secure4.nexternal.com

- Nexternal Solutions, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:d0:93:34:51:3b:9c:2a:53:36:86:52:ec:2a:ba:a2 was issued on by DigiCert Inc.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Nexternal Solutions, Inc.

Organization: Nexternal Solutions, Inc.
Organization unit: DEVELOPMENT
State / Province: California
Locality: Carlsbad
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:d0:93:34:51:3b:9c:2a:53:36:86:52:ec:2a:ba:a2
Serial Number (int): 10387579376286192683175787861732145826
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 27:ab:10:b0:bf:d6:9a:5c:06:3c:1f:1d:d9:e4:d0:15:e0:9a:d2:a2
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): f6:fe:78:3e:23:55:7f:22:59:26:8c:30:e4:55:54:72:67:fd:77:21
Fingerprint (sha256): 70:e1:22:be:90:f0:95:34:dd:fa:89:68:5e:0c:55:9e:55:90:9b:00:9f:cc:ef:1c:d0:2d:74:cd:6c:41:8e:ff

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate secure4.nexternal.com

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure4.nexternal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure4.nexternal.com
store.andrewwill.com
store.ojaivineyard.com
store.enginepartscenter.com
store.prolens.com
store.cgtwines.com
shop.goshthatsgood.com
store.crumbcake.net
store.speechrecsolutions.com
shop.pastureprimewagyu.com
shop.pureroom.com
store.omgoliveoils.com
store.christiangiftsplace.com
stores.uniteddentalparts.com
shop.kenwrightcellars.com
store.thegreenpharmacy.com
store.foxenvineyard.com
store.samsonjuicers.com
store.trurovineyardsofcapecod.com
store.vacmotorsports.com
store.mauiwine.com
wineshop.harrisestatevineyards.com
shop.gaparmour.com
shop.vsl3.com
shop.proxeed.com
wineshop.heritageschoolvineyards.com
shop.konacoffeeandtea.com
store.brooklynoenology.com
store.fictionsbeauty.com
store.1886malt.com
store.newkentwinery.com
shop.ventosavineyards.com
shop.buttonwoodgrove.com
www.store.pronetcycling.com
shop.preakness.com
shop.mazzocco.com
store.appliedequinepodiatry.org
store.atlantagladiators.com
shop.seattlewineoutlet.com
store.mvmsinc.com
shop.medicshoesusa.com
gifting.cliffamily.com
store.zmax.com
shop.dutchhenry.com
market.mixon.com
shop.stripersniper.com
shop.betsyann.com
store.worldteccorp.com
store.caviarlover.com
shop.npicpet.com
store.rstuartandco.com
orders.masterfitinc.com
shop.frogtown.com
shop.movidaoils.com
shop.biosb.com
store.luminasdirect.com
wholesale.buddybrew.com

