aic.mhra.gov.uk

- MEDICINES AND HEALTHCARE PRODUCTS REGULATORY AGENCY -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0c:21:db:f0:42:65:2d:d7:f4:a0:ec:29:45:69:64:6b was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MEDICINES AND HEALTHCARE PRODUCTS REGULATORY AGENCY

Organization: MEDICINES AND HEALTHCARE PRODUCTS REGULATORY AGENCY
Organization unit: IMD
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:21:db:f0:42:65:2d:d7:f4:a0:ec:29:45:69:64:6b
Serial Number (int): 16126542628761171572009963668407673963
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 89:27:eb:6c:94:8a:60:9b:ef:59:a1:ff:42:d2:7f:86:e6:d8:b8:28
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 9d:ae:23:bb:f2:12:b5:e4:d2:27:9e:8e:f5:c9:9c:9a:1b:a6:13:17
Fingerprint (sha256): 60:2e:9a:da:f6:d2:79:89:b4:d0:c0:ca:fa:8b:26:c1:61:b0:d9:b9:a4:cd:70:ef:35:db:a3:ec:77:6d:de:75

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate aic.mhra.gov.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aic.mhra.gov.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aic.mhra.gov.uk

Other certificates including the domain name mhra.gov.uk

(limited to 100 certificates)
ehr-management.mhra.gov.uk
mail.mhra.gov.uk
*.dev.mhra.gov.uk
remote.mhra.gov.uk
cms.mhra.gov.uk
STS.MHRA.GOV.UK
ehr-services.mhra.gov.uk
ehr-services.mhra.gov.uk
externalappstest.mhra.gov.uk
vendor.mhra.gov.uk
mft.mhra.gov.uk
remote-rds.mhra.gov.uk
medicines.api.mhra.gov.uk
vpn.mhra.gov.uk
sts.mhra.gov.uk
mail.mhra.gov.uk
STS.MHRA.GOV.UK
esusar.mhra.gov.uk
*.mhra.gov.uk
mail.mhra.gov.uk
sts.ad.mhra.gov.uk
subscriptions.mhra.gov.uk
mail.mhra.gov.uk
www.cas.mhra.gov.uk
*.test.mhra.gov.uk
ideas.mhra.gov.uk
ehr-management.mhra.gov.uk
yellowcard.mhra.gov.uk
mft.mhra.gov.uk
aic.mhra.gov.uk
sts.staging.mhra.gov.uk
sentinel-pclportal.mhra.gov.uk
yellowcard.mhra.gov.uk
info.mhra.gov.uk
www.cas.mhra.gov.uk
esusar.mhra.gov.uk
yellowcard.mhra.gov.uk
vendor.mhra.gov.uk
esusar.mhra.gov.uk
dm.mhra.gov.uk
mail.mhra.gov.uk
ehr-management.mhra.gov.uk
products.mhra.gov.uk
cpd.mhra.gov.uk
*.test.mhra.gov.uk
sts.staging.mhra.gov.uk
pclportal.mhra.gov.uk
ehr-services.mhra.gov.uk
mail.mhra.gov.uk
www.mhra.gov.uk
esusar.mhra.gov.uk
services.mhra.gov.uk
icsrsubmissions.mhra.gov.uk
subscriptions.mhra.gov.uk
services.mhra.gov.uk
aic.mhra.gov.uk
remote.mhra.gov.uk
yellowcard.mhra.gov.uk
medicines-api.non-prod.mhra.gov.uk
medicine-seller-register.mhra.gov.uk
webradr-halmed.redant.cloud
ehr-services.mhra.gov.uk
mft-test.mhra.gov.uk
mft.mhra.gov.uk
mail.mhra.gov.uk
info.mhra.gov.uk
mail.mhra.gov.uk
products.mhra.gov.uk
sip.mhra.gov.uk
subscriptions.mhra.gov.uk
itsr-ideas.mhra.gov.uk
cms.mhra.gov.uk
aic.mhra.gov.uk
www.cas.mhra.gov.uk
mft-test.mhra.gov.uk
medicine-seller-register.mhra.gov.uk
aic.mhra.gov.uk
subscriptions.mhra.gov.uk
coronavirus-yellowcard.mhra.gov.uk
yellowcard.mhra.gov.uk
cms.mhra.gov.uk
yellowcard.mhra.gov.uk
sip.mhra.gov.uk
mte.mhra.gov.uk
swineflu.mhra.gov.uk
cms.mhra.gov.uk
medicine-seller-register.mhra.gov.uk
ehr-management.mhra.gov.uk
ehr-services.mhra.gov.uk
services.mhra.gov.uk
dm.mhra.gov.uk
subscriptions.mhra.gov.uk
aic.mhra.gov.uk
medicine-seller-register.mhra.gov.uk
pandemicflu.mhra.gov.uk
icsrsubmissions.mhra.gov.uk
*.test.mhra.gov.uk
vendor.mhra.gov.uk
pclportal.mhra.gov.uk
mft.mhra.gov.uk

