EpicSFDNonProd.primehealthcare.com

- Prime Healthcare Management, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:c0:05:51:71:60:84:c5:f2:56:5f:d4:5e:52:f5:e7 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Prime Healthcare Management, Inc.

Organization: Prime Healthcare Management, Inc.
State / Province: California
Locality: Ontario
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:c0:05:51:71:60:84:c5:f2:56:5f:d4:5e:52:f5:e7
Serial Number (int): 19606220802445181031436187403969295847
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8b:fe:b4:0e:c9:72:d5:85:61:50:4f:b5:80:33:a8:87:a7:c8:ff:76
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): f5:52:d5:b1:f7:b1:09:69:b0:ad:3c:f1:91:69:cb:a7:58:49:8a:4c
Fingerprint (sha256): 7d:40:93:ce:db:4e:56:a2:0a:90:a0:60:ca:bf:ce:79:98:e9:40:fa:ea:ca:a1:5b:0d:8f:fc:1b:29:92:e5:8c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate EpicSFDNonProd.primehealthcare.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for EpicSFDNonProd.primehealthcare.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

EpicSFDNonProd.primehealthcare.com
www.EpicSFDNonProd.primehealthcare.com

Other certificates including the domain name primehealthcare.com

(limited to 100 certificates)
*.primehealthcare.com
primehealthcare.com
primehealthcare.com
careers.primehealthcare.com
PHSEV01.PRIMEHEALTHCARE.COM
phsev04.primehealthcare.com
ps360.primehealthcare.com
www.primehealthcare.com
phsi.us
cs.primehealthcare.com
primehealthcare.com
*.primehealthcare.com
primehealthcare.com
helpdesk.warren-wilson.edu
*.primehealthcare.com
*.primehealthcare.com
CO-MOVITAUTO01P.phsi.primehealthcare.com
cardioserver.primehealthcare.com
zmail.primehealthcare.com
mychart.primehealthcare.com
*.primehealthcare.com
phsi-expwaye-cl.phsi.primehealthcare.com
webmail.primehealthcare.com
primehealthcare.com
primehealthcare.com
supportdesks.portland.ac.uk
*.phsi.primehealthcare.com
pmcportal.primehealthcare.com
epicsoapproxyprod.primehealthcare.com
helpdesk.warren-wilson.edu
servicedesk.primehealthcare.com
hpfweb.primehealthcare.com
mychart.primehealthcare.com
helpdesk.acpro.com
croh-xdr.primehealthcare.com
CO-MOVITXFER01P.phsi.primehealthcare.com
primehealthcare.com
primehealthcare.com
CO-SWMGTCON01P.phsi.primehealthcare.com
hpfweb.primehealthcare.com
helpdesk.warren-wilson.edu
epichswextprd.primehealthcare.com
primehealthcare.com
*.primehealthcare.com
hpfweb.primehealthcare.com
primehealthcare.com
co-vpn.primehealthcare.com
mrtxvdi.primehealthcare.com
gateway.primehealthcare.com
servicedesk.dai.co.uk
mychartpoc.phsi.primehealthcare.com
primehealthcare.com
phsivdi.primehealthcare.com
Smrmc-nxhie-prod.primehealthcare.com
eprescribingtest.primehealthcare.com
ps360a.primehealthcare.com
*.phsi.primehealthcare.com
apps.primehealthcare.com
epicsfdprod.primehealthcare.com
*.primehealthcare.com
*.primehealthcare.com
gateway.primehealthcare.com
epicsfdprod.primehealthcare.com
www.primehealthcare.com
careers.primehealthcare.com
executive.primehealthcare.com
ehp.primehealthcare.com
CO-MOVITAUTO01P.phsi.primehealthcare.com
primehealthcare.com
gateway-glen.primehealthcare.com
onbaseweb.primehealthcare.com
vpn.primehealthcare.com
phsi-expwaye.primehealthcare.com
*.primehealthcare.com
epicmblnonprod.phsi.primehealthcare.com
*.phsi.primehealthcare.com
citrix.primehealthcare.com
*.phsi.primehealthcare.com
*.primehealthcare.com
phsi.us
primehealthcare.com
gateway.primehealthcare.com
EpicSFDNonProd.primehealthcare.com
zmail.primehealthcare.com
co-vpn.primehealthcare.com
primehealthcare.com
patientportal-sjomo.primehealthcare.com
epichswexttst.primehealthcare.com
epicsfdprod.primehealthcare.com
epicsfdprod.primehealthcare.com
mobicontrol.phsi.primehealthcare.com
*.primehealthcare.com
mobicontrol.phsi.primehealthcare.com
phsivdi.primehealthcare.com
www.preplanbedell.com
primehealthcare.com
my.primehealthcare.com
mychart.primehealthcare.com
www.primehealthcare.com
*.primehealthcare.com

