silverscript.sit3.meddweb.net

- CVS Pharmacy Inc -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:73:31:a9:e8:47:cd:0a:15:bb:55:45:d3:e3:77:29 was issued on by DigiCert Inc.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CVS Pharmacy Inc

Organization: CVS Pharmacy Inc
Organization unit: I/S Security
State / Province: Rhode Island
Locality: Woonsocket
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:73:31:a9:e8:47:cd:0a:15:bb:55:45:d3:e3:77:29
Serial Number (int): 19207313379237695523365195329780807465
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c4:da:1b:78:9d:1c:ea:95:e0:7c:86:40:b8:69:2b:12:ff:21:56:f0
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 6d:0d:54:61:8f:be:80:36:ad:4d:66:82:a1:b6:30:b5:14:56:d5:af
Fingerprint (sha256): 67:73:0b:70:b2:82:0f:1f:5e:00:c2:2c:c4:8e:c7:a5:5b:f0:a6:b1:ba:07:c0:a8:8b:aa:62:9e:c3:73:31:52

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate silverscript.sit3.meddweb.net

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for silverscript.sit3.meddweb.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sit3a.meddweb.net
groups.rxmedicareplans.sit3a.meddweb.net
enroll.medicarepartdportal.sit3a.meddweb.net
paz1eldpdl4v.corp.cvscaremark.com
paz1eldpdl3v.corp.cvscaremark.com
silverscript.sit3a.meddweb.net
*.sit3.meddweb.net
groups.rxmedicareplans.sit3.meddweb.net
silverscript.sit3.meddweb.net

Other certificates including the domain name meddweb.net

(limited to 100 certificates)
*.prepd.meddweb.net
silverscript.sit4a.meddweb.net
silverscript.dev1.meddweb.net
rxservices.prepd.meddweb.net
*.sit1.meddweb.net
*.sit1a.meddweb.net
paz1mdmapl1v.corp.cvscaremark.com
dev1xws85.caremark.com
*.sit2.meddweb.net
cdrd.dev1.meddweb.net
silverscript.dev1.meddweb.net
*.sit4.meddweb.net
*.sit1a.meddweb.net
silverscript.dev3.meddweb.net
dev1xws85.caremark.com
silverscript.dev3.meddweb.net
silverscript.sit3.meddweb.net
silverscript.sit3.meddweb.net
*.sit1a.meddweb.net
rxservices.prepd.meddweb.net
*.sit1a.meddweb.net
*.sit1a.meddweb.net
silverscript.sit1a.meddweb.net
silverscript.sit1a.meddweb.net
silverscript.sit2a.meddweb.net
silverscript.sit2a.meddweb.net
*.sit1a.meddweb.net
*.sit1a.meddweb.net
silverscript.sit3.meddweb.net
silverscript.dev1.meddweb.net
*.sit2.meddweb.net
silverscript.sit1a.meddweb.net
silverscript.dev3.meddweb.net
*.sit1a.meddweb.net
dev1xws85.caremark.com
silverscript.prepd.meddweb.net
silverscript.dev2.meddweb.net
*.sit2.meddweb.net
silverscript.dev2.meddweb.net
www.meddweb.net
*.sit2.meddweb.net
silverscript.sit2a.meddweb.net
silverscript.sit1a.meddweb.net
*.sit1a.meddweb.net
silverscript.dev3.meddweb.net
silverscript.sit1a.meddweb.net
silverscript.sit3.meddweb.net
silverscript.sit3.meddweb.net
silverscript.sit1a.meddweb.net
*.sit3.meddweb.net
*.test2.meddweb.net
silverscript.sit3.meddweb.net
silverscript.prepd.meddweb.net
*.sit1a.meddweb.net
silverscript.sit1a.meddweb.net
*.test3.meddweb.net
dev1xws85.caremark.com
*.sit1a.meddweb.net
*.sit1a.meddweb.net
silverscript.sit3.meddweb.net
silverscript.sit2a.meddweb.net
silverscript.sit1a.meddweb.net
*.sit3.meddweb.net
silverscript.sit1a.meddweb.net
cdrd.dev1.meddweb.net
silverscript.sit4a.meddweb.net
*.test1.meddweb.net

