www.westpoint.edu

- US Military Academy -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:f5:b9:d8:76:34:a9:e7:21:71:aa:5f:cd:4a:c0:6b was issued on by DigiCert Inc.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

US Military Academy

Organization: US Military Academy
State / Province: New York
Locality: West Point
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:f5:b9:d8:76:34:a9:e7:21:71:aa:5f:cd:4a:c0:6b
Serial Number (int): 18555846071187615401946873258903781483
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3f:30:b7:80:08:1e:d7:60:36:c1:c0:b5:e0:77:a1:d7:6a:ee:35:c0
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): f4:ed:7c:2a:34:47:ba:99:2b:8e:c7:e3:5e:4d:2e:4b:5d:48:d8:00
Fingerprint (sha256): 66:51:35:b2:c2:ce:53:36:7a:07:a9:a4:0e:3b:8d:a3:d9:68:29:47:29:06:fb:b0:e6:46:c0:d8:dd:7a:cb:a9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl

Check the revocation status for certificate www.westpoint.edu

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.westpoint.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.westpoint.edu
westpoint.edu
www.usma.edu
usma.edu
my.westpoint.edu
fieldforce.westpoint.edu
fieldforce.usma.edu
apps.westpoint.edu
apps.usma.edu
cis.westpoint.edu
cis.usma.edu
survey.westpoint.edu
smtp.westpoint.edu
courses.westpoint.edu
nominations.westpoint.edu
nominations.usma.edu
candidate.westpoint.edu
candidate.usma.edu
eventscalendar.westpoint.edu
graybookmanager.westpoint.edu
mwi.usma.edu
mwi.westpoint.edu
juniorofficer.westpoint.edu

Other certificates including the domain name westpoint.edu

(limited to 100 certificates)
www.westpoint.edu
oema.westpoint.edu
www.westpoint.edu
courses.westpoint.edu
help.westpoint.edu
www.westpoint.edu
NOMINATIONS.USMA.EDU
library.westpoint.edu
westpoint.edu
www.westpoint.edu
survey.westpoint.edu
westpoint.edu
help.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
help.westpoint.edu
westpoint.edu
westpoint.edu
graybooks.westpoint.edu
www.westpoint.edu
oema.westpoint.edu
graybooks.westpoint.edu
apply.westpoint.edu
graybooks.westpoint.edu
researcher.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
*.blackbelthelp.com
digitalcommons.westpoint.edu
digitalcommons.westpoint.edu
library.westpoint.edu
library.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
westpoint.edu
FIELDFORCE.WESTPOINT.EDU
westpoint.edu
eecscourses.westpoint.edu
www.westpoint.edu
oema.westpoint.edu
westpoint.edu
oema.army.mil
aimings.westpoint.edu
halo.westpoint.edu
www.westpoint.edu
www.westpoint.edu
apply.westpoint.edu
*.blackbelthelp.com
help.westpoint.edu
*.blackbelthelp.com
www.westpoint.edu
www.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
graybooks.westpoint.edu
westpoint.edu
eecscourses.westpoint.edu
survey.westpoint.edu
ninjio.westpoint.edu
www.westpoint.edu
westpoint.edu
library.westpoint.edu
FIELDFORCE.WESTPOINT.EDU
help.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
www.westpoint.edu
nominations.usma.edu
www.westpoint.edu
westpoint.edu
www.westpoint.edu
www.westpoint.edu
ams-external.westpoint.edu
www.westpoint.edu
westpoint.edu
candidate.usma.edu
ninjio.westpoint.edu
westpoint.edu
westpoint.edu
ctc.westpoint.edu
athena.westpoint.edu
NOMINATIONS.USMA.EDU
FIELDFORCE.WESTPOINT.EDU
*.blackbelthelp.com
www.westpoint.edu
www.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
help.westpoint.edu
help.westpoint.edu
FIELDFORCE.WESTPOINT.EDU
eecscourses.westpoint.edu
insiderthreat.westpoint.edu
westpoint.edu
digitalcommons.westpoint.edu
westpoint.edu
www.westpoint.edu
www.westpoint.edu

Certificate

The complete raw certificate details for www.westpoint.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iwL1DLMbRXqXxYS8+os
L/xFP+wlPRkcxnT/BUVeysJRdwiyD/oNSLLfKns6BEnnKUJCyMTL2Bn5FcOHz10c
yndAOzhtvdXmCgmr1mLAJX3Wbecjfzk1oCd0O8/7p2WdFYP99LPJ4na4d3Amp/Fn
6N6AgIq5pq6A3EH5ezMJ2U0FBb0tibs6YQtAGIACWNr1vGTPPurWRPrOJGI79Pjk
zCUYcImclHrO21Tou4kRE8CAjsZBD6ZNROersKobRSVPr8r7Tkv/TiIsgpH+LQ5z
FaqxY3eyqA3VZe9wlOGHKL1NyZmzN/KRK8YNOx/w9IChAamCQYjGo0kBJPkl/UhD
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18555846071187615401946873258903781483
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Point'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US Military Academy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.westpoint.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27036717256746539306369873658154258448905055737485044561295298776546427110379177064508729190812434126483369044064329350190585330643409899048142231501009092202337030676937450302002549077060326756204198816337442191270206784614546503520663044360879402593660821678495470554806073321345034017394831090814347708061423902750614700833119203443711999809639546259702837114945158368722565857818730366469394524443287235248412581720366644639744179081625882668743849101267132138452876855230396713125557990339893530894355994727389376481172944217986563409965664642301973743922939642572141575206404805769246822658032135793210915570467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f30b780081ed76036c1c0b5e077a1d76aee35c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (477 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldforce.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldforce.usma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.usma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.usma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nominations.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nominations.usma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candidate.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candidate.usma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventscalendar.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graybookmanager.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mwi.usma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mwi.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorofficer.westpoint.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00251aefc818185bd983a08eb9eba28cc531daa860d69c9a9c6807779a3c01e72b63f0d74a399f1fe038cdfa02fe7c57b84bd23277ccc55ff592dd408da3e5d9972175e9179991ea856a8b0e69b716a81cf68946a026a37d4fcae37cafed1285abe50b78cd58635136a14acedbafe82d710230eb8de6ea82105c2080057e2b600d08c828918511587a4397fd865fc252b7ec9c12580391da118e8201d51d367ff50e74649f0497b13e12bc57d7afbf6809ddc86c8d04823f16a247ddc6916fad27ac2850a979e2a56e7b3094debecacb7bba22635e5f39ec0a101f02a79438835356773920c2b55a841f7a49624e4ee5bee2ba82604210f06d18405815be823e99