portal01.sbcisd.net

- San Benito CISD -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:86:63:ff:c5:9d:4b:61:b1:a3:7d:23:2d:e9:e1:a4 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

San Benito CISD

Organization: San Benito CISD
State / Province: Texas
Locality: San Benito
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:86:63:ff:c5:9d:4b:61:b1:a3:7d:23:2d:e9:e1:a4
Serial Number (int): 13990075959783732552144292090896572836
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 87:63:74:fa:7b:3a:2e:dd:01:6d:1e:1f:4a:80:96:6b:4e:92:bb:b2
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): af:d8:4a:98:59:a4:5c:a5:7f:6f:61:fe:2a:fb:15:d5:43:53:7b:17
Fingerprint (sha256): 7b:10:d1:ae:33:0c:99:ba:a1:84:cc:ff:3d:8c:c9:d0:09:9d:6f:ba:c7:1a:90:b3:d8:56:31:06:0c:45:c0:76

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate portal01.sbcisd.net

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal01.sbcisd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal01.sbcisd.net
portal02.sbcisd.net
sponsor.sbcisd.net
guest.sbcisd.net
vpn.sbcisd.net

Other certificates including the domain name sbcisd.net

(limited to 100 certificates)
admin.agl.sbcisd.net
*.sbcisd.net
admin.wq.mtpcsd.org
sbcisd.net
admin.agl.sbcisd.net
*.sbcisd.net
*.sbcisd.net
sbcisd.net
admin.waldorfhighschool.org
sbcisd.net
*.sbcisd.net
www.mountalverniaacademy.com
*.sbcisd.net
topazschool.org
www.panoramacityelementary.org
sv.gvusd.k12.ca.us
*.sbcisd.net
*.sbcisd.net
*.sbcisd.net
bps.berrienschools.org
portal01.sbcisd.net
drcash.sbcisd.net
*.sbcisd.net
admin.jww.jubileeacademies.org
sbcisd.net
admin.decaturclassical.org
lapaloma.sbcisd.net
admin.masd209.org
sbcisd.net
rms.sbcisd.net
*.sbcisd.net
sbcisd.net
aak.potsdam.k12.ny.us
*.sbcisd.net
mountalverniaacademy.com
centerpreschool.centerusd.org
adulted.luciamarschools.org
*.sbcisd.net
gateway.sbcisd.net
admin.adulted.luciamarschools.org
admin.agl.sbcisd.net
mail.sbcisd.net
admin.icefps.org
sbcisd.net
landrum.sbcisd.net
www.aprandolph.com
gradebook.sbcisd.net
*.sbcisd.net
sbcisd.net
admin.adulted.luciamarschools.org
*.sbcisd.net
fredbooth.sbcisd.net
aak.potsdam.k12.ny.us
*.sbcisd.net
www.jctes.org
agl.sbcisd.net
dudley.centerusd.org
admin.agl.sbcisd.net
admin.agl.sbcisd.net
admin.adulted.luciamarschools.org
admin.bes.berrienschools.org
www.thecije.org
*.sbcisd.net
admin.jodlf.sbcisd.net
sbcisd.net
sbcisd.net
admin.jctes.org
aak.potsdam.k12.ny.us
portal01.sbcisd.net
*.sbcisd.net
*.sbcisd.net
mams.masd209.org
*.sbcisd.net
alt.sbcisd.net
*.sbcisd.net
*.sbcisd.net
instructionaltech.sbcisd.net
*.sbcisd.net
rms.sbcisd.net
*.sbcisd.net
sbcisd.net
ochoaprep.erusd.org
admin.adulted.luciamarschools.org
sbcisd.net
gradebook.sbcisd.net
aak.potsdam.k12.ny.us
admin.hawthorneacad.org
sullivan.sbcisd.net
www.hirschmetrohs.org
admin.eddowns.sbcisd.net
*.sbcisd.net
admin.annex.chinaspringisd.net
*.sbcisd.net
*.sbcisd.net
aak.potsdam.k12.ny.us
eduphoria.sbcisd.net
wshs.masd209.org
fredbooth.sbcisd.net
www.milanssd.org
admin.rangerville.sbcisd.net

