*.tigo.com.sv

- Millicom International Services LLC -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:b5:d5:28:4b:74:04:e8:96:dd:70:db:d8:7c:9e:5f was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Millicom International Services LLC

Organization: Millicom International Services LLC
State / Province: Florida
Locality: Coral Gables
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:b5:d5:28:4b:74:04:e8:96:dd:70:db:d8:7c:9e:5f
Serial Number (int): 10248725047612927599122176646728949343
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a8:35:6a:ea:2b:21:96:13:4a:74:db:d3:e5:1a:f5:0d:d0:32:76:b8
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 86:82:fd:2d:76:94:ef:95:81:4b:21:e2:bd:14:41:fc:09:e8:f2:bf
Fingerprint (sha256): 78:19:02:28:7d:3a:4d:98:f2:c0:c1:c4:6f:62:2c:d0:8f:67:32:18:d9:db:84:e9:be:31:20:47:be:2c:7d:05

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate *.tigo.com.sv

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.tigo.com.sv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tigo.com.sv
tigo.com.sv

Other certificates including the domain name tigo.com.sv

(limited to 100 certificates)
www.epin.tigo.com.sv
*.tigo.com.sv
ingresoOT09.tigo.com.sv
ayuda.tigo.com.py
smscorp.tigo.com.sv
webmail.tigo.com.sv
ayuda.tigo.com.py
*.tigo.com.sv
ayuda.tigo.com.py
business.tigo.com.gt
ayuda.tigo.com.py
sip.sv.tigo.com
knowledge.tigo.com
*.tigo.com.sv
ayuda.tigo.com.py
business.tigo.com.gt
smscorp.tigo.com.sv
*.tigo.com.sv
ayuda.tigo.com.py
ofertas.tigo.com.sv
*.tigo.com.sv
login.tigo.com.sv
ayuda.tigo.com.py
ofertas.tigo.com.sv
www.epin.tigo.com.sv
*.tigo.com.sv
rhttps.sv.tigo.com
ayuda.tigo.com.py
*.tigo.com.sv
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ttk.tigo.com.sv
sip.sv.tigo.com
business.tigo.com.gt
ayuda.tigo.com.py
login.tigo.com.sv
ttk.tigo.com.sv
ttk.tigo.com.sv
ttk.tigo.com.sv
business.tigo.com.gt
ayuda.tigo.com.py
webmail.sv.tigo.com
rhttps.sv.tigo.com
ayuda.tigo.com.py
www.epin.tigo.com.sv
ayuda.tigo.com.py
business.tigo.com.gt
www.epin.tigo.com.sv
login.tigo.com.sv
rsgprimary.telemovil.com.sv
ayuda.tigo.com.py
ayuda.tigo.com.py
business.tigo.com.gt
ttk.tigo.com.sv
cafeteria.tigo.com.sv
ayuda.tigo.com.py
business.tigo.com.gt
ofertas.tigo.com.sv
ofertas.tigo.com.sv
webmail.sv.tigo.com
ayuda.tigo.com.py
sip.sv.tigo.com
tigo.com.sv
*.tigo.com.sv
ttk.tigo.com.sv
ofertas.tigo.com.sv
knowledge.tigo.com
ayuda.tigo.com.py
knowledge.tigo.com
music.tigo.com.sv
ayuda.tigo.com.py
ttk.tigo.com.sv
ayuda.tigo.com.py
ttk.tigo.com.sv
*.tigo.com.sv
sip.sv.tigo.com
ayuda.tigo.com.py
ayuda.tigo.com.py
business.tigo.com.gt
ayuda.tigo.com.py
rhttps.sv.tigo.com
rhttps.sv.tigo.com
business.tigo.com.gt
ayuda.tigo.com.py
ofertas.tigo.com.sv
ayuda.tigo.com.py
www.epin.tigo.com.sv
elearning.tigo.com.sv
rhttps.sv.tigo.com
sip.sv.tigo.com
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.sv
*.tigo.com.sv
ayuda.tigo.com.py
www.epin.tigo.com.sv
rhttps.sv.tigo.com
ayuda.tigo.com.py