Certificate

The complete raw certificate details for aic.mhra.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHNzCCBh+gAwIBAgIQDCHb8EJlLdf0oOwpRWlkazANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwNDMwMDAwMDAwWhcN
MjAwNDI5MTIwMDAwWjCBhDELMAkGA1UEBhMCR0IxDzANBgNVBAcTBkxvbmRvbjE8
MDoGA1UEChMzTUVESUNJTkVTIEFORCBIRUFMVEhDQVJFIFBST0RVQ1RTIFJFR1VM
QVRPUlkgQUdFTkNZMQwwCgYDVQQLEwNJTUQxGDAWBgNVBAMTD2FpYy5taHJhLmdv
di51azCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJ6alvjuGI7drI7j
FYH3n1YIlQcDHWo8edFsaWvGhrpe4uxKmMoMTiSzugFqxx1uyN5eKBuwVAJ/lDXc
/JKdAonD1Mp6utbSLHn8HR6sPKrKwL4QcWkE0vCRI+kt91WBNO2c/5mZW22FFxO3
hwkdaqSC7ZJlAX6z9yq7Wkg4+ywpyRw+P8aTii7ZDJM8W9gZemNzdE0iJU3RCIFn
Ql5kLFH9IOpNpB4LEoeWsPc+cdawBJTHRyW8J3Wb04WVXTRli1CPrWNwQ8V5vTIq
c2ebNt8XhMgWwndmONhe2MqnJrSouwFA0i6qthMpjGktMFWva0S1LGAQdj1fjBHL
NnMeT+D0+ZsBVaSPSzzEUWbtHVeMY2Gabsr8oSEFQZU/8GupU2NIMmmKwYmCCxQn
daIBHoUq+tTDHUJhZal4hEIiop5mjPhXap6RVE9zubMYzpjIInHIZTF0c+oRNdna
a4fQVugKCGQlWBrHy2Bqi2hlP6DPorbqDAAZK/7+0N45JB5Rk0SZkegMdhwSMJkF
4MPg2E+kga3O8CQRfkE7iPi2fyVD20Sx6EHUW2905y0kYz270i2MU6NeBMnVZypb
j/eVD5wQwIv4wU2U0LHq8sswOhG6eFL6FyTAkTt9CuvyifSdstKIOV/1WrbgqCkM
n/qim8qZYnvhjI/4OQHHCLkwu5xZAgMBAAGjggLZMIIC1TAfBgNVHSMEGDAWgBQP
gGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUiSfrbJSKYJvvWaH/QtJ/hubY
uCgwGgYDVR0RBBMwEYIPYWljLm1ocmEuZ292LnVrMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4Yp
aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuG
KWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1Ud
IARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRp
Z2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEF
BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRw
Oi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVy
Q0EuY3J0MAkGA1UdEwQCMAAwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQC72d+8
H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWpuu5rQAAAEAwBGMEQCIFhu
ynDhc9aEiBjJuE8FHQJFEuUYagDPuFSFvgGoC/HtAiArWTqYGNJVXmHdl1XXleT/
x2aFRQF042wyEc6zkSYrHwB1AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9e
oIMPAAABam67m+cAAAQDAEYwRAIgRX0lJ0HEUdd0LcZcdcVhm1z89ly7povQnU6j
p1Hi51wCIE6oeR8yi7MkXzow9mV9QKzCibhEmiwy6hCG95ZzEx7TMA0GCSqGSIb3
DQEBCwUAA4IBAQCY1OpjjS+r7Myd2WWVmtTse3CU04R4g0uIGmtNxIcY3FWrkhf5
9KKVb8e6JylFY3UiT7JnBTzjahXe6v1N9y/aWKXd+xlw7eHQ1+LTlJtCXOOoKC1j
rYZETUekiX/DFkqGQioP+OGaTbyhnwxzhN5spfz+ovpaCGKRBn8vG9m9iiQG+beN
yDOziZcJhgDwkHjCn02sgDvev7bF8sH+7vpnCZ1p90Po0YTN+5ULUwNsyn7Ukvmc
3eHxnNZTWp3Hgz27cj/HX+lSmYi/Fo+PPAt5cWl2G4woSf+47D0rBfC4pAyRcmgZ
Euq4B2umod9kUCSYJ3UoxytiFvEqdMx79c3U