Certificate

The complete raw certificate details for silverscript.sit3.meddweb.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH5zCCBs+gAwIBAgIQDnMxqehHzQoVu1VF0+N3KTANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwODE1MDAwMDAwWhcN
MjEwNjI5MTIwMDAwWjCBkzELMAkGA1UEBhMCVVMxFTATBgNVBAgTDFJob2RlIElz
bGFuZDETMBEGA1UEBxMKV29vbnNvY2tldDEZMBcGA1UEChMQQ1ZTIFBoYXJtYWN5
IEluYzEVMBMGA1UECxMMSS9TIFNlY3VyaXR5MSYwJAYDVQQDEx1zaWx2ZXJzY3Jp
cHQuc2l0My5tZWRkd2ViLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJfFxsc72aqnd7Yo7QULnXNw9OqbcpeuMfOcjhxElvTEGqxVfuJhxPlrq0Sw
9Rc8ClZFUnzG6KaY1M5l4zFsljnV4OFCIIHsYatQCBBep1CoM2gajuCpjwucXeHk
MHWYXPGqs/m+S/c4TTsR80z6RFSCOZVmdCOSxRNYh78mczZ7lwOTTyv0Nhb3rBUA
nqFMjhCoDmWwPw3OoycApfwfEzfqQesqD7ymVu7upCVHzZEKy2U+AzpoHz4Flgl1
1ddu9Gnic9iw2PoxGHxxqEQnX6NxAvLKNqikphLn+DNXQGHPUQ8ZjRvtKVn/XoaO
jcnFVpds9zGbOfMGVTLCpHYP650CAwEAAaOCBHowggR2MB8GA1UdIwQYMBaAFA+A
YRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBTE2ht4nRzqleB8hkC4aSsS/yFW
8DCCATwGA1UdEQSCATMwggEvghMqLnNpdDNhLm1lZGR3ZWIubmV0gihncm91cHMu
cnhtZWRpY2FyZXBsYW5zLnNpdDNhLm1lZGR3ZWIubmV0gixlbnJvbGwubWVkaWNh
cmVwYXJ0ZHBvcnRhbC5zaXQzYS5tZWRkd2ViLm5ldIIhcGF6MWVsZHBkbDR2LmNv
cnAuY3ZzY2FyZW1hcmsuY29tgiFwYXoxZWxkcGRsM3YuY29ycC5jdnNjYXJlbWFy
ay5jb22CHnNpbHZlcnNjcmlwdC5zaXQzYS5tZWRkd2ViLm5ldIISKi5zaXQzLm1l
ZGR3ZWIubmV0gidncm91cHMucnhtZWRpY2FyZXBsYW5zLnNpdDMubWVkZHdlYi5u
ZXSCHXNpbHZlcnNjcmlwdC5zaXQzLm1lZGR3ZWIubmV0MA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2g
K4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6At
oCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwG
A1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3
LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggr
BgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpo
dHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2Vy
dmVyQ0EuY3J0MAkGA1UdEwQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2
AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABbJaidVQAAAQDAEcw
RQIgRnV89VfUsFxDc0d15n8hVALrqn+ropIRk6ZbO57g5b8CIQDJfOp8a6e1nkgL
XlhpgudObR9VEmcOYUI6yLDPnyge5wB2AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1
YMG06v9eoIMPAAABbJaideAAAAQDAEcwRQIhAPE6ijn/DpTj3GSC4jebz09BULae
w1/ox3jaRwAVYKmcAiAjbHFVXc0nAs0H94Af7ZoI39Ia3TZ2r3NrFcz8SdN3CwB3
AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT/TM5a1toGoAAABbJaidOMAAAQDAEgw
RgIhAKsfK7wOjG2FYBQA+UZGkh8wrRk4Po35AgyypondfyGxAiEA9MNy0C468AlS
jkAjPjttO6SxczmYb6Dn2q1FKHIxZD8wDQYJKoZIhvcNAQELBQADggEBAFGBixCC
mktX3V11IEogUBVWZd9uV9dq+fq6zSAkNxEdyMATzUWfvUdphDRlwAcXLYCzBbvX
cMytWnz/um/QB2v00sPWIYu65YCeB/niO4VPJeTlOn6egq/eNqhTvovwRZ7bzU1o
lt3cFJFsx+DEQfTnZsmtiyXK1DPL6gJ12j3Qsrkl5b12FkBm5WMahgvNBXfSWKqz
GCyCmGBWbAfhsjZDngl3aNbjonDOwXD69xHr1jQtiKMnkR5mNtV06XbTHVW8i/4A
eYS1M3B8/1Id+Sdl3RP6p0GzdswqQ8x4Dt7yZYSLXHP8xYss5JOiN29A3YdSoZpo
E0+eeKgdrxvLZrc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8XGxzvZqqd3tijtBQud
c3D06ptyl64x85yOHESW9MQarFV+4mHE+WurRLD1FzwKVkVSfMboppjUzmXjMWyW
