linemedia.preprod.richemont.com

- Richemont International SA -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 07:9a:1a:e4:e8:ac:67:98:24:0d:46:e7:df:61:c7:2c was issued on by DigiCert Inc.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Richemont International SA

Organization: Richemont International SA
Organization unit: RIC Akamai
Locality: Bellevue
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:9a:1a:e4:e8:ac:67:98:24:0d:46:e7:df:61:c7:2c
Serial Number (int): 10104755165388469490596757274485704492
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e6:8c:76:6a:01:50:6c:56:21:e7:46:cc:d2:2d:f3:aa:01:75:96:fb
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 85:9a:55:0d:72:e8:72:3d:7b:8a:4e:5d:3f:28:7a:e4:e1:bf:c3:c5
Fingerprint (sha256): 85:6a:b1:1f:87:d0:7b:1d:d8:7f:02:f4:5b:54:52:67:e7:72:61:21:fd:1d:0f:b0:3b:df:0e:b7:b9:82:e0:6b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate linemedia.preprod.richemont.com

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for linemedia.preprod.richemont.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

whenelegancemeetsart.quality.vancleefarpels.com
weixin.quality.cartier.cn
weboutique.preprod.vancleefarpels.com
weboutique.preprod.piaget.cn
weboutique.preprod.panerai.cn
weboutique.preprod.montblanc.cn
weboutique.preprod.jaeger-lecoultre.com
weboutique.preprod.iwc.cn
weboutique.preprod.cartier.cn
vcaballet.quality.vancleefarpels.com
starcrm.quality.montblanc.cn
rogerdubuis.quality.richemont.cn
productminisite.quality.vacheron-constantin.cn
media.weboutique.preprod.vancleefarpels.com
media.weboutique.preprod.piaget.cn
media.weboutique.preprod.panerai.cn
media.weboutique.preprod.montblanc.cn
media.weboutique.preprod.jaeger-lecoultre.com
media.weboutique.preprod.iwc.cn
media.weboutique.preprod.cartier.cn
master2017.quality.jaeger-lecoultre.com
lovedeclaration.quality.cartier.cn
llp.quality.montblanc.cn
linemedia.preprod.richemont.com
greatwallh5.quality.vacheron-constantin.cn
crm.llp.quality.montblanc.cn
ceb.quality.cartier.cn
bjexpo.quality.vancleefarpels.com
astronomyphoto.quality.vacheron-constantin.cn
api.weboutique.preprod.vancleefarpels.com
api.weboutique.preprod.piaget.cn
api.weboutique.preprod.panerai.cn
api.weboutique.preprod.montblanc.cn
api.weboutique.preprod.jaeger-lecoultre.com
api.weboutique.preprod.iwc.cn
api.weboutique.preprod.cartier.cn
4810collection.quality.montblanc.cn
2018cny.quality.vacheron-constantin.cn

