webmail.beaconhealthsystem.org

- Beacon Health System, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0b:a3:28:1e:29:84:59:18:58:d5:95:c7:70:5d:a2:74 was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Beacon Health System, Inc.

Organization: Beacon Health System, Inc.
State / Province: Indiana
Locality: South Bend
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:a3:28:1e:29:84:59:18:58:d5:95:c7:70:5d:a2:74
Serial Number (int): 15468666027653157350743733426540356212
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 48:78:19:af:4a:5c:3e:fe:02:9f:f9:6f:ec:73:58:f8:04:e6:cb:fd
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): ea:bc:c8:a4:7a:34:55:48:51:38:00:30:8a:fa:3e:83:0d:eb:22:3a
Fingerprint (sha256): 7e:21:72:fd:a7:c4:2f:60:bb:67:5a:aa:a3:80:d6:d0:1a:0d:ac:0a:1c:ff:de:e3:d5:28:0c:79:8f:9f:b3:f6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl

Check the revocation status for certificate webmail.beaconhealthsystem.org

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.beaconhealthsystem.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.beaconhealthsystem.org
autodiscover.beaconhealthsystem.org
bhs-exhub1.bhsin.org
bhs-exhub2.bhsin.org
bhs-exhub3.bhsin.org
bhs-exhub4.bhsin.org
bhs-exhub5.bhsin.org

Other certificates including the domain name beaconhealthsystem.org

(limited to 100 certificates)
api.beaconhealthsystem.org
selfservice.beaconhealthsystem.org
selfservice.beaconhealthsystem.org
beaconhealthsystem.org
akamai-san77.exacttarget.com
click.e.beaconhealthsystem.org
mpagereach.beaconhealthsystem.org
vpn.beaconhealthsystem.org
join.beaconhealthsystem.org
www.beaconhealthsystem.org
beaconhealthsystem.org
selfservice.beaconhealthsystem.org
qualityoflife.org
credentialing.beaconhealthsystem.org
cloud.e.beaconhealthsystem.org
akamai-san77.exacttarget.com
akamai-san77.exacttarget.com
webmail.beaconhealthsystem.org
credentialing.beaconhealthsystem.org
selfservice.beaconhealthsystem.org
answers-embed.campusfederal.org.pagescdn.com
join.beaconhealthsystem.org
locations.beaconhealthsystem.org
docs.beaconhealthsystem.org
securemail.beaconhealthsystem.org
selfservice.beaconhealthsystem.org
mpagereach.beaconhealthsystem.org
synergichealthcareers.yext-cdn.com
synergichealthcareers.yext-cdn.com
qualityoflife.org
docs.beaconhealthsystem.org
*.beaconhealthsystem.org
webmail.beaconhealthsystem.org
uc-vcs-e.beaconhealthsystem.org
beaconhealthsystem.org
click.e.beaconhealthsystem.org
credentialing.beaconhealthsystem.org
webmail.beaconhealthsystem.org
webmail.beaconhealthsystem.org
*.beaconhealthsystem.org
ssl416046.cloudflaressl.com
bhs-adfs.beaconhealthsystem.org
employees.beaconhealthsystem.org
qualityoflife.org
locations.gwwade.com
view.e.beaconhealthsystem.org
api.beaconhealthsystem.org
qualityoflife.org
beaconhealthsystem.org
internalapps.beaconhealthsystem.org
docs.beaconhealthsystem.org
webmail.beaconhealthsystem.org
answers-embed.campusfederal.org.pagescdn.com
xmpp.beaconhealthsystem.org
credentialing.beaconhealthsystem.org
answers.entenmanns.com.yext-cdn.com
answers-dallygoods.com.pagescdn.com
bhs-navadfs.beaconhealthsystem.org
answers-dallygoods.com.pagescdn.com
docs.beaconhealthsystem.org
*.beaconhealthsystem.org
akamai-san77.exacttarget.com
search.beaconhealthsystem.org
webmail.beaconhealthsystem.org
answers-bhhs.pagescdn.com
ssl416046.cloudflaressl.com
selfservice.beaconhealthsystem.org
beaconhealthsystem.org
employees.beaconhealthsystem.org
securemail.beaconhealthsystem.org
turn.beaconhealthsystem.org
join.beaconhealthsystem.org
sni.cloudflaressl.com
webmail.beaconhealthsystem.org
docs.beaconhealthsystem.org
vpn.beaconhealthsystem.org
webmail.beaconhealthsystem.org
webmail.beaconhealthsystem.org
vpn.beaconhealthsystem.org
uc-vcs-e.beaconhealthsystem.org
hctsportals.com
transfer.beaconhealthsystem.org
www.beaconhealthsystem.org
api.beaconhealthsystem.org
cloud.e.beaconhealthsystem.org
akamai-san77.exacttarget.com
beaconhealthsystem.org
*.beaconhealthsystem.org
transfer.beaconhealthsystem.org
employees.beaconhealthsystem.org
akamai-san77.exacttarget.com
credentialing.beaconhealthsystem.org
webmail.beaconhealthsystem.org
api.beaconhealthsystem.org
employees.beaconhealthsystem.org
beaconhealthsystem.org
cloud.e.beaconhealthsystem.org
credentialing.beaconhealthsystem.org
click.e.beaconhealthsystem.org
selfservice.beaconhealthsystem.org

