3737.inextenso.fr

- Freshdesk Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 08:af:38:06:bd:0e:a8:49:44:8f:c4:f5:e4:e7:c7:3b was issued on by DigiCert Inc.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Freshdesk Inc

Organization: Freshdesk Inc
Organization unit: Freshdesk
State / Province: California
Locality: San Fransisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:af:38:06:bd:0e:a8:49:44:8f:c4:f5:e4:e7:c7:3b
Serial Number (int): 11543612265340087924183706102449817403
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b5:58:f8:d1:31:91:a3:1e:af:6d:25:19:e3:6a:11:79:13:e9:c4:13
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 03:34:77:da:7c:cd:f7:7b:3c:f9:c7:b0:0f:d4:16:5a:68:f3:54:e4
Fingerprint (sha256): 61:89:55:d6:3d:60:9a:53:1e:bd:4a:c6:cd:d9:16:f1:42:5b:bd:10:79:0e:8f:90:20:37:bf:f3:09:3c:c8:08

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl

Check the revocation status for certificate 3737.inextenso.fr

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 3737.inextenso.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3737.inextenso.fr
helpdesk.ucfsd.org
support.mtraction.com
support.qqtube.com
support.inventorylab.com
portal.theoremfundservices.com
portal.theoremdashboard.com
support.survoxinc.com
support.kloudless.com
support.firsttransfer.com
support.getcujo.com
support.cxc.org
support.peregrinecloud.com

Other certificates including the domain name inextenso.fr

(limited to 100 certificates)
recrute.inextenso.fr
finance.inextenso.fr
3737.inextenso.fr
sip.inextenso.fr
3737.inextenso.fr
sip.inextenso.fr
prelevement-a-la-source.inextenso.fr
actualites.inextenso.fr
fdus-21.freshdesk.com
fdus-21.freshdesk.com
fdus-21.freshdesk.com
sbc.inextenso.fr
3737.inextenso.fr
inextenso.fr
3737.inextenso.fr
3737.inextenso.fr
fdus-21.freshdesk.com
recrutement.inextenso.fr
3737.inextenso.fr
3737.inextenso.fr
inextenso.fr
fdus-21.freshdesk.com
projet.inextenso.fr
projet.inextenso.fr
www.inextenso.fr
fdus-21.freshdesk.com
3737.inextenso.fr
3737.inextenso.fr
recrute.inextenso.fr
3737.inextenso.fr
*.inextenso.fr
fdus-21.freshdesk.com
projet.inextenso.fr
fdus-21.freshdesk.com
fdus-21.freshdesk.com
*.inextenso.fr
inextenso.fr
3737.inextenso.fr
finance.inextenso.fr
tls.automattic.com
prelevement-a-la-source.inextenso.fr
actualites.inextenso.fr
projet.inextenso.fr
3737.inextenso.fr
finance.inextenso.fr
*.inextenso.fr
aide-compta.inextenso.fr
3737.inextenso.fr
tls.automattic.com
inextenso.fr
tls.automattic.com
3737.inextenso.fr
3737.inextenso.fr
finance.inextenso.fr
fdus-21.freshdesk.com
prelevement-a-la-source.inextenso.fr
3737.inextenso.fr
3737.inextenso.fr
nexty.inextenso.fr
3737.inextenso.fr
finance.inextenso.fr
inex4you.inextenso.fr
fdus-21.freshdesk.com
3737.inextenso.fr
3737.inextenso.fr
autodiscover.inextenso.fr
fdus-21.freshdesk.com
inextenso.fr
www.inextenso.fr
recrutement.inextenso.fr
projet.inextenso.fr
3737.inextenso.fr
3737.inextenso.fr
finance.inextenso.fr
enterpriseregistration.inextenso.fr
inextenso.fr
3737.inextenso.fr
*.inextenso.fr
3737.inextenso.fr
*.inextenso.fr
fdus-21.freshdesk.com
prelevement-a-la-source.inextenso.fr
auth.inextenso.fr
*.inextenso.fr
fdus-21.freshdesk.com
finance.inextenso.fr
3737.inextenso.fr
sip.inextenso.fr
aide-compta.inextenso.fr
3737.inextenso.fr
fdus-21.freshdesk.com
fdus-21.freshdesk.com
3737.inextenso.fr
actualites.inextenso.fr
inextenso.fr
actualites.inextenso.fr
tls.automattic.com
3737.inextenso.fr
3737.inextenso.fr
www.inextenso.fr

Certificate

The complete raw certificate details for 3737.inextenso.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DfT1fkzDpK9r37HwOCs
/1pfxYcKjprOldlkresRMqAMg+tJ3WA3B4AN3PxJ6JDzPpt4xVF1uGdEIuUntVAG
Jwc4QrzmMohQQPlzVe2rzj5wAvP+di5crYymGq0hMRWTsjBKeNjFScCoCpj1c7Pi
zrtbFL3HpDqbh8VDUSgP9+eOThnl8Nm3gDKPl4PsAEr60WJSIGliX75wbMPex97N
6VY+DUgqjTOsEg4VCinblzUlhO0nQwvJ+FDjOvCnvekkjiJDneNci7l+4MmnK5SU
Z6gg/nB/xjv63+nfP2d5cqrGD1n3p/De4CCOSpoE1y/yqSjFetaqqT8DsXF/4JFZ
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11543612265340087924183706102449817403
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Fransisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Freshdesk Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Freshdesk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3737.inextenso.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28809863090527104827688203867226978732154465284175916921275509100934482695297658735255838856284553905763012482820715280161928423346232909067676287682198706154393454827017470094135673971654765014601391011908266933354247288663083951551674362212589151617186742743272831102341239433842739504815343829860526043355318835817284517889703832924766877835303788501714176860063930192546331488482998609229655849149826301832219077723796589888563667023771991594051270557740760887128103444764420753424310328228607661403567786082762656403536075348803238460281468024655029766475182524567332560185120654773739647019359249650290149906759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b558f8d13191a31eaf6d2519e36a117913e9c413
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (312 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3737.inextenso.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ucfsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mtraction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.qqtube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.inventorylab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.theoremfundservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.theoremdashboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.survoxinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.kloudless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.firsttransfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.getcujo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cxc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.peregrinecloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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