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16126542628761171572009963668407673963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MEDICINES AND HEALTHCARE PRODUCTS REGULATORY AGENCY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IMD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aic.mhra.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 647047321727352685592396301256578475219303733421803343509269801813112753726823406336622588501889826550967686971273738892971878832728811968125129831841278807734745251548887366832278731516233760164244088192583789501002766109393579517627138955320377680408718366497272905835822835454495530193049437946335411388597879726218200068707077655469260087014658709440848386799073456198595975804952712556741139302349059238764177618500536146678858238834882867083970528505061293157323038852899268348009489723713292309062501939032715787129273982437497052475782036494538563927295258954515409807164322073723237458235206219420625283347195505405374512326433562961850947293648694145994542873068897420425406116551498772856928566041235771461412350874883604873826356323461485688155055366816112538204341919715550492976040337718236269294460324123639549468195109386588646130261158397855610464745949231149249176978242074949148094845410010402392601778872731944686922593053287488508415100187726924570953848363579244122235058230589369169631784361286760002732037072061102059821190063065989701336673471926438802804339088065078406463669002177095209041194396409694131712193303481247794085506913597363933593920117868826724498117699603351277793209559574292686483744332889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8927eb6c948a609bef59a1ff42d27f86e6d8b828
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aic.mhra.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016a6ebb9ad000000403004630440220586eca70e173d6848818c9b84f051d024512e5186a00cfb85485be01a80bf1ed02202b593a9818d2555e61dd9755d795e4ffc76685450174e36c3211ceb391262b1f0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016a6ebb9be700000403004630440220457d252741c451d7742dc65c75c5619b5cfcf65cbba68bd09d4ea3a751e2e75c02204ea8791f328bb3245f3a30f6657d40acc289b8449a2c32ea1086f79673131ed3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0098d4ea638d2fabeccc9dd965959ad4ec7b7094d38478834b881a6b4dc48718dc55ab9217f9f4a2956fc7ba2729456375224fb267053ce36a15deeafd4df72fda58a5ddfb1970ede1d0d7e2d3949b425ce3a8282d63ad86444d47a4897fc3164a86422a0ff8e19a4dbca19f0c7384de6ca5fcfea2fa5a086291067f2f1bd9bd8a2406f9b78dc833b38997098600f09078c29f4dac803bdebfb6c5f2c1feeefa67099d69f743e8d184cdfb950b53036cca7ed492f99cdde1f19cd6535a9dc7833dbb723fc75fe9529988bf168f8f3c0b797169761b8c2849ffb8ec3d2b05f0b8a40c9172681912eab8076ba6a1df64502498277528c72b6216f12a74cc7bf5cdd4