Certificate

The complete raw certificate details for webmail.beaconhealthsystem.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIQC6MoHimEWRhY1ZXHcF2idDANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTcwMjA5MDAwMDAwWhcN
MTgwMzEyMTIwMDAwWjCBgjELMAkGA1UEBhMCVVMxEDAOBgNVBAgTB0luZGlhbmEx
EzARBgNVBAcTClNvdXRoIEJlbmQxIzAhBgNVBAoTGkJlYWNvbiBIZWFsdGggU3lz
dGVtLCBJbmMuMScwJQYDVQQDEx53ZWJtYWlsLmJlYWNvbmhlYWx0aHN5c3RlbS5v
cmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZSacisZoFNQt25Swp
q9KHeBy/Q4hZprWxpuUVDWu92Uxgu5Ob0KOUhfDps+YiKUcP3h44CwDZwdjwfQhZ
z6p6etketHptfPgoBOy7vrBGocMHX3P263vlD03jVUKaAh6VYTPAuHS96R/USnx1
651lO7c6JRE9nGUb0yOriyaGo8kBAw5qVGbOHyZXmkZXlesr18lcj+Hj3NhpNcyN
TIi2ONDZEa7rKU1+2LaAsV0s32+MrFBr0lcd4FWTwtKf8u0jWQm434kgbeM5z4XT
qeTmnkHqOpMTdyo4G9pV7B5Ug05ROX47cTLMobCo8mjN+Jd1KjmMPCYtTh+BP2hS
iPR5AgMBAAGjggJ7MIICdzAfBgNVHSMEGDAWgBQPgGEcgjFh1S8o541GOLQs4cbZ
4jAdBgNVHQ4EFgQUSHgZr0pcPv4Cn/lv7HNY+ATmy/0wgb4GA1UdEQSBtjCBs4Ie
d2VibWFpbC5iZWFjb25oZWFsdGhzeXN0ZW0ub3JngiNhdXRvZGlzY292ZXIuYmVh
Y29uaGVhbHRoc3lzdGVtLm9yZ4IUYmhzLWV4aHViMS5iaHNpbi5vcmeCFGJocy1l
eGh1YjIuYmhzaW4ub3JnghRiaHMtZXhodWIzLmJoc2luLm9yZ4IUYmhzLWV4aHVi
NC5iaHNpbi5vcmeCFGJocy1leGh1YjUuYmhzaW4ub3JnMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2g
K4YpaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNS5jcmwwL6At
oCuGKWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzUuY3JsMEwG
A1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3
LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggr
BgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpo
dHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2Vy
dmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBADr+5QvX
nCVfqx6NVZP7ZiWnbNKH6q3S+jnh5pI7L7PTO9/xz/O7ybU1hTR+4Fg7NA0duB8y
GUsle5yxAABAoAJUyQSzCIuSdQoTTVza9b3UkncNj5WuPMs9Ad+YByDgPbaM+qJG
r4HGmiYnFxDKxDjzM1hY66tbR+vZlt9ne42EHsCynpaof5tn5XVfw2YXsVyg9KVO
JcEgEcI8GmHXrWOruxzI47eK5zaNLbu308bVEQ8Na/XJkjXJyj9Uj9epTZoJ4RKX
1ZkPW9Wn9lOd3vRXFy56zzhmQVwCjL4Ba3+agbdsFn0mxSBdI4zVRgnEzB/EgzSf
t+NuJxfrv2pMbRI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UmnIrGaBTULduUsKavS
h3gcv0OIWaa1sablFQ1rvdlMYLuTm9CjlIXw6bPmIilHD94eOAsA2cHY8H0IWc+q
enrZHrR6bXz4KATsu76wRqHDB19z9ut75Q9N41VCmgIelWEzwLh0vekf1Ep8deud
ZTu3OiURPZxlG9Mjq4smhqPJAQMOalRmzh8mV5pGV5XrK9fJXI/h49zYaTXMjUyI
tjjQ2RGu6ylNfti2gLFdLN9vjKxQa9JXHeBVk8LSn/LtI1kJuN+JIG3jOc+F06nk
5p5B6jqTE3cqOBvaVeweVINOUTl+O3EyzKGwqPJozfiXdSo5jDwmLU4fgT9oUoj0
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15468666027653157350743733426540356212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Bend'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beacon Health System, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.beaconhealthsystem.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27430031763026932209438612497332022133698791113345240552850320703040225161717914580442995363370343669593969017129343419856663686277603039374638189228109788745638966101565912953230253359190784063769502019416213729877483283017910665513748302006281254983098280799008825243907882389709999712205316190720059487089351187504506178593100109321585548254731329738390015668825528243204284591392402647847832533214263921382037297063623948944534880789401287609064930673072551407644533782740205945129044576508400811686238111622572360283746668802594513626184611467079985580483710182868236956593075224694788886009640476500242589086841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							487819af4a5c3efe029ff96fec7358f804e6cbfd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (182 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.beaconhealthsystem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.beaconhealthsystem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs-exhub1.bhsin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs-exhub2.bhsin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs-exhub3.bhsin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs-exhub4.bhsin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs-exhub5.bhsin.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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