OdXg4UIggexhq1AIEF6nUKgzaBqO4KmPC5xd4eQwdZhc8aqz+b5L9zhNOxHzTPpE
VII5lWZ0I5LFE1iHvyZzNnuXA5NPK/Q2FvesFQCeoUyOEKgOZbA/Dc6jJwCl/B8T
N+pB6yoPvKZW7u6kJUfNkQrLZT4DOmgfPgWWCXXV1270aeJz2LDY+jEYfHGoRCdf
o3EC8so2qKSmEuf4M1dAYc9RDxmNG+0pWf9eho6NycVWl2z3MZs58wZVMsKkdg/r
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19207313379237695523365195329780807465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rhode Island'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Woonsocket'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CVS Pharmacy Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'I/S Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'silverscript.sit3.meddweb.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19159511265851950179370037444568510037843563327848673212925137612220044564307247476490369158662097443502486310823609097240431613420559659806814137356516087101026745717484619193788566058075481928357830005372727664150601762962344552962176826375314093929167084927456825194410512443198718765350106951192479720173552888755316438360306859353033112051998337586826207988153239487617745291431179070621219738690669795584438933380140267209156012840712909517495347074277249474477093893193716423463728822256942166179979070924888922546285114663231643831986061093417203430185630714261292896353044861713638263596276624356650710461341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4da1b789d1cea95e07c8640b8692b12ff2156f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (307 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sit3a.meddweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.rxmedicareplans.sit3a.meddweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enroll.medicarepartdportal.sit3a.meddweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paz1eldpdl4v.corp.cvscaremark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paz1eldpdl3v.corp.cvscaremark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverscript.sit3a.meddweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sit3.meddweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groups.rxmedicareplans.sit3.meddweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverscript.sit3.meddweb.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016c96a275540000040300473045022046757cf557d4b05c43734775e67f215402ebaa7faba2921193a65b3b9ee0e5bf022100c97cea7c6ba7b59e480b5e586982e74e6d1f5512670e61423ac8b0cf9f281ee70076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c96a275e00000040300473045022100f13a8a39ff0e94e3dc6482e2379bcf4f4150b69ec35fe8c778da47001560a99c0220236c71555dcd2702cd07f7801fed9a08dfd21add3676af736b15ccfc49d3770b0077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016c96a274e30000040300483046022100ab1f2bbc0e8c6d85601400f94646921f30ad19383e8df9020cb2a689dd7f21b1022100f4c372d02e3af009528e40233e3b6d3ba4b17339986fa0e7daad45287231643f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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