community.acumatica.com

- Acumatica, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:f8:d9:21:81:34:1d:81:8f:6d:03:ec:3d:36:bd:12 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Acumatica, Inc.

Organization: Acumatica, Inc.
State / Province: Washington
Locality: Bellevue
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:f8:d9:21:81:34:1d:81:8f:6d:03:ec:3d:36:bd:12
Serial Number (int): 10596689528810973493573733995972574482
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 0d:4b:a5:71:3b:52:48:4e:d8:8f:ae:25:43:81:b9:4d:fa:c7:2f:2a
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): ac:0d:e0:0d:c1:5e:66:0c:6d:ce:d7:93:43:0a:00:b1:e1:a9:e9:a7
Fingerprint (sha256): 5f:92:12:19:04:71:f8:1e:ab:4a:83:35:53:91:8e:cc:47:69:0a:c0:71:6a:cf:1e:be:6a:99:df:b2:00:74:91

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate community.acumatica.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for community.acumatica.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

community.acumatica.com
feedback.acumatica.com

Other certificates including the domain name acumatica.com

(limited to 100 certificates)
*.acumatica.com
customervoice.acumatica.com
dev.acumatica.com
acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
www.acumatica.com
lp.acumatica.com
*.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
lp.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
www.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
asiablog.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
acumatica.com
feedback.acumatica.com
www.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
mail.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
new.acumatica.com
acumatica.com
www.acumatica.com
map.acumatica.com
customervoice.acumatica.com
*.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
lp.acumatica.com
feedback.acumatica.com
lp.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
lp.acumatica.com
www.acumatica.com
feedback.acumatica.com
internal.acumatica.com
community.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
shopifyapi.acumatica.com
acumatica.com
partners.acumatica.com
www.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
*.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
dev.acumatica.com
feedback.acumatica.com
lp.acumatica.com
customervoice.acumatica.com
www.acumatica.com
*.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
shopifyapi.acumatica.com
viewemail.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
erp.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
*.acumatica.com
asiablog.acumatica.com
feedback.acumatica.com
www.acumatica.com
customervoice.acumatica.com
lp.acumatica.com
customervoice.acumatica.com
feedback.acumatica.com
new.acumatica.com
feedback.acumatica.com
customervoice.acumatica.com
customervoice.acumatica.com
lp.acumatica.com
customervoice.acumatica.com
viewemail.acumatica.com

