www.colectivosvip.com

- Vip District S.L. -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 02:72:da:b4:30:2d:06:5b:eb:79:ea:f3:26:91:ae:1d was issued on by DigiCert Inc.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Vip District S.L.

Organization: Vip District S.L.
State / Province: Catalonia
Locality: Barcelona
Country: ES

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:72:da:b4:30:2d:06:5b:eb:79:ea:f3:26:91:ae:1d
Serial Number (int): 3254813674715362890320958979015028253
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: e5:b1:62:b0:dc:58:74:4e:98:bf:8a:42:23:a7:99:34:fe:04:0c:9d
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): 86:f7:0a:7e:80:b2:e7:5b:19:f4:8c:65:c7:db:76:20:34:9a:49:74
Fingerprint (sha256): 63:8b:cb:fd:f8:9e:80:46:6f:ac:73:80:f4:51:09:13:fa:e5:98:5f:e9:55:ff:eb:a0:2d:48:f1:95:a8:cb:d5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-g28.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-g28.crl

Check the revocation status for certificate www.colectivosvip.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.colectivosvip.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.colectivosvip.com
colectivosvip.com
www.genesisoro.es
genesisoro.es
www.genesisplata.es
genesisplata.es
www.regaloro.es
regaloro.es
www.regalplata.es
regalplata.es
www.doblevip.com
doblevip.com
descomptes.jotmbe.tmb.cat
clubcliente.laboralkutxa.com
tusallia2.allianz.es
webservices.colectivosvip.com
static.colectivosvip.com
www.hotelimpic.com
hotelimpic.com
www.clubliberty.es
clubliberty.es

Other certificates including the domain name colectivosvip.com

(limited to 100 certificates)
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
*.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
*.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com
www.colectivosvip.com

Certificate

The complete raw certificate details for www.colectivosvip.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK8jSzEpWH6dn+KFM5dD
PWb+4GsbaPkbnU0+jR71PlXH8TUogY0IlLBnn8LScs6A8i8QklOikhVqgcjTwSJg
xCr5tIY/xluujE/JVcReB5gAvFexaU5Jal+xW5IJs0kB87L1ZzgTLLu510HVwgGv
WKpNMjgf3gV1lu/lv2Rc1SdkIvfobf7ddy236MyXuEBQdj06riRNvQEFS7mK1/q5
tlB1tx4VRCkqoBbmRsQQ76hV2+qG7OHqklknQksraKTzaknPhdC8OFpmj9QxGdbP
vEERZM2gvjcT9fQFRh5nK6cvb+SyvmVkTWl6wfCkuVQQrwgyqkqvy4w9e7ZFvNW6
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3254813674715362890320958979015028253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Catalonia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barcelona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vip District S.L.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.colectivosvip.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21799352154749984138716010246867956062387175171385717709910599685093083156389679739788908785624797035475240985218418697898153404407352817975453847131678830894142614836323592833989372918098640266590882350706754235518335093649902137573594592307798547707962412249687233523977415845545087073823327341362724904478271939436430682099677075293771627042651638052504737448716069906767749069315843735362948779916470768604462814016322161767722748059849613329049697539251257859062818412811411228343485880851850096654047092771127454118186780435317491445651299518832976208456844007648835997636082373708344378498289249443214630697547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5b162b0dc58744e98bf8a4223a79934fe040c9d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (422 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colectivosvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colectivosvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genesisoro.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genesisoro.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genesisplata.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genesisplata.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regaloro.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regaloro.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regalplata.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regalplata.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doblevip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doblevip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descomptes.jotmbe.tmb.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubcliente.laboralkutxa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tusallia2.allianz.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.colectivosvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.colectivosvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelimpic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelimpic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubliberty.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubliberty.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-g28.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-g28.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005c881a6a087a75db2890a24bac56a9b75e7a888a9447add9874ebf3aaabb0b0bd22a61816423f841b8fd952268306d94eb0fad84910850cd8336f435e945ca8900b91032d8c708db6248360582222f96b5d5835cb9daeebeca2150de136d25c1005bf29d874e47c7016a1f7e5f34fc49c620fdf4d63ffd59989c625be5d9ab35552e5706f7c19bc2a277990698727a4f943a6899bbcd65a790f039811a0dcbf5de092a23c8a2503f0787040c20e373762193b3af1d48a326349c4b676540185f2079933f1ad02dc6e3c9d9d3583942e2b437c57f208a3afdfb897f55e33f705da9aa4a675abf342ce662488a36fb0735374ee174ac478703762eba10d958d6ee