Other certificates including the domain name richemont.com

(limited to 100 certificates)
preprod-iisfarm.richemont.com
careers.richemont.com
booster2.richemont.com
intranet.richemont.com
intranet.richemont.com
richemont.com
xsrna.richemont.com
xs.richemont.com
intranet.richemont.com
dam.richemont.com
intranet.richemont.com
belenus.richemont.com
collaboration.richemont.com
apps2013.richemont.com
linemedia.preprod.richemont.com
api-booster.richemont.com
preprod-apps2016.richemont.com
linemedia.preprod.richemont.com
media.richemont.com
vo1webdisp.richemont.com
wwsip.richemont.com
spark.nprd.val.elb.richemont.com
careers.richemont.com
booster.richemont.com
apps.richemont.com
www.richemont.com
preprod-apps2016.richemont.com
owa.richemont.com
intranet.richemont.com
preprod-apps2016.richemont.com
booster.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
antispam.richemont.com
svn.richemont.com
apps2016.richemont.com
intranet.richemont.com
launchpad.richemont.com
visionnaire.richemont.com
epm-mobile.richemont.com
intranet.richemont.com
mdm.richemont.com
richemont.com
epm-mobile.richemont.com
eusip.richemont.com
www.quality.alange-soehne.com
jobs.richemont.com
jenkins-aws.richemont.com
search.richemont.com
launchpad.richemont.com
cyberjourney.richemont.com
api-booster.richemont.com
linemedia.preprod.richemont.com
admin.pre-booster.richemont.com
pre-booster.richemont.com
owa-sso.richemont.com
id-sso.richemont.com
scn01.richemont.com
intranet.preprod.richemont.com
owa-nosso.richemont.com
linemedia.preprod.richemont.com
epm-mobile.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
owa-nosso.richemont.com
careers.richemont.com
amer-ra.richemont.com
media.richemont.com
iisfarm.richemont.com
preprod-apps2013.richemont.com
emea-ra.richemont.com
xs4.richemont.com
inet.richemont.com
midgard.ch.richemont.com
aegis.ch.richemont.com
collaboration.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
apps2016.richemont.com
owa.richemont.com
fileexchange.richemont.com
creative-academy.com
agile.quality.richemont.com
secure.richemont.com
cs.richemont.com
www.quality.alange-soehne.com
richemont.com
richemont.com
owa.richemont.com
agile.richemont.com
preprod-iisfarm.richemont.com
careers.richemont.com
*.richemont.com
belenus.richemont.com
www.lcboutiquenet.com
*.mytandem.eu
intranet.staging.richemont.com

Certificate

The complete raw certificate details for linemedia.preprod.richemont.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eQUyNMCcuvXnCAuaiRb
JqB3wVYo1tXUGk7LCpk4otpLxwG+7/wHdm4m8D1qAOfyyNIKogVnzFQV1m1v3Cxh
P6Ea1PPw1YwthjLSUmt8dIQAsIcXGoTs+dCjAqrVd+01pMhiUkStNT9PhKa0QLtu
mUGPBIxD6+mZNNbX2+QUIkY9hf2RWVpkOOiwTa0/OnJlkizSAVbBy5+M1iRIGqMM
PknTLesZgLHuXBiCauj68F617LaQIwr1DCcdaDHN2YD2Q8sjSpT/h1UvzioPM1B5
sBKDDdkpBzdbHC+PabAxB2mXAUGmEh/uJppUa6VKHRGr+2fXnnFKXCTFqTGYGG3a
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10104755165388469490596757274485704492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Richemont International SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RIC Akamai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'linemedia.preprod.richemont.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27506183203948347525871549225726017971375773317557840766651914128108411896044847393432575999902828050433315001297141496825772337035400704315032418497514166305037492940235918582184573306966010365754945525789186939731435544091660748492028696723712347469305271200321107814754193831598993050681343658758502841352029029074553465423205363688981015978475923484357819123640299224196454953028166000232869306983497465397477830436927423740210877239196997100097134607597408229303394622069900430516469892315113045435966978051113237308406920007229414235936483612476622747700111523737764594287052662156552873524483510941499962284591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e68c766a01506c5621e746ccd22df3aa017596fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1389 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whenelegancemeetsart.quality.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weixin.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.panerai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weboutique.preprod.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcaballet.quality.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starcrm.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogerdubuis.quality.richemont.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productminisite.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.panerai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.weboutique.preprod.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master2017.quality.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovedeclaration.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llp.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linemedia.preprod.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatwallh5.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.llp.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceb.quality.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjexpo.quality.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astronomyphoto.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.piaget.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.panerai.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weboutique.preprod.cartier.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4810collection.quality.montblanc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2018cny.quality.vacheron-constantin.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001620b006b8d0000040300463044022061f63e8eea64bc2c105c662a15ff4ae81acd63e22ef74e25d3b718524e9e8f3b022002346449768b9a1b1e9fd9ff6cd2a311b532576d9be4e250fea87e481b3cc98d0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001620b006d3c00000403004730450220287520faa57122fe2c0bcfb81c401fc482262d156ee3d882fc85a8672bd7ef7702210080bffadbeddede553f39bbe8c31fee18153fec0b909b820d9efc627b1773a754
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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