Certificate

The complete raw certificate details for EpicSFDNonProd.primehealthcare.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHEjCCBfqgAwIBAgIQDsAFUXFghMXyVl/UXlL15zANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzAxMTAwMDAwMDBa
Fw0yMzA5MzAyMzU5NTlaMIGNMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZv
cm5pYTEQMA4GA1UEBxMHT250YXJpbzEqMCgGA1UEChMhUHJpbWUgSGVhbHRoY2Fy
ZSBNYW5hZ2VtZW50LCBJbmMuMSswKQYDVQQDEyJFcGljU0ZETm9uUHJvZC5wcmlt
ZWhlYWx0aGNhcmUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
vHDjhPrckvADFiErr9j0OYnWbYjGDKKCQn1N7XsxbvWNTNxdrb5ce6TG7UAU9gkk
5UdipDikVfj89qatpNM4HR6No5Omh5zyxHqh9nJs54BuV2siU6nVO8iCYeDNNhuG
AmgRSjhdEG1pHDPO4nQsVcB7hFCuwCLBe5AUp9H6wKHmBlPvXCqNGkqVlvuyiGbP
2FDjsQpyQe1bu0XMUPhYxR2K0hNHsO3Rvp4zyFG062tBxvB7Q4w64dc1ic2vmhCu
nK8dclW5ROoyazQ6pfD1WlJi6nikry8iaB6h6v2WwW7k7RznmZ3copeuSn0vCbIV
qCp1jvYYfGJChFCTS2oQyQIDAQABo4IDqTCCA6UwHwYDVR0jBBgwFoAUt2ui6qiq
hIx56rTaD5iyxZV2ufQwHQYDVR0OBBYEFIv+tA7JctWFYVBPtYAzqIenyP92MFUG
A1UdEQROMEyCIkVwaWNTRkROb25Qcm9kLnByaW1laGVhbHRoY2FyZS5jb22CJnd3
dy5FcGljU0ZETm9uUHJvZC5wcmltZWhlYWx0aGNhcmUuY29tMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgY8GA1UdHwSBhzCB
hDBAoD6gPIY6aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNB
U0hBMjU2MjAyMENBMS00LmNybDBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQu
Y29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00LmNybDA+BgNVHSAENzA1
MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNv
bS9DUFMwfwYIKwYBBQUHAQEEczBxMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5k
aWdpY2VydC5jb20wSQYIKwYBBQUHMAKGPWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0
LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwCQYDVR0TBAIw
ADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHUA6D7Q2j71BjUy51covIlryQPT
y9ERa+zraeF3fW0GvW4AAAGFmPr4yQAABAMARjBEAiAYNvFqAQECpE6iU84qiAB+
yElmDDQP5b0YytkSHK/2GwIgEit1SDupEh61HHwiIfGAQ+xlTdaiI1M8RpzLTD3E
wV4AdQC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYWY+vkIAAAE
AwBGMEQCIEasaXXbjUmXQFprWCSk9KUdjcMCQnegyrfRdz+zns1JAiADv7KiQaC3
s2dgtdgBgzw4G6vMVbg6ArM6iEnd0V0gLQB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZ
AsEAKQaNsgiaN9kTAAABhZj6+lwAAAQDAEgwRgIhAJ9y3yWMoPNTJngSKOTMfTWS
sklcyQReE586OGn523PMAiEAsuUm0QHaxzsTH6h0hUK+bTAzkaPU2o9QdofP1YiZ
DWwwDQYJKoZIhvcNAQELBQADggEBAABRVRR+YxNmNhLWyUR8qqLfkFpsWVX7+eaN
Ix2Z1rX4noI6onFr98gk22tWq7a8Zd71kl+nPEKIf9/hbx1LzsEA56rMJkmNTcJb
PZcbPYvfRMQ2klsVgsrbFQBbcGoDJI792xyCXUd9qaEMTARzSWCfgq7k7ozhXP01
8A0AVBpdVShxrWEL90o5a8CIFYn21VppXY1i/aXDVLDnU7lgHjEiQMNF8KPU6xi8
4IqJDePR+Y+s9nTqO8nR+mimoyrF5tc0xmdrjCt7W69XTMPwVX6kk7pTunU3iC0I
YSRPL1exlaJR3jQpzomPsp2oC5iW9dIXTsqfKic95ZBY4nB+4VM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHDjhPrckvADFiErr9j0
OYnWbYjGDKKCQn1N7XsxbvWNTNxdrb5ce6TG7UAU9gkk5UdipDikVfj89qatpNM4
HR6No5Omh5zyxHqh9nJs54BuV2siU6nVO8iCYeDNNhuGAmgRSjhdEG1pHDPO4nQs
VcB7hFCuwCLBe5AUp9H6wKHmBlPvXCqNGkqVlvuyiGbP2FDjsQpyQe1bu0XMUPhY
xR2K0hNHsO3Rvp4zyFG062tBxvB7Q4w64dc1ic2vmhCunK8dclW5ROoyazQ6pfD1
WlJi6nikry8iaB6h6v2WwW7k7RznmZ3copeuSn0vCbIVqCp1jvYYfGJChFCTS2oQ
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19606220802445181031436187403969295847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Prime Healthcare Management, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EpicSFDNonProd.primehealthcare.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23788468849946851911164624182780351660767743451916567767619419737422948781941624910126456006684487339907203764638003726386975178128356893835939063545476119209973545973504911169975259408513599506767988854951205410603906646301709467605164046571313399575715722793180594309760627602977743202502014325208715389997541837331136528078838050962350977272646668462666673721958107032543328856420933694096986659757977296397530915110331360903976395577944475725119403118207468628797047835456412632075773412197559648120115208944986017320765668018584853841032082649484602451178946887126456389235799228372778852498071337979029173702857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8bfeb40ec972d58561504fb58033a887a7c8ff76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'EpicSFDNonProd.primehealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.EpicSFDNonProd.primehealthcare.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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