myairliquide.com

- AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:9c:98:7f:ea:1b:d0:f6:c7:e7:7e:6c:f6:af:51:6f was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE

Organization: AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE
Organization unit: IT
Locality: PARIS
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9c:98:7f:ea:1b:d0:f6:c7:e7:7e:6c:f6:af:51:6f
Serial Number (int): 6130003353760611066997741058454933871
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c6:11:61:90:15:2d:a1:a4:0a:c1:ae:1a:63:b3:b7:1f:8d:e7:57:ab
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 32:b8:38:67:18:7b:df:8e:c2:e3:39:4a:aa:36:19:cf:a5:39:80:3d
Fingerprint (sha256): 78:2c:e5:4b:15:87:cb:1f:3f:7d:aa:10:7c:74:96:e2:65:34:5b:9a:ad:ab:24:c4:c7:6c:60:d5:1f:fb:ad:a1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate myairliquide.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for myairliquide.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

myairliquide.com

Other certificates including the domain name myairliquide.com

(limited to 100 certificates)
www.airliquide.com
www.airliquide.com
myairliquide.com
www.airliquide.com
myairliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
myairliquide.com
myairliquide.com
www.airliquide.com
myairliquide.com
www.airliquide.com
myairliquide.com
myairliquide.com
myairliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
myairliquide.com
www.airliquide.com
int.myairliquide.com
myairliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
myairliquide.com
www.airliquide.com
www.airliquide.com
int.myairliquide.com
www.airliquide.com
www.airliquide.com
myairliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
int.myairliquide.com
myairliquide.com
myairliquide.com
myairliquide.com
www.airliquide.com
myairliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
myairliquide.com
www.airliquide.com
myairliquide.com

