*.usantotomas.edu.co

- Universidad Santo Tomás -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:0f:8d:dd:6b:2a:73:ff:5a:3f:5f:ef:a4:1b:d7:bb was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universidad Santo Tomás

Organization: Universidad Santo Tomás
Locality: Bogotá
Country: CO

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:0f:8d:dd:6b:2a:73:ff:5a:3f:5f:ef:a4:1b:d7:bb
Serial Number (int): 12043813777286514526386633176931620795
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5c:6c:95:70:d0:2f:bf:99:de:12:48:ee:30:4a:0c:e8:aa:00:07:c5
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 89:2e:37:8d:86:35:08:c7:22:88:00:46:98:b9:e1:5b:f7:ba:90:b0
Fingerprint (sha256): 86:9a:b4:99:f1:46:9d:97:2c:2c:3b:05:49:6c:4e:31:9c:bf:bb:3a:26:f2:6e:fc:c5:82:aa:93:76:a5:1f:03

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate *.usantotomas.edu.co

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.usantotomas.edu.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.usantotomas.edu.co
usantotomas.edu.co

Other certificates including the domain name usantotomas.edu.co

(limited to 100 certificates)
craibooklick.usantotomas.edu.co
*.crai-ustadigital.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
mesadeayuda.usantotomas.edu.co
zonedirector.usantotomas.edu.co
centrodesoporteacademico.usantotomas.edu.co
bucket.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
centrodesoporteacademico.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
mesadeayuda.usantotomas.edu.co
craibooklick.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
capacitacioncsa.usantotomas.edu.co
*.usantotomas.edu.co
craibooklick.usantotomas.edu.co
capacitacioncsa.usantotomas.edu.co
craibooklick.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.crai-ustadigital.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
craibooklick.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co