Other certificates including the domain name nexternal.com

(limited to 100 certificates)
secure16.nexternal.com
investecstatus.mambu.com
secure19.nexternal.com
secure14.nexternal.com
secure17.nexternal.com
secure1.nexternal.com
secure2.nexternal.com
secure1.nexternal.com
secure3.nexternal.com
secure10.nexternal.com
secure2.nexternal.com
design.nexternal.tcpsg.net
secure12.nexternal.com
basp.status.ato.gov.au
secure17.nexternal.com
basp.status.ato.gov.au
secure1.nexternal.com
design.nexternal.tcpsg.net
secure12.nexternal.com
secure3.nexternal.com
*.cachefly.net
secure2.nexternal.com
secure1.nexternal.com
secure4.nexternal.com
basp.status.ato.gov.au
secure3.nexternal.com
basp.status.ato.gov.au
secure2.nexternal.com
basp.status.ato.gov.au
*.cachefly.net
secure1.nexternal.com
*.cachefly.net
*.cachefly.net
secure11.nexternal.com
secure3.nexternal.com
investecstatus.mambu.com
secure10.nexternal.com
secure5.nexternal.com
secure14.nexternal.com
*.nexternal.com
secure1.nexternal.com
secure4.nexternal.com
*.nexternal.com
secure2.nexternal.com
*.cachefly.net
secure3.nexternal.com
ecommerce-blog.nexternal.com
*.cachefly.net
secure4.nexternal.com
basp.status.ato.gov.au
banknorth.status.mambu.com
secure5.nexternal.com
ecommerce-blog.nexternal.com
secure16.nexternal.com
*.nexternal.com
investecstatus.mambu.com
secure1.nexternal.com
basp.status.ato.gov.au
*.cachefly.net
secure2.nexternal.com
*.cachefly.net
secure19.nexternal.com
secure1.nexternal.com
secure4.nexternal.com
secure18.nexternal.com
secure2.nexternal.com
ecommerce-blog.nexternal.com
*.nexternal.com
secure14.nexternal.com
*.cachefly.net
secure5.nexternal.com
secure12.nexternal.com
secure3.nexternal.com
*.cachefly.net
*.cachefly.net
secure17.nexternal.com
secure12.nexternal.com
secure5.nexternal.com
*.cachefly.net
ecommerce-blog.nexternal.com
basp.status.ato.gov.au
secure14.nexternal.com
basp.status.ato.gov.au
secure18.nexternal.com
secure10.nexternal.com
investecstatus.mambu.com
secure10.nexternal.com
secure1.nexternal.com
secure3.nexternal.com
secure16.nexternal.com
basp.status.ato.gov.au
*.cachefly.net
*.cachefly.net
secure10.nexternal.com
*.cachefly.net
secure10.nexternal.com
secure3.nexternal.com
secure1.nexternal.com
*.cachefly.net
secure16.nexternal.com

