEN4u0KeYWAXO4xEv3qQmMTIWy
RpkBkIJ4cyKUxz4dCc4SKjz68r1I8dR5Ey16mYLhv5yJV+MtsHS24K/ycUioShiq
ifa+obUXXY3SRrzIa+byxCgUA33YI7MFQpQIsjscfSUI41hu7R9wF9PLHNTMUMXb
j4nEUkRTIBH8G8vWERTV44UgkG6mfRH5J6CzSoiEKCj2GQR2HT3UqzpDi0ejCdGX
DAqYXo8exSE0xwNhK1YycA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgXkOjJ6Jft6YriZoFfw
K87RzZa2xMr2H0jPV7sQem/bit69oA2wL4jp4ujc2XLg6xnjRCcGsz09czfLDPOT
X3XkZpDBersrtcvYZt5ZwOiJMNoLZKHgR2VyiMHeTd7zJT9i+BGzNfPGeY7OFh1l
LE4AwiuyPdHA+QfaMh3n8/bNxvw4MJCnk4pVqTSvOELWpNd9oAz807COGZR7IM42
MSR3I58PkHtJwWjN7PLIfC96OR2FyAMd4d/p/SHJ1Iqw6Zywm8CcXKOttjfKe5OB
REbXxAFE7bDkkMON62+1ajwajgdo3LGbXaOi8WHNTBtqdXXHDlKTmD4NQ8hvg6ax
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20538959529898971770464684265541233050
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00048839'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barclays PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'signingsoftware.barclayscorporate.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19443604178121203801461959944998096961355864617855823538479864603018953858353507977252100676419476797794102519031603878353465631453295379234794061379120544850814697163944582106549959984290872592790845927513671473714332590160937354253343489368385710508234893955723685222342746207114042072259338477461919561016464386922856562977973629270882536085152451886284316644205764401657127510246587234803324674446922746416231410651716494244901607509963491408275496120018440307004804561317269948436695099044125205749074566892911058349621460117365581468325391586911863205471767644083783885202030107224280280799494459863749655703929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d8eb199a40dba33094a12b1ecd96c823f374523
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signingsoftware.barclayscorporate.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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