nps.koenenenco.nl

- Maatschap Koenen en Co -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0c:f0:67:10:63:96:c7:80:27:63:47:c4:3c:77:aa:f9 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Maatschap Koenen en Co

Organization: Maatschap Koenen en Co
Organization unit: ICT
Locality: Maastricht
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:f0:67:10:63:96:c7:80:27:63:47:c4:3c:77:aa:f9
Serial Number (int): 17198977582128422416182951678469188345
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d0:77:4c:1b:16:c7:05:57:74:2d:d9:3e:4b:b2:b4:ce:f2:67:0e:f3
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 3a:e3:40:ff:6c:9d:fd:c3:ef:3a:71:10:ad:1f:49:7b:07:91:24:11
Fingerprint (sha256): 65:9c:b5:83:3d:01:e4:f5:a7:7b:0b:4d:79:bf:6d:9e:bb:2a:7a:67:fa:17:a4:fb:cb:b2:4d:08:8d:91:ac:2d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate nps.koenenenco.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nps.koenenenco.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nps.koenenenco.nl

Other certificates including the domain name koenenenco.nl

(limited to 100 certificates)
link.vpngate-connector.com
pricetrends.io
pinkweb.koenenenco.nl
www.secretfriend.fr
kreationfilms.co.in
dev.botin.io
inbox.rest
www.koenenenco.nl
customers.approv.tech
utahtravelpass.com
www.buscontrol.app
my.dev.hudya.no
cartron.b2b4-check.com
test-manheim-dala.cox2m.com
www.koenenenco.nl
portaal.koenenenco.nl
platform-pcm.koenenenco.nl
koenenenco.nl
app.runmyservice.com
dl.webuters.com
mimoinfinito.store
fadyphilips.com
koenenenco.nl
blockprints.net
landing.koenenenco.nl
registration.egraft.org
mindpack.com
imagine.agency
pqs-juridisch.koenenenco.nl
www.sagarwatamkar.com
dev-sps.habrtech.cz
betterbriefs.dev
verify.blueshell.io
eltrasterobar.salvadormares.com
lumin-ideacloud.forgedx.com
www.danielschreitter.de
a061.foodle.su
q1-track.dpd.co.uk
loonheffingencheck.koenenenco.nl
www.koenenenco.nl
www.architex-solutions.net
docs.zax-92.com
cafe.owl2go.de
www.koenenenco.nl
www.dentocurean.com
app.yenisirketkur.com
ac.koenenenco.nl
www.housle.house
wabisabiuploader.com
da.koenenenco.nl
coopertransrotas.ideiadtc.com
evaluate.watani.gov.sa
www.koenenenco.nl
www.koenenenco.nl
app.moxit.com
dev.proxy.valuehr.sokuyaku.jp
app.darum.com.ng
actest.koenenenco.nl
trimurticonventschool.com
www.firebirdmun.com
kadurawebservices.fr
ac.koenenenco.nl
pqs-sturen-op-resultaat.koenenenco.nl
nps.koenenenco.nl
portaal.koenenenco.nl
colegios.mision.education
nsg.koenenenco.nl
marmitanaestrada.com
1956.ai
andyhavlik.it
designfactory.pt
mijn.koenenenco.nl
oolab.co.jp
tirunelveli.yazhdroptaxi.com
actest.koenenenco.nl
incidentally-login.emerging-response.com
gollmann.apoly.de
architext.masonzee.com
portal.koenenenco.nl
www.setagaya-phil.net
volgait.com
rms.motchasoft.com
www.aracolor.cz
pokeremulator.com
www.onsitecarservices.com
login.koenenenco.nl
www.gisua.com
mijn.koenenenco.nl
elshemy.site
www.octanejeans.com.ar
nsg.koenenenco.nl
www.fulsa.org.ar
static.loko.city
loonheffingscan.koenenenco.nl
recover.shopflo.co
page.ouch.ai
tallerdtres.com.ar
www.theaisites.co.in
portal.koenenenco.nl
worldofhensnft.com