Certificate

The complete raw certificate details for community.acumatica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG/zCCBeegAwIBAgIQB/jZIYE0HYGPbQPsPTa9EjANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE
aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjMw
ODE2MDAwMDAwWhcNMjQwODE1MjM1OTU5WjBxMQswCQYDVQQGEwJVUzETMBEGA1UE
CBMKV2FzaGluZ3RvbjERMA8GA1UEBxMIQmVsbGV2dWUxGDAWBgNVBAoTD0FjdW1h
dGljYSwgSW5jLjEgMB4GA1UEAxMXY29tbXVuaXR5LmFjdW1hdGljYS5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYtjRp0+2xkGj9MdCb3VWGJM6l
PnsNQSFlTmw7mzPpIGxljIPuJw2Dt9y98fH0ZwQ97asw4TtthcXVV3TYxzASrJUj
nz/EAZh+VZdE3zwY455Jc796K7nR7xq4Gr/nirmd7C42DaBOQNPx0hLZIjzLZGEJ
QpRtO3LgyEZnXbKxAjClylL9k9/XCvGBunWgcoWZ6cQKvxY5/LWl56cHZmDy/J3c
ZpMHc1bWRXcPFhwzrccYU6hNnJCKjp9Gu2G9o77oCLrwdN/yac4mmc+GZL2bKXfY
VYmksrtekv9sR66FaLV5KuvQUSXpcorRDpD6+QSrLbmW2a6Z5/Uk4wsSjLzpAgMB
AAGjggOpMIIDpTAfBgNVHSMEGDAWgBR0hYDAZsffN97PvSk3qgMdvu3NFzAdBgNV
HQ4EFgQUDUulcTtSSE7Yj64lQ4G5TfrHLyowOgYDVR0RBDMwMYIXY29tbXVuaXR5
LmFjdW1hdGljYS5jb22CFmZlZWRiYWNrLmFjdW1hdGljYS5jb20wDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGX
MIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9i
YWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0
LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcyVExTUlNBU0hBMjU2MjAyMENB
MS0xLmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRw
Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEF
BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRw
Oi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNI
QTI1NjIwMjBDQTEtMS5jcnQwCQYDVR0TBAIwADCCAX8GCisGAQQB1nkCBAIEggFv
BIIBawFpAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJ/WAZ
WQAABAMARzBFAiEA1Suc+7vb5yZMEHV7L3mX/HtC8LYBXdPovKr0pmTfktMCIAEq
gIWjS8kHxQ3af1Mcz+z1gAC6wjGzdxDW4R8ith8eAHYASLDja9qmRzQP5WoC+p0w
6xxSActW3SyB2bu/qznYhHMAAAGJ/WAY/AAABAMARzBFAiAJ9beDwvSHb0zjdI1f
DbzzLv7wVSsX1n+i4qenwJ2BiQIhAM2GWVC7YssxRnpB+GpKEie7eEyioJbKkdda
QGOWSpdJAHcA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJ/WAY
yAAABAMASDBGAiEAs86pxtpiqlt/eAcoXNVBCP1hvfN5N7tpBpjcZ/ZyV78CIQCy
a23GTaqZyfgk9qAsBFMlovSBvkCTwjVhjTymYj+Z0TANBgkqhkiG9w0BAQsFAAOC
AQEADwCJuD2T3uk9uS7znlnAZYI3wkWuKOrZ1Xh3HkvHHZoshdj+VE1w3xdb0Gmw
Awyta/NxzjdOSJuOc/bXvVB/JiCjuJWOy+08WLVPRhYo4EYctsG6LFEU8A7u5C1F
gY8Fu/GjMCqhm3YyKRCjKlWOpFfllFsXWQ8zi33+3Cne1aJybpElojkwKeYKxsbG
u6N4EDUv8/Zq9GmYW1Y07VCauAtc7ZahbOmtofNurlTcruMpKC35pW38iw29V1HC
SyCiQLnj0FmjwCLtWiiNBHDKRUNWfYjhHILTEy2Y93PsQf6uonHKX4nHk+kevZpu
4pQqhBgVx2iVblv/WTU54py9yw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LY0adPtsZBo/THQm91V
hiTOpT57DUEhZU5sO5sz6SBsZYyD7icNg7fcvfHx9GcEPe2rMOE7bYXF1Vd02Mcw
EqyVI58/xAGYflWXRN88GOOeSXO/eiu50e8auBq/54q5newuNg2gTkDT8dIS2SI8
y2RhCUKUbTty4MhGZ12ysQIwpcpS/ZPf1wrxgbp1oHKFmenECr8WOfy1peenB2Zg
8vyd3GaTB3NW1kV3DxYcM63HGFOoTZyQio6fRrthvaO+6Ai68HTf8mnOJpnPhmS9
myl32FWJpLK7XpL/bEeuhWi1eSrr0FEl6XKK0Q6Q+vkEqy25ltmumef1JOMLEoy8
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10596689528810973493573733995972574482
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acumatica, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'community.acumatica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27357322378566070286974344257777888372500422904892046060164493641732525982120251224387942382401078891763652206661003320963497243478850888954923004256958949596241875923268566277439058663438525293634840342197680622183943689901540413666907620608196887262318150699590547593917019324821416674919073823441156196104828859087382963584955508495286194742668307464461944683672782860340404211156868529066599128418377573510179579476355394656014100971061225842088880286602828374149066997608886435534136224394607831926621594794571441889400009599775159963780842051449278931657244278122276066080996019966175033054297780673807421062377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d4ba5713b52484ed88fae254381b94dfac72f2a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.acumatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.acumatica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000189fd6019590000040300473045022100d52b9cfbbbdbe7264c10757b2f7997fc7b42f0b6015dd3e8bcaaf4a664df92d30220012a8085a34bc907c50dda7f531ccfecf58000bac231b37710d6e11f22b61f1e00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000189fd6018fc0000040300473045022009f5b783c2f4876f4ce3748d5f0dbcf32efef0552b17d67fa2e2a7a7c09d8189022100cd865950bb62cb31467a41f86a4a1227bb784ca2a096ca91d75a4063964a9749007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000189fd6018c80000040300483046022100b3cea9c6da62aa5b7f7807285cd54108fd61bdf37937bb690698dc67f67257bf022100b26b6dc64daa99c9f824f6a02c045325a2f481be4093c235618d3ca6623f99d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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