Certificate

The complete raw certificate details for *.usantotomas.edu.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHxDCCBqygAwIBAgIQCQ+N3Wsqc/9aP1/vpBvXuzANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA3MTkwMDAwMDBa
Fw0yMzA3MzEyMzU5NTlaMGExCzAJBgNVBAYTAkNPMRAwDgYDVQQHDAdCb2dvdMOh
MSEwHwYDVQQKDBhVbml2ZXJzaWRhZCBTYW50byBUb23DoXMxHTAbBgNVBAMMFCou
dXNhbnRvdG9tYXMuZWR1LmNvMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEA0gE0UNwJnTh4ccSnPUYboVDlro5IACOK2Ck0ppYdu7b1T7H9hNubl8amuq4N
BYt4lsHAqlddrB0DwfTRpPxWHCPQu5iguPR8MEHzWD7soUrkYVRGt9OgFcyAscKY
dxQEOMU8VJU5GiaLs/B3Q4+wi4jcqJ/IVl+RCPjXR2DZr7xuYWLntXfvDYI70oCS
LxcboHBePsPwLKJDGCI6+XkZNkpUvdPFmJEf0TZW8IVR6Kc2GiVkiLtcLXIl/CKM
q9uMGazW7P3JYU9SGnya4Q9CrK84XsWXqqW1bhgMZQvZPoM0MevetyFmEoRR+mTq
soKL5iuwcG3K7/hC0uoIkcEgz4EUfBJatPCfnX5lKkikKOCt0jdqPUhGyBlSZseU
UV7K572LDl8KmQL99rWI2J/uH40V1BHq3YEVHXEKONOprMVu70pSVkuVSFN6WEkv
t+rgRXxmdulQVnU0A3nwtbsevhqjrkDE8oxlh5PmeJ0jMqaglWpN+73FMLPWF8Z5
l9PgoiIVIyxHYk4DrveZ/E86FMhKm7cy9WaZ8BX7MkJq52H/hMy5843/qxkFJ/hF
vjpUDaxae/9eQ3aUYcseyW2is/LzNQJSwN/tZF3O5Y6LR7GWAPezXT2vE3PekaSv
YO55n85nwWo+zjdoZoeGeee7W6/zjY7Tc31iSoWwHCgrq6UCAwEAAaOCA4gwggOE
MB8GA1UdIwQYMBaAFLdrouqoqoSMeeq02g+YssWVdrn0MB0GA1UdDgQWBBRcbJVw
0C+/md4SSO4wSgzoqgAHxTAzBgNVHREELDAqghQqLnVzYW50b3RvbWFzLmVkdS5j
b4ISdXNhbnRvdG9tYXMuZWR1LmNvMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwgY8GA1UdHwSBhzCBhDBAoD6gPIY6aHR0cDov
L2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00
LmNybDBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExT
UlNBU0hBMjU2MjAyMENBMS00LmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcG
CCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwfwYIKwYBBQUH
AQEEczBxMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSQYI
KwYBBQUHMAKGPWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRM
U1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwCQYDVR0TBAIwADCCAX4GCisGAQQB1nkC
BAIEggFuBIIBagFoAHYA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4A
AAGCGIrc/AAABAMARzBFAiBSbUfkEXB8bfaqNLPyKMStRliZsNLGqGv3mPOGMi8e
jwIhAOOUoR9PQp7yHY65Uy5g8YQDTZdmVwiJdX/cklvCaB2TAHYANc8ZG7+xbFe/
D61MbULLu7YnICZR6j/hKu+oA8M71kwAAAGCGIrc8gAABAMARzBFAiA9HODA6lTV
4HVVvzg7AiywIBzYXzKLBK6d7w8krn/fQAIhAO55j08LS1rrzXUIN4LjK1hWBq09
X5loE6wJjT+e/tIwAHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkA
AAGCGIrc8QAABAMARzBFAiApP12yxIMUUsmg2RuuAlOiLUWEIlpusMTGN8eAQl5I
7gIhAJ1JkyDrnu8GguKnVrnDF3pehs4Bm8R1O/754Rb/cuDCMA0GCSqGSIb3DQEB
CwUAA4IBAQAdteaup3cICV7ha96Kx3YdL02xgs3Thtg40UUksuKvQ5Nz556nFVsp
Yaog49PIdkefLC87D2hsar9jVR7KVBndT7ebAKDsqRri8OU7yzTuZi4JKB0Bn/U7
5RT7//WAvchI24vCUGqckxlmk1S/EtHGqzlLYfc0aAWEskRKv5ulYjvEb0wmT2Ov
AQEYcUVzG7lXmLDuG281R8D+/V9Pb1IiUn3xvmfXrXlCeqA65Ra5wm+F4ItVl8A5
I0hDn1i1ICTXfZclIqRdpkykgvsZVVxGDvXPgeuwTiUcP3T0u8prNkW1vqDnibQt
rboPgU4tmyyH57deEnVSMz178Ld6B77W
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0gE0UNwJnTh4ccSnPUYb
oVDlro5IACOK2Ck0ppYdu7b1T7H9hNubl8amuq4NBYt4lsHAqlddrB0DwfTRpPxW
HCPQu5iguPR8MEHzWD7soUrkYVRGt9OgFcyAscKYdxQEOMU8VJU5GiaLs/B3Q4+w
i4jcqJ/IVl+RCPjXR2DZr7xuYWLntXfvDYI70oCSLxcboHBePsPwLKJDGCI6+XkZ
NkpUvdPFmJEf0TZW8IVR6Kc2GiVkiLtcLXIl/CKMq9uMGazW7P3JYU9SGnya4Q9C
rK84XsWXqqW1bhgMZQvZPoM0MevetyFmEoRR+mTqsoKL5iuwcG3K7/hC0uoIkcEg
z4EUfBJatPCfnX5lKkikKOCt0jdqPUhGyBlSZseUUV7K572LDl8KmQL99rWI2J/u
H40V1BHq3YEVHXEKONOprMVu70pSVkuVSFN6WEkvt+rgRXxmdulQVnU0A3nwtbse
vhqjrkDE8oxlh5PmeJ0jMqaglWpN+73FMLPWF8Z5l9PgoiIVIyxHYk4DrveZ/E86
FMhKm7cy9WaZ8BX7MkJq52H/hMy5843/qxkFJ/hFvjpUDaxae/9eQ3aUYcseyW2i
s/LzNQJSwN/tZF3O5Y6LR7GWAPezXT2vE3PekaSvYO55n85nwWo+zjdoZoeGeee7
W6/zjY7Tc31iSoWwHCgrq6UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12043813777286514526386633176931620795
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bogotá'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universidad Santo Tomás'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.usantotomas.edu.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856744447078403202327912722461892784964503769809304594247954214697092132431014241443070298630337160829017547754926743609626285041096583058175678704154289776399756476456295067321337628194507689992540859316760871820375066995979470175460478116089227427425673723007064259092006774843066237498251524994843831693172858397228905990294754549963973057209722169773691383397042899096128474019336306777296862068475966496756430906631280159598099433965193942821640853228207262361567817032835332182871405731115112382730874157504706892759980191734546719309469245341356225636050931092295085128879686860870115716332904959872129389729177947121641524860701142793588102331463318519124259102529960759490870270390355903812814556181951314458491253007716268924842114968542145745043005744464157835871819204810360342647257920437654853718995133616778684122362122517141860539969421983957527517760508281898634573200529962478743287663123012925129584172673311098985991412922260699127655413243977089904391388603023646525671143104706900208488209477903960093588149356239379302055162675607723460926890689437210357146310800514529840759386240869703186668455970431589376034875458627428571458925014918372083671983992949501167502031813329268244203635727211895668316564073381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c6c9570d02fbf99de1248ee304a0ce8aa0007c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usantotomas.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usantotomas.edu.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001db5e6aea77708095ee16bde8ac7761d2f4db182cdd386d838d14524b2e2af439373e79ea7155b2961aa20e3d3c876479f2c2f3b0f686c6abf63551eca5419dd4fb79b00a0eca91ae2f0e53bcb34ee662e09281d019ff53be514fbfff580bdc848db8bc2506a9c9319669354bf12d1c6ab394b61f734680584b2444abf9ba5623bc46f4c264f63af0101187145731bb95798b0ee1b6f3547c0fefd5f4f6f5222527df1be67d7ad79427aa03ae516b9c26f85e08b5597c0392348439f58b52024d77d972522a45da64ca482fb19555c460ef5cf81ebb04e251c3f74f4bbca6b3645b5bea0e789b42dadba0f814e2d9b2c87e7b75e127552333d7bf0b77a07bed6