userservices.vip.symantec.com

- Symantec Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:53:a3:c6:34:dd:09:83:f5:5c:23:d1:f6:ef:41:46 was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Information Protection
State / Province: California
Locality: Mountain View
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:a3:c6:34:dd:09:83:f5:5c:23:d1:f6:ef:41:46
Serial Number (int): 4421966362915149410844041025732690246
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: dc:e8:df:33:0a:62:a5:f0:a2:b1:54:67:8b:b7:cc:95:af:a0:ef:08
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): c5:0e:c9:76:02:99:c5:a6:c2:33:6a:e1:22:49:81:c9:09:70:dd:17
Fingerprint (sha256): 77:97:17:1e:92:57:55:80:01:ac:f4:45:9e:a2:34:ec:92:50:58:82:92:d7:d1:dd:2a:18:69:14:ca:f2:e9:96

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate userservices.vip.symantec.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for userservices.vip.symantec.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

userservices.a.vip.symantec.com
userservices.b.vip.symantec.com
userservices.cl.vip.symantec.com
userservices.dc.vip.symantec.com
userservices.nr.cl.vip.symantec.com
vipuserservices.verisign.com
userservices.symauth.com
userservices.vip.symantec.com

Other certificates including the domain name symantec.com

(limited to 100 certificates)
787.Symantec.com
www.verisign.com
dub2comgwypin01.symc.symantec.com
amtrust.kinnser.com
statuspage.io
msl.ges.symantec.com
revprouat.symc.symantec.com
shasta-anti-spam-stats.symantec.com
tools.symc.symantec.com
cloudmarketplace.status.symantec.com
UAT-OIDU1.GES.SYMANTEC.COM
statuspage.io
symantec.com
kb-thawte.symantec.com
d78de818-a0eb-4260-806a-d56c49087402.ds.dlp.protect.symantec.com
cwp.status.symantec.com
IMWS-SYMWISE-QA.SYMC.SYMANTEC.COM
CPESLB1.GES.SYMANTEC.COM
statuspage.io
mssvpn.symantec.com
c6aea99a-29b8-4e5c-8305-294aeddce88d.ds.dlp.protect.symantec.com
status.accelitas.io
packages-mountainview.symc.symantec.com
cnniptccmpin13.net.symantec.com
asb1-mpi-ise-2.net.symantec.com
firewallendpoint.vip.symantec.com
AEMOKMANALYTICS-UAT.SYMC.SYMANTEC.COM
QLIKSENSEUAT.SYMANTEC.COM
statuspage.io
statuspage.io
cwp.status.symantec.com
ica.symantec.com
MVC1IPTEGWPIN01.NET.SYMANTEC.COM
eloqua-trustservices.symantec.com
statuspage.io
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
licensing.dmas.symantec.com
pgp.symantec.com
su1-staging.nbu.symantec.com
help.gitlinq.com
usea1.r3.securitycloud.symantec.com
statuspage.io
cons-support-jp1.symantec.com
vip.symantec.com
DEEPSIGHTADMIN.SYMANTEC.COM
mftint-nam.ges.symantec.com
content-symwise-app-west.symc.symantec.com
tus3tmsappdin01.symc.symantec.com
shasta-rrs-test.symantec.com
www-uat-west.symantec.com
swi-inv-admin-uat.symc.symantec.com
rundeck-tus3.ges.symantec.com
fusestatus.com
scmnet50qa.symc.symantec.com
www.symantec.com
telemetry.veritas.com
PARTNERNET-DEV.NBU.SYMANTEC.COM
ssltest-evsgc.jp.websecurity.symantec.com
94b36575-cdd1-4708-8061-e12bf9a11ad1.ds.dlp.protect.symantec.com
INTMPG-QA.SYMC.SYMANTEC.COM
cebealt-int2.norton.com
EMS-UAT-LICENSING.SYMANTEC.COM
sice.stage.enc.protect.symantec.com
contentauthor-uat1.symc.Symantec.com
loggeruat.cclab.symantec.com
ssltest-sha2fc.jp.websecurity.symantec.com
icdm.status.symantec.com
kb-thawte-de.symantec.com
csas.norton.com
dmshealth.dealertrack.com
SPR1IPTCUCPIN01.symc.symantec.com
analyzer.symantec.com
IMWS-SYMWISE-DEV-APP-TUS3.SYMC.SYMANTEC.COM
jira.ges.symantec.com
tus1csswebpin01.symc.symantec.com
appisolation.status.symantec.com
jenkins-stage-tus3.ges.symantec.com
tenant0-p01-smtp.na.dlp.protect.symantec.com
statuspage.io
ASB1VVCVCCPIN01.symc.symantec.com
shelladdin.symantec.com
userservices.vip.symantec.com
statuspage.io
products.websecurity.symantec.com
symdl.symc.symantec.com
6h60rqz7vjhj.stspg-customer.com.como3.pl
TUSVC-09.SYMC.SYMANTEC.COM
SYMPAY-QA22.GES.SYMANTEC.COM
SUPPORTPORTAL-WEST-STAGE.SYMANTEC.COM
maintenance.blackbaud.com
exftpp.symantec.com
tusvipapplpi01.symc.symantec.com
statuspage.io
tools-review.engba.symantec.com
ev1-0121.ev12311.Symantec.com
MFTBC.SYMANTEC.COM
statuspage.io
avs-avpg.crsi.symantec.com
haystatus.mambu.com
CUL1RFPSEPQIN23.symc.symantec.com

Certificate

The complete raw certificate details for userservices.vip.symantec.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pM3rcvRjsgf7r8C7pBg
i3gwgJmGbe3jHiyG5CJpbgl3cN3zrsNEy7r+OyfMz7L3OxvEMNEGla+P3tfPg10K
WAPVPHGnm2eY6Ni/56cn1alcoPaJ62SfoiFrF8m4eIt6leXiHMEYyC1mIXxiacVU
Y9ShYQZ7Qd4kie+faKfOjoQuaIDDd2zMT21SbU4KYFZNNseF3CqAN263P7kxt7kn
kly4xw8lkcp3mRYYgc6brg1DtKThDZ/COv/UjcUVAhbc6YP1x5wDRY69w4LEzgpS
p2LwPSQJZSYB5jH1uYJOqtNO+oyNEmIs3yYL2Wjio6HLBt3OCH4A33D/Pi1IYXHy
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4421966362915149410844041025732690246
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Protection'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'userservices.vip.symantec.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28097499355256451484750541560879424637331067278195251928282531859982856839121097733083868736775838653891546271433374534485401551005464180671356746492341536678538628959892502851507050479536908716398803877211986987592978352628208215656915950597686600695518353253551075168389009110698008067105178063878502847926515154092248559896115113223629394768702497895485765845931047803881384620219500115758108235479186908866153398258738132457070058199180611582116312944443655636547052162719415446653464580226370450616919766903525855596152119343671016460836154878731093745975451489536665067297117696714378751690357853453078236361411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dce8df330a62a5f0a2b154678bb7cc95afa0ef08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (262 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userservices.a.vip.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userservices.b.vip.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userservices.cl.vip.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userservices.dc.vip.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userservices.nr.cl.vip.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipuserservices.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userservices.symauth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userservices.vip.symantec.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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