Certificate

The complete raw certificate details for secure4.nexternal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMGTCCCwGgAwIBAgIQB9CTNFE7nCpTNoZS7Cq6ojANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwMTMxMDAwMDAwWhcN
MjAwNjI3MTIwMDAwWjCBjzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3Ju
aWExETAPBgNVBAcTCENhcmxzYmFkMSIwIAYDVQQKExlOZXh0ZXJuYWwgU29sdXRp
b25zLCBJbmMuMRQwEgYDVQQLEwtERVZFTE9QTUVOVDEeMBwGA1UEAxMVc2VjdXJl
NC5uZXh0ZXJuYWwuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
jqKG4Rhge6e4NfYTycsGIDtAgNQa9vLsBUWZxwbIAgxFXlXBm729OvP+l0khYN6j
SRi9w/8Uwv0N2ntY9B9Fu+S27VWvss//4wLjC+2P5CxU/y+4uATWYWSsWdD/Iick
ra/XTStu5J59xpjmfVoqmLZCXXkVsVlN2gnxxzlIcpxF4ytaU/BFNEvy4F6021FC
WbxeUGVBy7ETDeltswR6vzzZEfsPQj2dRE0ntrUiIvQvIv4nUavojnrdKnQbcmAb
JxKS6MRKB/7BVaN/UZ7mQeZ3EzMMC6aqOLjGOH91VmXlg6i9DoPWNVe5xs6UnP3X
ff55dZ7afi1cM/AdT6ymtQIDAQABo4IIsDCCCKwwHwYDVR0jBBgwFoAUD4BhHIIx
YdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFCerELC/1ppcBjwfHdnk0BXgmtKiMIIF
cAYDVR0RBIIFZzCCBWOCFXNlY3VyZTQubmV4dGVybmFsLmNvbYIUc3RvcmUuYW5k
cmV3d2lsbC5jb22CFnN0b3JlLm9qYWl2aW5leWFyZC5jb22CG3N0b3JlLmVuZ2lu
ZXBhcnRzY2VudGVyLmNvbYIRc3RvcmUucHJvbGVucy5jb22CEnN0b3JlLmNndHdp
bmVzLmNvbYIWc2hvcC5nb3NodGhhdHNnb29kLmNvbYITc3RvcmUuY3J1bWJjYWtl
Lm5ldIIcc3RvcmUuc3BlZWNocmVjc29sdXRpb25zLmNvbYIac2hvcC5wYXN0dXJl
cHJpbWV3YWd5dS5jb22CEXNob3AucHVyZXJvb20uY29tghZzdG9yZS5vbWdvbGl2
ZW9pbHMuY29tgh1zdG9yZS5jaHJpc3RpYW5naWZ0c3BsYWNlLmNvbYIcc3RvcmVz
LnVuaXRlZGRlbnRhbHBhcnRzLmNvbYIZc2hvcC5rZW53cmlnaHRjZWxsYXJzLmNv
bYIac3RvcmUudGhlZ3JlZW5waGFybWFjeS5jb22CF3N0b3JlLmZveGVudmluZXlh
cmQuY29tghdzdG9yZS5zYW1zb25qdWljZXJzLmNvbYIhc3RvcmUudHJ1cm92aW5l
eWFyZHNvZmNhcGVjb2QuY29tghhzdG9yZS52YWNtb3RvcnNwb3J0cy5jb22CEnN0
b3JlLm1hdWl3aW5lLmNvbYIid2luZXNob3AuaGFycmlzZXN0YXRldmluZXlhcmRz
LmNvbYISc2hvcC5nYXBhcm1vdXIuY29tgg1zaG9wLnZzbDMuY29tghBzaG9wLnBy
b3hlZWQuY29tgiR3aW5lc2hvcC5oZXJpdGFnZXNjaG9vbHZpbmV5YXJkcy5jb22C
GXNob3Aua29uYWNvZmZlZWFuZHRlYS5jb22CGnN0b3JlLmJyb29rbHlub2Vub2xv
Z3kuY29tghhzdG9yZS5maWN0aW9uc2JlYXV0eS5jb22CEnN0b3JlLjE4ODZtYWx0
LmNvbYIXc3RvcmUubmV3a2VudHdpbmVyeS5jb22CGXNob3AudmVudG9zYXZpbmV5
YXJkcy5jb22CGHNob3AuYnV0dG9ud29vZGdyb3ZlLmNvbYIbd3d3LnN0b3JlLnBy
b25ldGN5Y2xpbmcuY29tghJzaG9wLnByZWFrbmVzcy5jb22CEXNob3AubWF6em9j
Y28uY29tgh9zdG9yZS5hcHBsaWVkZXF1aW5lcG9kaWF0cnkub3JnghtzdG9yZS5h
dGxhbnRhZ2xhZGlhdG9ycy5jb22CGnNob3Auc2VhdHRsZXdpbmVvdXRsZXQuY29t
ghFzdG9yZS5tdm1zaW5jLmNvbYIWc2hvcC5tZWRpY3Nob2VzdXNhLmNvbYIWZ2lm
dGluZy5jbGlmZmFtaWx5LmNvbYIOc3RvcmUuem1heC5jb22CE3Nob3AuZHV0Y2ho
ZW5yeS5jb22CEG1hcmtldC5taXhvbi5jb22CFnNob3Auc3RyaXBlcnNuaXBlci5j
b22CEXNob3AuYmV0c3lhbm4uY29tghZzdG9yZS53b3JsZHRlY2NvcnAuY29tghVz
dG9yZS5jYXZpYXJsb3Zlci5jb22CEHNob3AubnBpY3BldC5jb22CFnN0b3JlLnJz
dHVhcnRhbmRjby5jb22CF29yZGVycy5tYXN0ZXJmaXRpbmMuY29tghFzaG9wLmZy
b2d0b3duLmNvbYITc2hvcC5tb3ZpZGFvaWxzLmNvbYIOc2hvcC5iaW9zYi5jb22C
F3N0b3JlLmx1bWluYXNkaXJlY3QuY29tghd3aG9sZXNhbGUuYnVkZHlicmV3LmNv
bTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2Nh
LXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc3Nj
YS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUF
BwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB8Bggr
BgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNv
bTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lD
ZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMIIBfgYKKwYB
BAHWeQIEAgSCAW4EggFqAWgAdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJ
eqj9ywAAAWilhXLxAAAEAwBHMEUCIQDVMpRFAK98cjodDRRr522T+IS5uTQEnjcD
rrEAmbsdeQIgOteWgP/bcXanKgcZq+lkgZ4RXtobc1ws1vN+lS3yIsMAdgCHdb/n
WXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWilhXPOAAAEAwBHMEUCIBi/
TQCXnu0LxGFVE3JbdDoAlNtnJ9iV8iIJw8gMhnNBAiEA4OJZRf3NhRh0nfXgzPb6
D75cx4IM7yb+GC4Sxt9fqe0AdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt
74uQXgAAAWilhXMGAAAEAwBHMEUCIGDy7y98P8TsiALi/Z27EVOPHfDyil0QRM6m
6VyDhSsbAiEA1gD2oSATkPQbtgug5vpt6/FETPYt4d+fQh5Oudhzm7AwDQYJKoZI
hvcNAQELBQADggEBAAr+DWls22B6oQZvhaNd8SWeilAYuuJNsOLDRwb7IVGMZdXy
3TnBNe1rYMVP7a4vKNR7DIouuoHs5J71pjzcWgKiE8IDyPhRALN7507FlwutZz16
JTbeOtQngtOKpgM/nW3yQnJU4ypy9mZNIiCWV2lnDv7MzU0YSm/rOGIGemQvva/a
MkN/374ILO2hB+7jt/V+dOOh7Jh9LrU+dSBZ2c+J/PcQjoQLoLO2IFIIxss+3Wcs
Hcsr3ixc5k9Tl47Q10seNt5hHb5UwwwmDeugNF4ExH/vQkKkyB+6SlzsGhKVzRww
LMfooW8vTAU6gqrMLuPW9+TWLL5c661OsX022M4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqKG4Rhge6e4NfYTycsG
IDtAgNQa9vLsBUWZxwbIAgxFXlXBm729OvP+l0khYN6jSRi9w/8Uwv0N2ntY9B9F
u+S27VWvss//4wLjC+2P5CxU/y+4uATWYWSsWdD/Iickra/XTStu5J59xpjmfVoq
mLZCXXkVsVlN2gnxxzlIcpxF4ytaU/BFNEvy4F6021FCWbxeUGVBy7ETDeltswR6
vzzZEfsPQj2dRE0ntrUiIvQvIv4nUavojnrdKnQbcmAbJxKS6MRKB/7BVaN/UZ7m
QeZ3EzMMC6aqOLjGOH91VmXlg6i9DoPWNVe5xs6UnP3Xff55dZ7afi1cM/AdT6ym
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10387579376286192683175787861732145826