Certificate

The complete raw certificate details for portal01.sbcisd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIQCoZj/8WdS2Gxo30jLenhpDANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwNjI0MDAwMDAwWhcN
MjEwNjI4MTIwMDAwWjBqMQswCQYDVQQGEwJVUzEOMAwGA1UECBMFVGV4YXMxEzAR
BgNVBAcTClNhbiBCZW5pdG8xGDAWBgNVBAoTD1NhbiBCZW5pdG8gQ0lTRDEcMBoG
A1UEAxMTcG9ydGFsMDEuc2JjaXNkLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMN29PGnLIbM+WpuibVcqmZPy31oGWO2EruVpIN3vdTmb16rAR10
JG4m0++SyyYlFiw/5Hh3MVREj47bWEX6aYDrBZ1K0TOqowPGXb3CRMcl83NbpiXs
4+URSoJubvAhl6/Jj5e/bNC3Gw2bWMH8JMgT6HRK/RG7qkGCyqLWrWVNx0IT8aSu
WdvyA0cqREbGy3WgvfSW2ku519ARJxkOcPWLCzByN5PX3u0YgvC9YUg8jX5TLeYt
0ttCeEHP6EEcCBkYoxxdKpWvzTwk0vyNcmxIiZtwKR+Zyc1bWoyENubvyhrXVgQM
+TRlVewZWWqDFVMUNg7PB0JsZtiUcaYYZIsCAwEAAaOCA6UwggOhMB8GA1UdIwQY
MBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBSHY3T6ezou3QFtHh9K
gJZrTpK7sjBpBgNVHREEYjBgghNwb3J0YWwwMS5zYmNpc2QubmV0ghNwb3J0YWww
Mi5zYmNpc2QubmV0ghJzcG9uc29yLnNiY2lzZC5uZXSCEGd1ZXN0LnNiY2lzZC5u
ZXSCDnZwbi5zYmNpc2QubmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDovL2NybDMu
ZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6Ly9jcmw0
LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARFMEMwNwYJYIZI
AYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9D
UFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDov
L29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5k
aWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1Ud
EwEB/wQCMAAwggF8BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB1ALvZ37wfinG1k5Qj
l6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABa4uPa6IAAAQDAEYwRAIgBvuuUFTxZa78
MuYzWKq5muGC0DzLgUCitiz4pNJSo5wCIFIFXsbsmnl7zNNOjoFX9xHGjBhBCul8
gnzJyUhXT8IGAHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFr
i49sOgAABAMARzBFAiEAtypPx+JXoo+XJ8+jbjYIDtlAQXnizKnY9VRyjePPl7wC
IHGdiGtxU1wvlACiQhsM88eSYfyfsaGKa9T3crLEAGy2AHUARJRlLrDuzq/EQAfY
qP4owNrmgr7YyzG1P9MzlrW2gagAAAFri49rQgAABAMARjBEAiBwE5A1ckuqBhZe
Ei9YIFhMMEIhg20begee7XRa0WJpmgIgIsL7SgDwBW/ZMdPOwi+XU2hE/7/erWs8
u3oepThT95MwDQYJKoZIhvcNAQELBQADggEBAGB1Wy10oulLTa8KTvtH5seqjVk6
s52pui3jD3X0+2CJh1qf7Bbz5jBZT6ellOoj/J9Wu4YV7l3G6QxwLG2I1gejbVGL
E5tziOotoCaXzEWakSHEXU+HsnUj1oDMEwHaBR9lyKl6qhMmVrNeHsUuozVGNt04
oLstJc6U5vgmbCTStd8W/xWd5uKC4mrdi85CMZlS8LHkrEerW8u55pgzhEUBfIpT
XYWMqVACHONsh2bBlgKgYXxSWG2F1JumUbRX2d6Jgvj/1hS9kqTA97eX0y8FAtnp
mpjjjzbl+cNk5o5FM1+TONG844zNEM6ZjDPApYoM2zp9GiWIJ8jRcQga8xU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3b08acshsz5am6JtVyq
Zk/LfWgZY7YSu5Wkg3e91OZvXqsBHXQkbibT75LLJiUWLD/keHcxVESPjttYRfpp
gOsFnUrRM6qjA8ZdvcJExyXzc1umJezj5RFKgm5u8CGXr8mPl79s0LcbDZtYwfwk
yBPodEr9EbuqQYLKotatZU3HQhPxpK5Z2/IDRypERsbLdaC99JbaS7nX0BEnGQ5w
9YsLMHI3k9fe7RiC8L1hSDyNflMt5i3S20J4Qc/oQRwIGRijHF0qla/NPCTS/I1y
bEiJm3ApH5nJzVtajIQ25u/KGtdWBAz5NGVV7BlZaoMVUxQ2Ds8HQmxm2JRxphhk
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13990075959783732552144292090896572836
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Benito'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Benito CISD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal01.sbcisd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24675129258822920435871992452018160327258198499067212676730891600206440541307361384224926654779881818440639675523520562104426918290883465342865156087637185794788788904641332819007314393712282346935366110879517228867304732170170420915694167731105194009795366298727458199879441382480829824637667455345555895886609247671424487719367464223050760687334938731256124347380308896275573620306800728288365678113578202182033540632241036655451218325224357390782818905436748603431478988788043898653705888935751558851886415288505144753640585842892342345523613600679046569880080956136663128557845673149313646997995233166304902407307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							876374fa7b3a2edd016d1e1f4a80966b4e92bbb2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal01.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal02.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsor.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guest.sbcisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.sbcisd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016b8b8f6ba20000040300463044022006fbae5054f165aefc32e63358aab99ae182d03ccb8140a2b62cf8a4d252a39c022052055ec6ec9a797bccd34e8e8157f711c68c18410ae97c827cc9c948574fc2060076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b8b8f6c3a0000040300473045022100b72a4fc7e257a28f9727cfa36e36080ed9404179e2cca9d8f554728de3cf97bc0220719d886b71535c2f9400a2421b0cf3c79261fc9fb1a18a6bd4f772b2c4006cb60075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016b8b8f6b420000040300463044022070139035724baa06165e122f5820584c304221836d1b7a079eed745ad162699a022022c2fb4a00f0056fd931d3cec22f97536844ffbfdead6b3cbb7a1ea53853f793
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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