Certificate

The complete raw certificate details for nps.koenenenco.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIQDPBnEGOWx4AnY0fEPHeq+TANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE
aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTgwNTAyMDAwMDAwWhcNMjAwNjMwMTIw
MDAwWjBtMQswCQYDVQQGEwJOTDETMBEGA1UEBxMKTWFhc3RyaWNodDEfMB0GA1UE
ChMWTWFhdHNjaGFwIEtvZW5lbiBlbiBDbzEMMAoGA1UECxMDSUNUMRowGAYDVQQD
ExFucHMua29lbmVuZW5jby5ubDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMYoNTGt2YJPI0yEDDBQuoc+KWKHaoVPWFIincyjQ3SMeOT+EDOq2XCRc0kh
eAFpYgfUm6+MhlVBc4LV7J1/q+Hs+cIb9IKIEUL+4bkvg4TXRJK4dih8W17ImCLy
qSoexa+hPQanVT4mW1KZDOo1Burx600mhWKsxK2e0oxIoCydjIJdA4376S0PG2ax
adJMAN3UQQhRwHYMn9Z0/A0/oOFrD6MkO+ldB+qENheBVRcx1iYtMuImDGRNW4eo
W6BdMCZQQlwVJ8yn0LIjfvVwAimsFxtRexPdkxI4Rz/KabxJw6/ph+1Uc8yqlh/D
PZI9aU8mjwkTBaA2rVMUmtX/8OsCAwEAAaOCAe4wggHqMB8GA1UdIwQYMBaAFCRu
Ky3QapJRUSVpAaqaR6aJ50AgMB0GA1UdDgQWBBTQd0wbFscFV3Qt2T5LsrTO8mcO
8zAcBgNVHREEFTATghFucHMua29lbmVuZW5jby5ubDAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHcGA1UdHwRwMG4wNaAzoDGG
L2h0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbENBRzIuY3Js
MDWgM6Axhi9odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxD
QUcyLmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxo
dHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB0BggrBgEFBQcB
AQRoMGYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA+Bggr
BgEFBQcwAoYyaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xv
YmFsQ0FHMi5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq
hkiG9w0BAQsFAAOCAQEABhyD0VeprIo3/gzHyj6IarkCcB732J4Qbje/E7jZUSh/
hJcIeR5DIq+6irN+Qf6TAO4cO7kyFNPQHLsQM9NJbYbEAiKRdhMC49kynj7rs7o4
AuOh+BXBszePqsdqChHdItt8k1BKRFm4RphAQ5QISyeR6LznXSvAvo81vKbwTssX
cX7tRzIiw4WpVnphl3q13RWiH1k8OMGOisHHGLlrBjTa8ZcDz6p+p+5dk8ojhgls
xcY4SfgRI6suDfFBcVmjIa4pob0PmOx26uqmMdDpunv7sbzJ2MJvTVgkAq3hxCY6
J3jwZ+dCK5Ji7+UEVspeMrKuHHjciesXSfDI9oj1Fg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxig1Ma3Zgk8jTIQMMFC6
hz4pYodqhU9YUiKdzKNDdIx45P4QM6rZcJFzSSF4AWliB9Sbr4yGVUFzgtXsnX+r
4ez5whv0gogRQv7huS+DhNdEkrh2KHxbXsiYIvKpKh7Fr6E9BqdVPiZbUpkM6jUG
6vHrTSaFYqzErZ7SjEigLJ2Mgl0DjfvpLQ8bZrFp0kwA3dRBCFHAdgyf1nT8DT+g
4WsPoyQ76V0H6oQ2F4FVFzHWJi0y4iYMZE1bh6hboF0wJlBCXBUnzKfQsiN+9XAC
KawXG1F7E92TEjhHP8ppvEnDr+mH7VRzzKqWH8M9kj1pTyaPCRMFoDatUxSa1f/w
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17198977582128422416182951678469188345
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maastricht'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maatschap Koenen en Co'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nps.koenenenco.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25015011583149800358907916146539205820961552733274450958805947698654167039114271799546239329919548845984236497732722977524024200291742886669617656120605752812558594307588910108735947807036075266329253061400396272069468162364883691256124439709985545672884528876186584057224794159821594157190919126820388909515658636824382906834491958182529702226303534589663325003909856785291137497268163834825704288065476054498965000330844022598625049449412675980776868860423531458549709786035574959528198095533500781948092336456225125811426545320908761889825391841224223869607145841453737935649270185488043099471481421246803942043883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0774c1b16c70557742dd93e4bb2b4cef2670ef3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nps.koenenenco.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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