Certificate

The complete raw certificate details for myairliquide.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIQBJyYf+ob0PbH535s9q9RbzANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwNzIzMDAwMDAwWhcN
MTkwNzI0MTIwMDAwWjCBjTELMAkGA1UEBhMCRlIxDjAMBgNVBAcTBVBBUklTMUYw
RAYDVQQKEz1BSVIgTElRVUlERSBTQSBQT1VSIEVUVURFIEVYUExPSVQgREVTIFBS
T0NFREVTIEdFT1JHRVMgQ0xBVURFMQswCQYDVQQLEwJJVDEZMBcGA1UEAxMQbXlh
aXJsaXF1aWRlLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMNM
WkSmtYNZX10LPCP1Itk0XclnaNJDzuFbrEnG6y12EcLFkiqoa5bw4IypOk2tqew8
gAfWgPndUEhlyCQK3iL2nl6Fdhahien9ZEG7AEw18NzoO44hqzXiD76KACfpcjpi
KIrLmoyWhVAWia7TCRFSXJbScS77i3PBffq+DylBQmUE2nR4jd1NyVm8hKgNjSZJ
nOsEd12Pvxj8kHBJQZQFr40VpuXSxI2Hwic1A/JRYJCa1wo0B9D5FjMoYTci/wws
5vIgwxrF7D3CjvdOLjAs+JsHpQZZlrAr72KMlLwbLEpfVifaT2Hlyxe+5tt8naP1
3q5ZyxLMPuBM450Ex7WCVVO9wlX4TypB5hx/sKgeWdP0dF+qedbF5KO0iEcYzPFc
qCtbX6llnzItEaFhw9GpQf5brSp8LJfO/QNf9lH31isq2FD/G8h2TN/QT1/oca1S
MRCcAGpq8fw41Ei5AZst213vOJ21rHElhUAvViIUwqRanJpBLwrCp6aNlohGqQfJ
lv9+dLrXEtl06KA3VeEs5/yoJdZcvlZwypiLG/plHg2DC4T7I7zHUCFf5HF87u4y
YdIyOFJUMUyjRWzpFCtaYbJk1kIeBBF04C/XhYNvIdu/t/9CvIdVXhcP5jXL07g8
ghDFfxaL8jfUYqmpZK2o4EKdA0CM7of2q7EZdr51AgMBAAGjggHpMIIB5TAfBgNV
HSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ4jAdBgNVHQ4EFgQUxhFhkBUtoaQK
wa4aY7O3H43nV6swGwYDVR0RBBQwEoIQbXlhaXJsaXF1aWRlLmNvbTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRk
MGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYu
Y3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2
LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRw
czovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB8BggrBgEFBQcBAQRw
MG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBGBggrBgEF
BQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMlNl
Y3VyZVNlcnZlckNBLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQA9hXkw6+K8iif4lOe/Kri+Ik0lOzNAA4ekHnOk
MQSe22QhhZkFGahF3yZhhz0P77TAD9eP78C6SP/34zGfBwd8cGso53u5wJgKxIdo
bVx5j7lO9iJ/eUNKt6Ld987Jxj/S2V2nnbG9jstbFvjyviU/qDOpeSr7jQeGW/P2
IrrDV4WAQbjYY9JRlydy7nS06Wyxt8dTA5KrkP39tsnDhPFMzAG2MMTt44j+gA3Q
A0yRGTnJ1O+u8u1on76OHxErogMCnS9KbDZduqQWD3DMomJOCNiGRVppxFOQRC5c
+yymGZeJVNncBcUH8vSlTVwpJqSBBTPXzYN9lXLDVzF9SHUk
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw0xaRKa1g1lfXQs8I/Ui
2TRdyWdo0kPO4VusScbrLXYRwsWSKqhrlvDgjKk6Ta2p7DyAB9aA+d1QSGXIJAre
IvaeXoV2FqGJ6f1kQbsATDXw3Og7jiGrNeIPvooAJ+lyOmIoisuajJaFUBaJrtMJ
EVJcltJxLvuLc8F9+r4PKUFCZQTadHiN3U3JWbyEqA2NJkmc6wR3XY+/GPyQcElB
lAWvjRWm5dLEjYfCJzUD8lFgkJrXCjQH0PkWMyhhNyL/DCzm8iDDGsXsPcKO904u
MCz4mwelBlmWsCvvYoyUvBssSl9WJ9pPYeXLF77m23ydo/XerlnLEsw+4EzjnQTH
tYJVU73CVfhPKkHmHH+wqB5Z0/R0X6p51sXko7SIRxjM8VyoK1tfqWWfMi0RoWHD
0alB/lutKnwsl879A1/2UffWKyrYUP8byHZM39BPX+hxrVIxEJwAamrx/DjUSLkB
my3bXe84nbWscSWFQC9WIhTCpFqcmkEvCsKnpo2WiEapB8mW/350utcS2XTooDdV
4Szn/Kgl1ly+VnDKmIsb+mUeDYMLhPsjvMdQIV/kcXzu7jJh0jI4UlQxTKNFbOkU
K1phsmTWQh4EEXTgL9eFg28h27+3/0K8h1VeFw/mNcvTuDyCEMV/FovyN9Riqalk
rajgQp0DQIzuh/arsRl2vnUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6130003353760611066997741058454933871
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'myairliquide.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796747356828785079363661893784186712854009195166136887966068639020380957017147016942199801928182230644108081452319450998426208376722038155858181623929164230670049675344365517140677632171434321427052414367776448649197093780509392308285148075095085854496650866511012829182242687637976061042295986552538542390950350215727769424927393004026913775621741580048164221555208689482710752435252278649633536647062896239758401434399222560956861023391261265254499808869715385006279085053590795696233800434823138686982290204846659412909278202122325592681452387796093726037301502778162503051709367040549982748962070205876568456408177028079718529517620845859021896882092669266887754409094710280591213971748532426538316081485636865641129992902979472988427455763219041873679982942257454075792555836337708853292356680544344756209052951609752379903038843502406239338928122201900168778949144763421419281379627039137166026276658491203902825914608297292945060997207798576225666837727780350133233523549747112218840519501624420506194396580449325297592917674368789484587624794048252417624275400870296481863589290391348295169769417762318618451423133777194414121649576626884977847164003860677482219680948646509262379655933778157379571149828989591532241128177269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6116190152da1a40ac1ae1a63b3b71f8de757ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myairliquide.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003d857930ebe2bc8a27f894e7bf2ab8be224d253b33400387a41e73a431049edb642185990519a845df2661873d0fefb4c00fd78fefc0ba48fff7e3319f07077c706b28e77bb9c0980ac487686d5c798fb94ef6227f79434ab7a2ddf7cec9c63fd2d95da79db1bd8ecb5b16f8f2be253fa833a9792afb8d07865bf3f622bac357858041b8d863d251972772ee74b4e96cb1b7c7530392ab90fdfdb6c9c384f14ccc01b630c4ede388fe800dd0034c911939c9d4efaef2ed689fbe8e1f112ba203029d2f4a6c365dbaa4160f70cca2624e08d886455a69c45390442e5cfb2ca619978954d9dc05c507f2f4a54d5c2926a4810533d7cd837d9572c357317d487524