*.mazakcorp.com

- Mazak Corporation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:bc:32:00:3c:8f:ee:61:ec:62:d3:80:39:6f:90:41 was issued on by DigiCert Inc.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Mazak Corporation

Organization: Mazak Corporation
State / Province: Kentucky
Locality: Florence
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:bc:32:00:3c:8f:ee:61:ec:62:d3:80:39:6f:90:41
Serial Number (int): 19586357889616655109414333025581240385
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8b:26:62:d9:db:44:f8:0b:4b:1e:f3:9b:53:de:5b:94:c8:c3:c7:f4
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): e8:02:96:f9:77:75:20:f4:4e:5b:0d:58:c9:52:2a:9e:51:75:9a:6d
Fingerprint (sha256): 78:59:e7:24:50:b1:9d:38:d1:00:e8:c3:31:ab:f6:a0:12:5d:33:7e:e4:97:44:c9:51:e8:af:9c:61:bc:ed:eb

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate *.mazakcorp.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.mazakcorp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.mazakcorp.com
mazakcorp.com
opman.mazakcorp.com
vpn.mazakcorp.com
mc-flo-l360-2.mazakcorp.com
mc-flo-coh.mazakcorp.com
sft.mazakcorp.com
log360.mazakcorp.com
vpn2.mazakcorp.com

Other certificates including the domain name mazakcorp.com

(limited to 100 certificates)
uc-usflo-1-ms.mazakcorp.com
uc-usflo-1-ms.mazakcorp.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
MAZAKIPCC2.mazakcorp.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
*.mazakcorp.com
as400.mazakcorp.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
*.mazakcorp.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
sft.mazakcorp.com
uc-usflo-1-ms.mazakcorp.com
servicedesk.massageenvy.com
*.mazakcorp.com
servicedesk.massageenvy.com
SFT.mazakcorp.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.mazakcorp.com
servicedesk.massageenvy.com
helpdesk.countrypure.com
MAZAKIPCC2.mazakcorp.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
webmail.mazakcorp.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
*.mazakcorp.com
servicedesk.massageenvy.com
serituscos.mazakcorp.com
leaservicedesk.lea.co.bw
parts.mazakcorp.com
ithelpdesk.renaissanceservices.com
servicedesk.massageenvy.com
helpdesk.countrypure.com
mazakpub-ms.mazakcorp.com
*.mazakcorp.com
servicedesk.massageenvy.com
uc-usflo-1-ms.mazakcorp.com
servicedesk.massageenvy.com
*.mazakcorp.com
SKGFileHub.mazakcorp.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
mazakipcc.mazakcorp.com
*.mazakcorp.com
*.mazakcorp.com
*.mazakcorp.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
*.mazakcorp.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
*.mazakcorp.com
mazakipcc.mazakcorp.com
*.mazakcorp.com
*.mazakcorp.com
*.mazakcorp.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
uc-usflo-1-ms.mazakcorp.com
*.mazakcorp.com
servicedesk.massageenvy.com
*.mazakcorp.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
mazakipcc.mazakcorp.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
uc-usflo-1-ms.mazakcorp.com
uc-usflo-1-ms.mazakcorp.com
servicedesk.massageenvy.com
*.mazakcorp.com
support.mazakcorp.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
*.mazakcorp.com
servicedesk.massageenvy.com
traveler.mazakcorp.com
servicedesk.massageenvy.com
*.mazakcorp.com

