advocacy.elevancehealth.com

- Anthem, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 01:ba:ea:f4:1f:b0:bb:89:8b:ee:83:eb:69:ea:72:1e was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Anthem, Inc.

Organization: Anthem, Inc.
State / Province: Indiana
Locality: Indianapolis
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ba:ea:f4:1f:b0:bb:89:8b:ee:83:eb:69:ea:72:1e
Serial Number (int): 2299760636798993651721304108966769182
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 52:60:6b:06:30:d4:ef:72:c4:04:87:3d:93:b0:19:c6:23:c5:19:e1
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): e4:b2:8b:fa:6a:bd:c0:5c:37:20:6e:36:99:d7:ee:f1:cb:df:e1:f1
Fingerprint (sha256): 60:2e:12:9a:3a:61:4b:d2:f7:66:0f:97:dd:4a:a5:23:20:64:41:04:5f:db:97:4f:dc:e0:63:62:3a:bb:67:3c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate advocacy.elevancehealth.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for advocacy.elevancehealth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advocacy.elevancehealth.com

Other certificates including the domain name elevancehealth.com

(limited to 100 certificates)
APIKey2.elevancehealth.com
anthemblue.com
careers.elevancehealth.com
non-prods-ps-dp.ex.elevancehealth.com
san-003.ceros.com
fnp8aeprod.elevancehealth.com
employer-origin.anthem.com
advancinghealth.elevancehealth.com
Callcenter-voicebot.elevancehealth.com
employer-origin.anthem.com
san-003.ceros.com
anthemblue.com
secure-gateway-ak.anthem.com
pce.elevancehealth.com
secure-gateway-ak.anthem.com
san-003.ceros.com
staging.anthem.com
employer-origin-dr.anthem.com
hipeapsurvey-services.elevancehealth.com
www.amerigroup.com
employer.anthem.com
san-003.ceros.com
san-003.ceros.com
findcare.elevancehealth.com
saml.anthem.com
secured.provider-ak.anthem.com
anthemblue.com
chromeriver.antheminc.com
saml.uat.anthem.com
saml.anthem.com
san-003.ceros.com
ElevanceHealthoidc.elevancehealth.com
providerexperience-ak.anthem.com
shop.anthem.com
elevancehealth.com
securefed.anthem.com
workspace.elevancehealth.com
shop.anthem.com
Callcenter-voicebot.elevancehealth.com
grpc.nonprod.elevancehealth.com
patient360.elevancehealth.com
san-003.ceros.com
san-003.ceros.com
eshare.antheminc.com
elevancehealth.com
staging.anthem.com
myconnection.elevancehealth.com
myconnection.elevancehealth.com
san-003.ceros.com
pulse.elevancehealth.com
patient360.elevancehealth.com
eshare.elevancehealth.com
secure-gateway.dev.va.antheminc.com
cms.elevancehealth.com
www.elevancehealth.com
staging.anthem.com
dmz-stg-pulse.antheminc.com
employer.anthem.com
advocacy.elevancehealth.com
staging.anthem.com
secure-gateway.dev.va.antheminc.com
saml.anthem.com
secured.provider-ak.anthem.com
patient360.elevancehealth.com
www.elevancehealth.com
eshare.elevancehealth.com
san-003.ceros.com
san-003.ceros.com
providerexperience-ak.anthem.com
staging.anthem.com
anthemblue.com
san-003.ceros.com
anthemblue.com
ciw.synergy.origin.elevancehealth.com
uats-ps-dp.ex.elevancehealth.com
securefed.ext.uat.anthem.com
san-003.ceros.com
test-cms.elevancehealth.com
esharestage.elevancehealth.com
secure-gateway.dev.va.antheminc.com
san-003.ceros.com
secure-gateway.dev.va.antheminc.com
san-003.ceros.com
shop.anthem.com
elevancehealth.com
myconnection.elevancehealth.com
pulse.antheminc.com
ir.elevancehealth.com
hrit-ak.elevancehealth.com
san-003.ceros.com
saml.anthem.com
hipeapsurvey-services.perf.elevancehealth.com
san-003.ceros.com
ciw.synergy.anthem.com
omnichannel-preprod.elevancehealth.com
advocacy.elevancehealth.com
pulse.elevancehealth.com
extcitrix.elevancehealth.com
hrit.elevancehealth.com
findcare.elevancehealth.com