Certificate

The complete raw certificate details for *.tigo.com.sv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG+TCCBeGgAwIBAgIQB7XVKEt0BOiW3XDb2HyeXzANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE
aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjQw
MTEyMDAwMDAwWhcNMjUwMjA0MjM1OTU5WjB8MQswCQYDVQQGEwJVUzEQMA4GA1UE
CBMHRmxvcmlkYTEVMBMGA1UEBxMMQ29yYWwgR2FibGVzMSwwKgYDVQQKEyNNaWxs
aWNvbSBJbnRlcm5hdGlvbmFsIFNlcnZpY2VzIExMQzEWMBQGA1UEAwwNKi50aWdv
LmNvbS5zdjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMjo65FfF2mr
klMFun+kHtko0JZfo+WyW0UXhvPFueeZbYpnOONCi1aqDtCRdjYUqLviF+V8YWZ4
B/cqUlCRDy71xoGl/SJ2/6WotE4n5hO8cg9HZdDNLLOvWW5B5BvrM74072bvG1rH
xTXM/y+oKeAUmtrO34AWRy/O9zcURnN197kFmtGyvjozCOPX/cDxyYBF0i8McEM4
3KNNLJjzUwBNiwaSMfidYDnEjhoGaAIYo/L7nos1DijlU/Pd4d6lD7qUAigpDyMn
wLuzVgA/pMbUs+hSMfxn7G7NnhT3eTyOhPJkSSRoXW5HejS+FO8MWdTgpAGb52AF
FO5YW9XI+3ECAwEAAaOCA5gwggOUMB8GA1UdIwQYMBaAFHSFgMBmx9833s+9KTeq
Ax2+7c0XMB0GA1UdDgQWBBSoNWrqKyGWE0p029PlGvUN0DJ2uDAlBgNVHREEHjAc
gg0qLnRpZ28uY29tLnN2ggt0aWdvLmNvbS5zdjA+BgNVHSAENzA1MDMGBmeBDAEC
AjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYD
VR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNl
cnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcmwwSKBGoESGQmh0dHA6
Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcyVExTUlNBU0hBMjU2
MjAyMENBMS0xLmNybDCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRw
Oi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRz
LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcyVExTUlNBU0hBMjU2MjAyMENB
MS0xLmNydDAMBgNVHRMBAf8EAjAAMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoA
dwBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAYz+KQ1lAAAEAwBI
MEYCIQCtU1cgQceqLzLqrj16lMV3WQK7TG45JFbRaYtp8+uUVQIhAIQaR9VtIrXF
rWhX5zWmrTVaePb8n0m1vsySHlIJcqdbAHcAfVkeEuF4KnscYWd8Xv340IdcFKBO
lZ65Ay/ZDowuebgAAAGM/ikNqQAABAMASDBGAiEArpPCEsm1ZUpKxDO+z7epQ0l8
G5PoBZZ3BCzYtxQIDnoCIQCif71m5wZYk/BUr6AdYYIXpVjAVHqyDE755+m2bMmE
HQB2AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAABjP4pDdgAAAQD
AEcwRQIhAOMR4g31TY8bHPCmnevhCvsE3Launp6Lqx+MfPSD8FmrAiBvHgm49Pxg
EboxewwHd3+tfrKh1xNiQ5Ak2JyNDc015TANBgkqhkiG9w0BAQsFAAOCAQEARnqo
uHTB9FbXdNbk6f2JQFc5gIHQ/dUXOutpl+gf9DI8Pb0Ii5w992Z1nfpTvmFQ0cYS
XHlik4pM28dIy0PziQ5M+6wkjLQvgmly7HuVMGevgRR3jATrzPpgPdPbABf3XfXv
b3wYF3hLxnGmNaMoM5HhIx8LGvJiView+/rsvfLdolQDnL03BB1+uYoCQlglqRnE
sSpS/iLdNHtpTP7wvLn7BF3gLqEpQYAFQuFNlWja97yhJRGmczM6vH1L4owwKZWb
mHRmwDnCsfzYzcuTn1OCI7kTtNTuvxQXth7GqtRgh6QnYqTpGEA/4ZPN0XhOfAMQ
jToNwmIg2rdu96IPcg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOjrkV8XaauSUwW6f6Qe
2SjQll+j5bJbRReG88W555ltimc440KLVqoO0JF2NhSou+IX5XxhZngH9ypSUJEP
LvXGgaX9Inb/pai0TifmE7xyD0dl0M0ss69ZbkHkG+szvjTvZu8bWsfFNcz/L6gp
4BSa2s7fgBZHL873NxRGc3X3uQWa0bK+OjMI49f9wPHJgEXSLwxwQzjco00smPNT
AE2LBpIx+J1gOcSOGgZoAhij8vueizUOKOVT893h3qUPupQCKCkPIyfAu7NWAD+k
xtSz6FIx/Gfsbs2eFPd5PI6E8mRJJGhdbkd6NL4U7wxZ1OCkAZvnYAUU7lhb1cj7
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10248725047612927599122176646728949343
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coral Gables'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Millicom International Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tigo.com.sv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25362518218180373972316217548520379496264003056703487832402522340799002081529159864565389710845485400714204851346031480083591125583133899444701245275125204984640533669177576605741426342870549065337444873320299164143612032340204948285355593681616741339406056795429085094816343852816729052974136756373529296068503733721266777106560362712488804607951819849209583363287031225416312232873572373135970399312646539193985400763946418223701307445759200771335495222137011370906693729368711841667421852610839377087574661407960378553030317567272783834105955769145720943975972794934919579647568266012054383783354566392518474791793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8356aea2b2196134a74dbd3e51af50dd03276b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tigo.com.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigo.com.sv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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