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Carlsbad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nexternal Solutions, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DEVELOPMENT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure4.nexternal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18005984292897134710451785961112227709421964307048389673124039378519493405564302642516714591892195284306212026410068560690049179480307442032570753017888463278509689401221928294889552617154627899239411392918530019962807288881595637460983901427710649675772623970238457946053816784804629353201030323726669672400697138657809388506445317552544463147026300597910400089145728353180220691255201522452542998630045777187008288173498876072057854808730191176292224515081223277741805018445463405361333800070789261045473941961105251471362632923506715814791217945431244774003991147436033839403792360178679539395666580492247005701813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27ab10b0bfd69a5c063c1f1dd9e4d015e09ad2a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1383 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure4.nexternal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.andrewwill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.ojaivineyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.enginepartscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.prolens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.cgtwines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goshthatsgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.crumbcake.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.speechrecsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pastureprimewagyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.pureroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.omgoliveoils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.christiangiftsplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.uniteddentalparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kenwrightcellars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.thegreenpharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.foxenvineyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.samsonjuicers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.trurovineyardsofcapecod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.vacmotorsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mauiwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineshop.harrisestatevineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.gaparmour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.vsl3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.proxeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineshop.heritageschoolvineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.konacoffeeandtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.brooklynoenology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.fictionsbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.1886malt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.newkentwinery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ventosavineyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.buttonwoodgrove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.store.pronetcycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.preakness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.mazzocco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.appliedequinepodiatry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.atlantagladiators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.seattlewineoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mvmsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.medicshoesusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifting.cliffamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.zmax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.dutchhenry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'market.mixon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.stripersniper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.betsyann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.worldteccorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.caviarlover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.npicpet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.rstuartandco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.masterfitinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.frogtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.movidaoils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.biosb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.luminasdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesale.buddybrew.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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