Certificate

The complete raw certificate details for *.mazakcorp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHZTCCBk2gAwIBAgIQDrwyADyP7mHsYtOAOW+QQTANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzA5MjUwMDAwMDBa
Fw0yNDAzMDkyMzU5NTlaMGkxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhLZW50dWNr
eTERMA8GA1UEBxMIRmxvcmVuY2UxGjAYBgNVBAoTEU1hemFrIENvcnBvcmF0aW9u
MRgwFgYDVQQDDA8qLm1hemFrY29ycC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChGtE5C5V8qENGuymFVALhuRc7+pEUUBks1tXZhta2toRNvcYb
Qs7xKYomHylzcfu6tO+lM60tqPArdL6tZVFGQbi2JY8susziUpBx+T6gUVByyjWX
WWPXk6cGs7ClUIEAcHkekBQLEKu/oKwqBiiXgf5UAtYCYBIcsCUzodTo29O05ytP
EmP1Q/NiYy1uN5imufUgSOne99N5uJ/EvCnVSHgkBEDHls8AafTG3kGe82Cx6KGr
6EscqfNzUsUwfkafVXbBY5TWT+6RBaS2h+soVAaYcOSCaCVZr8n7DxYcbNhHItIw
m3fRXdvHvmMLsuPNRkTpJQ02+qnrCMRG8+2bAgMBAAGjggQhMIIEHTAfBgNVHSME
GDAWgBS3a6LqqKqEjHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQUiyZi2dtE+AtLHvOb
U95blMjDx/QwgccGA1UdEQSBvzCBvIIPKi5tYXpha2NvcnAuY29tgg1tYXpha2Nv
cnAuY29tghNvcG1hbi5tYXpha2NvcnAuY29tghF2cG4ubWF6YWtjb3JwLmNvbYIb
bWMtZmxvLWwzNjAtMi5tYXpha2NvcnAuY29tghhtYy1mbG8tY29oLm1hemFrY29y
cC5jb22CEXNmdC5tYXpha2NvcnAuY29tghRsb2czNjAubWF6YWtjb3JwLmNvbYIS
dnBuMi5tYXpha2NvcnAuY29tMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYB
BQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGPBgNVHR8EgYcwgYQw
QKA+oDyGOmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNI
QTI1NjIwMjBDQTEtNC5jcmwwQKA+oDyGOmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNv
bS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwfwYIKwYBBQUHAQEE
czBxMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSQYIKwYB
BQUHMAKGPWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JT
QVNIQTI1NjIwMjBDQTEtMS5jcnQwDAYDVR0TAQH/BAIwADCCAX8GCisGAQQB1nkC
BAIEggFvBIIBawFpAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsA
AAGKzEnlwwAABAMARzBFAiEAo29R0DcVR7/UxtFetGvtFNkOp9Aseq2MsVIwglQB
C1oCIF9H/5Dwy5wfFWR8gwAVWXc9q5wC8GWvnP8Vtxaey4CCAHcASLDja9qmRzQP
5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGKzEnmEgAABAMASDBGAiEA66MWgmie
ExTLEEovA9PXJY67iAX1c9OKUjDPBpAYvtACIQCcWrYNtKFHOpuSoL2TASAk2Po4
lhqjvfgSq4iv5UqdiAB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/ur
AAABisxJ5d8AAAQDAEcwRQIgULaWyXqggi04sGOdAo1NX/9ePf4Kbcez2h++NIAS
eeICIQCiVsnXeEn+g+XW/rq6svW/Kf585S9j85cWt67f5sES7zANBgkqhkiG9w0B
AQsFAAOCAQEAfHYfC/1+j2wP+9lAMkpwo9rY7QS1YuGOt89AzIXWaSYfZbVGH7p0
r/TXiuuC7bIACbBrtgBk6Fy8LCNUmj7U3BNKqe2tiBbeAQo+5pJ/noUjtRtf9gnk
zD9XBO7ARewM2C7+m6qrrjwrIDOj5qk5XyaOfMKeSIjBgqCoujVwGE22cXMlG4o1
uHUKowHp5rv9tNbmfthVGLLOlNFWVw+1sw7LARgGYPV1po7ezJm+qpTSjUtdd6aV
GG4kZaOywgLU1uw1rF5+kcA/AO+YAcRoWlGv2h7vdbHdTXMRf2ctoGETTxLpXm5+
ulfo3y+eeROCsAxvGz5mQv5fMTdjL8nc/A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRrROQuVfKhDRrsphVQC
4bkXO/qRFFAZLNbV2YbWtraETb3GG0LO8SmKJh8pc3H7urTvpTOtLajwK3S+rWVR
RkG4tiWPLLrM4lKQcfk+oFFQcso1l1lj15OnBrOwpVCBAHB5HpAUCxCrv6CsKgYo
l4H+VALWAmASHLAlM6HU6NvTtOcrTxJj9UPzYmMtbjeYprn1IEjp3vfTebifxLwp
1Uh4JARAx5bPAGn0xt5BnvNgseihq+hLHKnzc1LFMH5Gn1V2wWOU1k/ukQWktofr
KFQGmHDkgmglWa/J+w8WHGzYRyLSMJt30V3bx75jC7LjzUZE6SUNNvqp6wjERvPt
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19586357889616655109414333025581240385
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kentucky'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florence'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mazak Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mazakcorp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20337591191540642360523428355406295521190064230181120792025833676362839553996464508812936338868572030931647982875519288199067224445104677897559896157386155757486167365571271261072625760265288737641079427561244947404204664513644616663227392416240785581938998518140662854184236357398514255358057795037419918394565970189232171690665176912801732623766699899627207373454549806280977082657973693130669649343152870187084851114223209127854960870736105614228769428685452676808923942098242939633812518022259045364218996787306220193218447884395514170225510912363933924230187657304073678389441790992604920543342539465198847389083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b2662d9db44f80b4b1ef39b53de5b94c8c3c7f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (191 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mazakcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazakcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opman.mazakcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.mazakcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mc-flo-l360-2.mazakcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mc-flo-coh.mazakcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sft.mazakcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'log360.mazakcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn2.mazakcorp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007c761f0bfd7e8f6c0ffbd940324a70a3dad8ed04b562e18eb7cf40cc85d669261f65b5461fba74aff4d78aeb82edb20009b06bb60064e85cbc2c23549a3ed4dc134aa9edad8816de010a3ee6927f9e8523b51b5ff609e4cc3f5704eec045ec0cd82efe9baaabae3c2b2033a3e6a9395f268e7cc29e4888c182a0a8ba3570184db67173251b8a35b8750aa301e9e6bbfdb4d6e67ed85518b2ce94d156570fb5b30ecb01180660f575a68edecc99beaa94d28d4b5d77a695186e2465a3b2c202d4d6ec35ac5e7e91c03f00ef9801c4685a51afda1eef75b1dd4d73117f672da061134f12e95e6e7eba57e8df2f9e791382b00c6f1b3e6642fe5f3137632fc9dcfc