Certificate

The complete raw certificate details for advocacy.elevancehealth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGyjCCBbKgAwIBAgIQAbrq9B+wu4mL7oPraepyHjANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA2MjkwMDAwMDBa
Fw0yMzA2MjkyMzU5NTlaMHMxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdJbmRpYW5h
MRUwEwYDVQQHEwxJbmRpYW5hcG9saXMxFTATBgNVBAoTDEFudGhlbSwgSW5jLjEk
MCIGA1UEAxMbYWR2b2NhY3kuZWxldmFuY2VoZWFsdGguY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMzm47jIzvHY+7zAiCY6TDoAuAKrq8xh0xpc
fUuR5NfspE6GUTBiDHa5gmpwfCBBjU7slteH9C2fLnegR41ToBLcfjsTL/cA68pK
tNEMR3bpS1VjkYEk8CF0f0t2HWePtnXUebA7GQSptwdVySCgMZrmAl3Ar5nIFjaB
oNIGMnU7oxVc1qcxWKfm2N6J3b8vVkpCqeAM2Z4JOLdPPJdTuzQlhOiDVIIUkLoX
bHu8Z8CsSpLZcLR+Y/ClbEReNJp2IV6D1jOJJKcIJNwChsfs/Yt2Lm8PkzoixT8u
f19RRJZyaHRNCoo5w/qU96QyjHy4UvT3XdsXCjb9psyMuQXMxQIDAQABo4IDfDCC
A3gwHwYDVR0jBBgwFoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0OBBYEFFJg
awYw1O9yxASHPZOwGcYjxRnhMCYGA1UdEQQfMB2CG2Fkdm9jYWN5LmVsZXZhbmNl
aGVhbHRoLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMIGPBgNVHR8EgYcwgYQwQKA+oDyGOmh0dHA6Ly9jcmwzLmRpZ2lj
ZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwQKA+oDyG
Omh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIw
MjBDQTEtNC5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYb
aHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMH8GCCsGAQUFBwEBBHMwcTAkBggr
BgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEkGCCsGAQUFBzAChj1o
dHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYy
MDIwQ0ExLTEuY3J0MAkGA1UdEwQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsB
aQB3AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABgbDFSn8AAAQD
AEgwRgIhAKrAxeGDTTtaorDD7Erpb6ezBPAoyvNbAV6WyQqPT038AiEA3irGtqah
bCFKiibjlqeBpeoV5vhe+vSyo1DaC53C324AdgA1zxkbv7FsV78PrUxtQsu7ticg
JlHqP+Eq76gDwzvWTAAAAYGwxUqRAAAEAwBHMEUCIHrWXJVF1j7h/kSUdCtd17SV
V7BEpyqQD1Z1wsH2D9dgAiEAuT/lo0Hoj5dc+p6RInsZtKipgxLuGQ8S14op7b2q
3osAdgCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAAAYGwxUqxAAAE
AwBHMEUCIEyunt4ENS2c5oJknYgM0zEO4j4DSAfd3RcOFiIf/8x2AiEA/MTS7PLh
SaFQyhmGg1gO0lAv5rqrzb08KcSOlRcUSQowDQYJKoZIhvcNAQELBQADggEBAEWm
WYS9vgcRINsB8vYQZle4DywZyzeWSfgEU6WrOoDvqExQxjpqDPFLRfUHuefOFOM9
i4PmEx3jP6XamuyF12Dwz/CUrThzdx+S5fyHVpTIiXnGVYrmHsFrDeDL9tqT5+Cj
Gj+BHO0mvmR4ZoKkVe71zVbUiFj4OljAtcGE1HrtywxS3pwn2DLvf7AnBHcEjK8N
bVvEfWQfp4ACweoz9axNT9gSxgTM1xfYKddkubIfJUGOPsY8EEXCBuUsrYy6ECtK
U/3H7+xmHE1CdxouyxB5q0GHQtN3wNYqwQRyfeqWBeObutzFw2PBGH2+OwSFfxm/
CXXAge/U+jOC1NkIsqg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMzm47jIzvHY+7zAiCY6
TDoAuAKrq8xh0xpcfUuR5NfspE6GUTBiDHa5gmpwfCBBjU7slteH9C2fLnegR41T
oBLcfjsTL/cA68pKtNEMR3bpS1VjkYEk8CF0f0t2HWePtnXUebA7GQSptwdVySCg
MZrmAl3Ar5nIFjaBoNIGMnU7oxVc1qcxWKfm2N6J3b8vVkpCqeAM2Z4JOLdPPJdT
uzQlhOiDVIIUkLoXbHu8Z8CsSpLZcLR+Y/ClbEReNJp2IV6D1jOJJKcIJNwChsfs
/Yt2Lm8PkzoixT8uf19RRJZyaHRNCoo5w/qU96QyjHy4UvT3XdsXCjb9psyMuQXM
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2299760636798993651721304108966769182
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indianapolis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Anthem, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'advocacy.elevancehealth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22318982572807161875817147597887858735007335868175753065695944930615801946367527615783954700484566755881048175031451898991535319929368605450397899475210264261560194326382978548347175189102261573223156914696736062551502034979590305627403429122842784531364364745988854922440040737131095949325607594238343252299536216625924243521571370903746588686028809064635673525724464248631751787631938798756849071400222820019421987640903388822049553501926042672956986731303699669978744540108876178663053249142654770599751428923700983006469547394559576158686160389462061895784880657071643664318098085286800434713067487014491062127813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52606b0630d4ef72c404873d93b019c623c519e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advocacy.elevancehealth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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